Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa
File: af6fa4e3-42aa-3436-a412-9f9c477db93d.roa (raw, json)
Hash identifier: +IInDWNZEirRi8gpZmqCxhF0cpoBZcZqekJae1/h4Vw=
Subject key identifier: 4E:D9:BF:14:48:1F:AD:08:28:E1:E7:3B:33:50:C6:60:0D:9C:43:27
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C719DA5B75175672C9500
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:71:9d:a5:b7:51:75:67:2c:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=0df6ba29-e780-4263-907e-2636d6a97ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:28:24:6b:29:14:94:e6:31:d7:cd:3c:e8:
2a:62:e9:17:52:2a:4f:01:1d:52:ae:c6:5b:63:ff:
a9:07:58:1c:2a:8f:47:43:c7:dd:e8:4f:8a:b9:91:
60:90:9f:83:80:30:91:61:f4:ad:b3:e3:48:0d:4f:
5f:c8:00:a5:cf:9b:4f:a9:f4:42:10:8d:b5:92:b8:
17:84:fa:7a:cc:de:70:a5:fb:dd:e6:38:3e:7d:c3:
38:27:1e:43:7f:ed:e2:de:47:1a:7c:b2:b4:b2:8d:
91:ea:ea:bb:cf:db:7d:65:46:ba:3e:12:f1:7c:1b:
ce:7a:ba:21:f1:4d:1b:bf:3c:06:b3:45:c1:ab:c8:
4d:36:78:05:5a:53:bf:e2:64:5a:dd:bd:03:9f:d9:
ad:e0:9e:f0:45:24:4b:31:dc:30:aa:c3:65:54:84:
9c:e5:44:54:87:bf:74:d9:d7:e9:8d:bc:0d:36:a4:
72:b3:ae:9a:94:02:eb:58:b1:86:28:47:6f:35:53:
e4:5b:54:92:b5:45:f3:52:20:be:26:8d:03:0f:8f:
d5:43:18:94:23:52:dc:99:11:78:21:54:74:76:2e:
6e:80:6a:47:c3:8e:1f:d0:4f:12:23:1a:a4:13:75:
6c:81:4f:6c:29:1a:1d:a6:5d:1a:20:cc:aa:1d:b3:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:BF:14:48:1F:AD:08:28:E1:E7:3B:33:50:C6:60:0D:9C:43:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/af6fa4e3-42aa-3436-a412-9f9c477db93d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:60:fc:b2:24:bb:32:e4:ce:d1:3b:d6:d6:c8:cd:cb:65:d3:
ef:6a:08:b8:06:25:86:04:54:b0:66:a5:b2:23:a7:31:ad:39:
4f:a0:3d:df:0e:b4:4f:e5:1c:3a:a2:2b:6e:c8:05:ad:44:70:
55:52:76:6c:ba:8e:4c:e1:67:93:f3:fc:a2:5a:72:c7:c8:cc:
05:c3:25:12:2f:1f:fc:cb:47:50:37:b8:f1:e3:91:31:95:36:
e5:b4:66:83:6a:d3:93:76:e7:e0:8a:7b:3c:84:ee:f6:11:f7:
f8:cd:19:46:5e:33:b7:94:14:62:27:9f:c3:ea:29:7c:ce:4f:
35:48:d8:d8:25:6b:c3:66:aa:be:54:5c:ec:b1:e4:0a:cc:e4:
7f:eb:b8:0a:8a:42:d0:66:f1:b7:14:b5:da:52:cd:c0:84:61:
51:7b:2a:2f:82:f3:14:23:4c:8d:26:f4:11:b2:c8:2e:fa:b4:
e4:94:82:22:27:ea:a5:be:93:b1:df:c9:21:fa:90:23:a5:66:
86:e8:dc:b8:17:f4:42:8e:45:5f:47:b3:f9:8c:0f:43:a6:db:
ba:d6:2a:da:c1:d4:d3:68:63:20:32:b7:68:da:1b:55:cb:a2:
bd:77:26:41:34:6c:84:1a:f0:95:c8:36:d6:13:91:1c:51:d0:
e5:46:ee:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHGdpbdRdWcslQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGRmNmJhMjktZTc4MC00MjYzLTkwN2UtMjYzNmQ2YTk3ZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aMoJGspFJTmMdfNPOgqYukXUipPAR1SrsZb
Y/+pB1gcKo9HQ8fd6E+KuZFgkJ+DgDCRYfSts+NIDU9fyAClz5tPqfRCEI21krgX
hPp6zN5wpfvd5jg+fcM4Jx5Df+3i3kcafLK0so2R6uq7z9t9ZUa6PhLxfBvOeroh
8U0bvzwGs0XBq8hNNngFWlO/4mRa3b0Dn9mt4J7wRSRLMdwwqsNlVISc5URUh790
2dfpjbwNNqRys66alALrWLGGKEdvNVPkW1SStUXzUiC+Jo0DD4/VQxiUI1LcmRF4
IVR0di5ugGpHw44f0E8SIxqkE3VsgU9sKRodpl0aIMyqHbNhPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7ZvxRIH60IKOHnOzNQxmANnEMnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYWY2ZmE0ZTMtNDJhYS0z
NDM2LWE0MTItOWY5YzQ3N2RiOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1uIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVg/LIkuzLkztE71tbIzctl0+9qCLgGJYYEVLBmpbIjpzGtOU+gPd8O
tE/lHDqiK27IBa1EcFVSdmy6jkzhZ5Pz/KJacsfIzAXDJRIvH/zLR1A3uPHjkTGV
NuW0ZoNq05N25+CKezyE7vYR9/jNGUZeM7eUFGInn8PqKXzOTzVI2Ngla8Nmqr5U
XOyx5ArM5H/ruAqKQtBm8bcUtdpSzcCEYVF7Ki+C8xQjTI0m9BGyyC76tOSUgiIn
6qW+k7HfySH6kCOlZobo3LgX9EKORV9Hs/mMD0Om27rWKtrB1NNoYyAyt2jaG1XL
or13JkE0bIQa8JXINtYTkRxR0OVG7oE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:16:00 2025 by rpki-client