Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa
File: 7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa (raw, json)
Hash identifier: FBZQc33Is2t+ngG0NopBDL5/8WYwqLVqJEQLBUKkK3M=
Subject key identifier: B9:99:AB:10:DA:89:AC:31:B9:52:92:65:8B:8E:99:94:75:60:F4:E6
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6F230D488795AA56D8A20
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:f2:30:d4:88:79:5a:a5:6d:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=a937481a-98b7-45c9-a55c-546aa21c63cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:ed:93:78:52:61:95:9d:0b:f8:2b:d6:39:
b7:d2:df:94:81:21:0e:a7:4f:db:a7:cf:f4:81:c2:
1c:5c:d4:5d:65:70:5c:d6:95:21:2c:3c:7d:e7:23:
68:d6:fb:3e:89:fe:a6:31:fc:33:a1:8e:60:20:31:
77:a1:3f:51:df:fe:74:99:9f:cc:b3:35:fe:cd:46:
36:ff:c4:c0:b6:c0:13:fe:06:e0:5d:96:1a:9b:80:
62:c3:1d:22:98:a6:38:7b:d5:6a:c8:03:85:69:cf:
2d:8f:80:a4:bb:65:80:e2:c3:63:cb:51:68:0c:ac:
b4:be:0f:4f:d8:83:b4:25:3f:79:44:22:5a:7e:f4:
e5:57:1a:7f:30:16:6b:bd:a7:ea:1d:b1:fb:1f:31:
ab:d4:66:3e:da:3a:03:b2:6d:9b:96:3f:e7:6f:d1:
4b:af:87:41:aa:f7:ef:4d:09:e8:1a:de:ac:e3:cc:
ea:6c:4c:06:ed:0f:5f:cd:ef:1c:37:50:ce:20:c1:
ba:e0:b8:da:5e:af:09:d0:d1:d8:df:f6:35:8d:1a:
ad:25:96:34:01:08:6b:d4:ab:d3:5c:87:91:98:25:
b8:1b:f7:01:1a:a1:5d:3f:c7:47:c2:f5:c4:4e:b7:
42:2f:35:10:77:87:23:17:e4:4a:43:28:8b:fc:39:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:AB:10:DA:89:AC:31:B9:52:92:65:8B:8E:99:94:75:60:F4:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ab59d95-28bf-3f3d-8fc2-36b6cefa8d20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ac:87:f3:ca:e9:a9:8c:6b:d2:de:71:16:83:04:8f:9e:98:
b9:57:ef:c1:ff:f0:0b:d0:bf:41:e1:4b:0e:0e:72:2a:ba:bc:
89:5b:13:66:c1:d8:4f:9d:87:61:08:d8:fb:d7:b9:82:e9:4e:
a2:e6:de:cc:cb:32:18:34:40:30:da:10:d8:89:c5:22:74:dc:
cc:92:97:dc:1e:89:4e:39:3b:3f:55:44:e6:f0:43:a5:43:5c:
ba:5b:84:b8:78:d2:7e:0f:2f:68:e8:eb:77:64:eb:63:9e:09:
1e:ae:52:ec:6e:44:83:6e:28:2e:9f:a1:ee:bb:d3:1d:e0:fd:
b3:fe:a2:30:16:a4:6e:de:56:57:24:f1:8e:aa:ef:5c:d1:b7:
85:78:de:b1:27:33:17:aa:d0:b0:55:25:d2:50:30:7f:32:ca:
34:0b:4f:06:e5:b5:4c:45:f6:c6:d8:78:a4:e5:74:df:9d:49:
62:b6:f3:2b:6d:0b:bc:d2:88:79:1e:20:11:6c:41:4b:b7:de:
cc:62:8c:18:c4:58:c8:16:cc:ac:cb:71:ea:7d:c6:a2:1a:53:
b5:04:4a:82:ad:e6:6b:02:86:72:fb:41:63:c8:e8:bf:ca:16:
6d:9b:08:c4:12:b1:5b:ed:f4:51:95:ee:21:9a:11:f3:dc:fc:
57:67:36:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vIw1Ih5WqVtiiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
YTkzNzQ4MWEtOThiNy00NWM5LWE1NWMtNTQ2YWEyMWM2M2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Xtk3hSYZWdC/gr1jm30t+UgSEOp0/bp8/0
gcIcXNRdZXBc1pUhLDx95yNo1vs+if6mMfwzoY5gIDF3oT9R3/50mZ/MszX+zUY2
/8TAtsAT/gbgXZYam4Biwx0imKY4e9VqyAOFac8tj4Cku2WA4sNjy1FoDKy0vg9P
2IO0JT95RCJafvTlVxp/MBZrvafqHbH7HzGr1GY+2joDsm2blj/nb9FLr4dBqvfv
TQnoGt6s48zqbEwG7Q9fze8cN1DOIMG64LjaXq8J0NHY3/Y1jRqtJZY0AQhr1KvT
XIeRmCW4G/cBGqFdP8dHwvXETrdCLzUQd4cjF+RKQyiL/DmpQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmZqxDaiawxuVKSZYuOmZR1YPTmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiNTlkOTUtMjhiZi0z
ZjNkLThmYzItMzZiNmNlZmE4ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESsh/PK6amMa9LecRaDBI+emLlX78H/8AvQv0HhSw4Ociq6vIlbE2bB
2E+dh2EI2PvXuYLpTqLm3szLMhg0QDDaENiJxSJ03MySl9weiU45Oz9VRObwQ6VD
XLpbhLh40n4PL2jo63dk62OeCR6uUuxuRINuKC6foe670x3g/bP+ojAWpG7eVlck
8Y6q71zRt4V43rEnMxeq0LBVJdJQMH8yyjQLTwbltUxF9sbYeKTldN+dSWK28ytt
C7zSiHkeIBFsQUu33sxijBjEWMgWzKzLcep9xqIaU7UESoKt5msChnL7QWPI6L/K
Fm2bCMQSsVvt9FGV7iGaEfPc/FdnNvs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:18:41 2025 by rpki-client