Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa
File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json)
Hash identifier: gIrABzNfBOzo+U4XVlV0hPiLtSE8sDdsLxLmwlHQFDA=
Subject key identifier: 7E:E7:F3:E0:97:99:F6:7C:AD:36:B7:42:46:B5:2B:2F:72:A6:EF:EE
Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Certificate serial: 010D0C9F4328584902EC0347C5C3311FBBA0C180
Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 198.99.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:03:47:c5:c3:31:1f:bb:a0:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=8d710b72-d7c9-440c-b106-5686cc896048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:fb:c3:e7:5d:60:ee:f1:5d:09:e5:06:c0:
4e:40:c5:33:3d:e8:d9:74:a2:3d:62:80:de:c7:8e:
6e:10:74:32:cc:b5:8b:2e:a3:ad:9c:8e:c8:a3:b9:
a0:9b:2f:5f:8f:c9:27:99:3f:79:cd:44:33:f3:d5:
aa:fd:35:17:1f:57:31:f4:4a:36:d7:bd:3f:87:ba:
54:1a:16:23:85:25:52:21:f3:48:d3:c0:58:1e:ad:
cd:8a:d3:eb:d0:23:b1:c6:18:55:7b:00:17:62:e2:
f3:50:49:37:f3:79:c9:dc:90:20:4e:24:18:a1:89:
98:93:0b:07:07:76:29:84:71:19:ae:78:06:18:23:
ff:76:52:a6:55:ea:4c:22:70:df:90:e2:2d:eb:a9:
1d:f7:06:c4:36:18:27:a5:9d:76:cc:ee:71:8a:21:
6d:df:47:c2:5a:d2:4e:a1:0d:d4:e7:39:a5:19:0a:
7e:f1:ab:24:db:a7:41:6f:64:be:28:b4:a8:62:73:
75:4d:fb:03:a2:0b:01:49:9d:fb:a3:36:d9:60:c1:
63:6f:ff:08:14:56:ae:6c:22:4d:e3:5d:17:ed:36:
29:bd:1d:60:e8:7b:18:fd:11:b4:02:26:59:bd:99:
7c:12:93:12:88:a3:2c:47:1c:fa:42:c2:ac:6b:bc:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:F3:E0:97:99:F6:7C:AD:36:B7:42:46:B5:2B:2F:72:A6:EF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl
X509v3 Authority Key Identifier:
keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:6b:aa:04:2c:22:5d:86:c9:d1:67:72:e5:e6:9f:a7:7a:e4:
2e:a1:0b:75:4d:ea:3e:75:0a:88:04:c7:71:ca:90:dc:88:b0:
30:22:dc:95:86:a4:26:07:21:2e:15:d0:dd:ee:90:1d:47:cd:
e5:84:e4:53:33:bb:d9:d0:9f:9c:91:f9:ca:08:6d:ab:5a:e0:
9b:ed:fb:a0:ae:85:1d:e5:97:14:06:d7:b1:cd:d6:cb:2b:58:
56:06:9e:1d:02:61:bc:29:eb:5c:75:3c:9a:62:4d:1a:36:22:
95:cf:66:1c:af:83:74:32:ce:c2:d3:40:b4:90:82:56:07:94:
87:f0:6f:08:aa:5f:cb:6a:56:47:85:39:c3:bb:7f:54:ca:29:
ff:c3:3c:16:d7:7f:6d:d3:46:af:21:09:a4:b3:cc:a2:a9:09:
3a:e2:89:9b:11:bb:6c:a6:f9:84:7c:7c:90:29:b3:f9:7e:90:
29:c1:ee:c5:24:61:c0:d1:63:fc:4a:5d:33:c4:d9:cb:dd:fd:
5c:d7:94:ed:2e:8a:7c:90:69:da:ea:2a:fd:cb:03:ea:05:99:
c0:c7:46:28:ce:28:12:78:aa:ab:70:dd:27:0c:4f:3b:5d:89:
66:89:a7:75:f5:94:a0:fe:46:5e:ac:d9:b7:be:b3:66:fc:7e:
7d:3d:48:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7ANHxcMxH7ugwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh
YjU1MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
OGQ3MTBiNzItZDdjOS00NDBjLWIxMDYtNTY4NmNjODk2MDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAv7w+ddYO7xXQnlBsBOQMUzPejZdKI9YoDe
x45uEHQyzLWLLqOtnI7Io7mgmy9fj8knmT95zUQz89Wq/TUXH1cx9Eo2170/h7pU
GhYjhSVSIfNI08BYHq3NitPr0COxxhhVewAXYuLzUEk383nJ3JAgTiQYoYmYkwsH
B3YphHEZrngGGCP/dlKmVepMInDfkOIt66kd9wbENhgnpZ12zO5xiiFt30fCWtJO
oQ3U5zmlGQp+8ask26dBb2S+KLSoYnN1TfsDogsBSZ37ozbZYMFjb/8IFFaubCJN
410X7TYpvR1g6HsY/RG0AiZZvZl8EpMSiKMsRxz6QsKsa7wkQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7n8+CXmfZ8rTa3Qka1Ky9ypu/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm
ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z
YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4
MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0
YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz
Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxrqgQsIl2GydFncuXmn6d65C6hC3VN6j51CogEx3HKkNyIsDAi3JWG
pCYHIS4V0N3ukB1HzeWE5FMzu9nQn5yR+coIbata4Jvt+6CuhR3llxQG17HN1ssr
WFYGnh0CYbwp61x1PJpiTRo2IpXPZhyvg3QyzsLTQLSQglYHlIfwbwiqX8tqVkeF
OcO7f1TKKf/DPBbXf23TRq8hCaSzzKKpCTriiZsRu2ym+YR8fJAps/l+kCnB7sUk
YcDRY/xKXTPE2cvd/VzXlO0uinyQadrqKv3LA+oFmcDHRijOKBJ4qqtw3ScMTztd
iWaJp3X1lKD+Rl6s2be+s2b8fn09SN0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:11 2025 by rpki-client