Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f46c78de-a052-3d3c-894e-a9678bc79613.roa
File: f46c78de-a052-3d3c-894e-a9678bc79613.roa (raw, json)
Hash identifier: nJw3XNweY1xwilbJcU1Ob/ELuqBqN6jl9t/Dnqt8A2o=
Subject key identifier: 77:73:D2:1B:0B:20:38:B0:C7:84:72:CA:DC:2B:3E:29:44:C2:87:4E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F927E8FB20D994B21D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f46c78de-a052-3d3c-894e-a9678bc79613.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397223
IP address blocks: 199.7.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f9:27:e8:fb:20:d9:94:b2:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=adc24de3-6e30-4bc4-89e3-c36c3164e669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:a3:e2:8f:c6:16:58:95:d7:a3:b0:45:a0:
b8:a1:d6:76:6d:56:0d:41:2b:60:14:88:39:ea:fa:
c0:91:a2:bb:c2:82:22:47:16:cc:13:df:5c:5b:dc:
39:1f:91:4b:2e:c6:e0:ae:2d:37:b7:ee:8e:e7:a8:
84:ee:f4:97:f4:4a:53:6b:91:e5:0d:40:05:a3:08:
d8:5f:c4:69:37:91:90:10:89:02:4e:d8:d6:dc:ee:
1b:ec:42:f2:85:72:5f:96:73:61:9b:6d:8c:7c:31:
3b:49:54:d9:ff:85:cc:fe:54:ed:d3:8a:fa:96:f8:
42:75:bd:78:ef:e7:6d:f3:1b:92:c8:18:47:68:24:
80:14:f4:f6:b8:97:9b:5a:f7:2c:7e:30:d3:5b:af:
47:08:cb:1f:50:35:69:ec:aa:f3:bc:af:53:19:db:
43:aa:17:a8:93:50:91:1a:b5:a8:4b:ce:05:cf:62:
ec:91:6d:bf:1d:8c:f7:ab:46:ac:1c:ae:d3:c4:49:
12:58:89:bb:76:1c:07:a7:51:6e:aa:77:b7:4b:9e:
22:c0:e0:13:26:e7:f6:28:04:c7:59:be:94:f6:de:
3b:49:19:69:51:13:14:42:66:ec:27:df:f6:4f:3c:
af:48:35:6d:af:bb:5b:c3:73:cd:da:dc:62:8e:0c:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:73:D2:1B:0B:20:38:B0:C7:84:72:CA:DC:2B:3E:29:44:C2:87:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f46c78de-a052-3d3c-894e-a9678bc79613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6d:37:1e:9c:d2:93:70:95:bd:0b:0b:96:76:8e:a8:fc:09:
bc:e3:40:64:53:f0:96:36:3b:e3:49:30:c7:19:ff:39:3f:5e:
48:30:e2:a8:a0:00:55:46:e2:67:f1:3d:72:2a:cc:17:13:34:
63:ed:44:c7:ee:17:5d:0c:cd:1b:6b:c3:5e:56:f2:a3:76:2e:
52:7b:9c:19:6f:d8:77:44:dc:16:ad:c5:6b:ee:a0:25:4e:e5:
45:07:81:71:18:27:0e:a9:11:43:c9:a3:dd:39:03:46:a6:73:
66:3f:d4:a2:4c:6f:46:12:63:48:ec:e4:01:64:36:30:ef:c1:
83:82:7f:4c:3d:49:af:46:9d:36:4e:55:60:fe:6f:3e:3d:0f:
02:ca:fa:37:ba:c1:55:38:2c:d2:6e:81:12:cb:01:d8:8a:f8:
79:57:b9:97:26:fb:68:34:b8:45:bf:3b:3d:50:ac:e6:a6:19:
df:44:51:24:fe:a1:64:7b:ab:ed:bf:54:35:e6:d0:ae:0f:14:
b7:47:c4:25:ef:ec:90:56:69:9d:69:8c:28:a7:e4:65:51:b5:
fa:a9:fb:66:4a:d2:96:20:d5:32:81:b7:ad:c8:7e:6b:29:ae:
6d:33:c9:2e:86:97:1b:eb:ee:80:f5:79:e9:17:18:04:74:02:
a5:8d:10:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPkn6Psg2ZSyHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
YWRjMjRkZTMtNmUzMC00YmM0LTg5ZTMtYzM2YzMxNjRlNjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv92j4o/GFliV16OwRaC4odZ2bVYNQStgFIg5
6vrAkaK7woIiRxbME99cW9w5H5FLLsbgri03t+6O56iE7vSX9EpTa5HlDUAFowjY
X8RpN5GQEIkCTtjW3O4b7ELyhXJflnNhm22MfDE7SVTZ/4XM/lTt04r6lvhCdb14
7+dt8xuSyBhHaCSAFPT2uJebWvcsfjDTW69HCMsfUDVp7KrzvK9TGdtDqheok1CR
GrWoS84Fz2LskW2/HYz3q0asHK7TxEkSWIm7dhwHp1Fuqne3S54iwOATJuf2KATH
Wb6U9t47SRlpURMUQmbsJ9/2TzyvSDVtr7tbw3PN2txijgzQ0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdz0hsLIDiwx4RyytwrPilEwodOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjQ2Yzc4ZGUtYTA1Mi0z
ZDNjLTg5NGUtYTk2NzhiYzc5NjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVtNx6c0pNwlb0LC5Z2jqj8CbzjQGRT8JY2O+NJMMcZ/zk/Xkgw4qig
AFVG4mfxPXIqzBcTNGPtRMfuF10MzRtrw15W8qN2LlJ7nBlv2HdE3BatxWvuoCVO
5UUHgXEYJw6pEUPJo905A0amc2Y/1KJMb0YSY0js5AFkNjDvwYOCf0w9Sa9GnTZO
VWD+bz49DwLK+je6wVU4LNJugRLLAdiK+HlXuZcm+2g0uEW/Oz1QrOamGd9EUST+
oWR7q+2/VDXm0K4PFLdHxCXv7JBWaZ1pjCin5GVRtfqp+2ZK0pYg1TKBt63Ifmsp
rm0zyS6Glxvr7oD1eekXGAR0AqWNEOQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:47 2025 by rpki-client