Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fac818ab-a461-30cc-9a48-be26ce04d29d.roa
File: fac818ab-a461-30cc-9a48-be26ce04d29d.roa (raw, json)
Hash identifier: IQGuf8sM9uWzVqv7k53fsWiD8NH7ZCGOuKkS6G6W/yw=
Subject key identifier: E3:9E:28:7B:9C:01:4A:77:5B:72:82:E0:49:51:43:B8:5B:22:D6:48
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B41200DC9CF729641E7480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fac818ab-a461-30cc-9a48-be26ce04d29d.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 25946
IP address blocks: 199.243.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:12:00:dc:9c:f7:29:64:1e:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=1b15d471-dd87-457d-87ac-0838bfc667ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:96:03:cd:ca:b7:70:ad:c7:c5:72:c9:8a:
2f:33:3e:e9:32:c2:da:86:a9:56:de:5a:e7:fb:71:
79:ba:ca:33:98:a1:42:82:e6:d3:4f:c1:96:5d:9b:
7e:b7:d1:32:6c:37:eb:74:32:fb:4e:df:d4:c6:2d:
9b:7e:9f:3f:d3:4f:71:c8:b9:48:75:d0:e1:c0:aa:
8e:08:e4:9b:23:ff:0f:c6:93:9c:f5:a2:d2:36:cf:
0c:36:7b:6a:5e:71:0b:14:91:3a:ab:b8:51:76:8a:
af:44:6c:36:b2:e8:78:45:9b:79:ab:ab:1e:6a:8e:
a6:a8:d1:05:46:dc:14:46:1c:3b:df:fa:7e:87:47:
02:f0:81:0f:04:70:ff:eb:cd:3f:57:3d:b7:e7:d5:
8d:24:c7:2b:9f:e3:87:d9:bb:a7:a8:a4:c9:ef:f8:
6d:f5:e6:ac:f7:30:9d:e1:9b:42:24:5e:d3:12:04:
ce:e7:45:1a:17:01:68:eb:9f:23:c9:30:b6:8c:87:
0e:9f:e1:37:46:1c:25:b8:3c:01:7d:f5:73:94:2e:
51:8c:e9:ac:f0:41:aa:3c:b6:b3:17:fe:57:23:7b:
c4:a0:e5:97:72:32:6a:de:fd:fc:c7:04:32:37:46:
77:65:56:2a:34:5b:7c:ff:bf:c5:fd:e2:cd:c5:33:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:28:7B:9C:01:4A:77:5B:72:82:E0:49:51:43:B8:5B:22:D6:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fac818ab-a461-30cc-9a48-be26ce04d29d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:a5:2c:6e:a0:a2:db:f8:b1:20:b2:b5:29:d8:61:49:d4:17:
29:ad:a9:17:f6:df:00:6a:33:c9:63:cf:af:4b:98:5d:4f:ff:
3a:c8:3f:cf:86:21:33:59:a3:b5:2f:da:a5:1b:2f:96:35:dd:
5f:e9:87:80:1a:f9:7d:6e:cf:9f:79:f1:8c:82:23:95:25:36:
5a:66:5f:85:d0:6c:ca:bf:6e:2f:fe:9e:56:42:0e:c2:fd:f3:
a5:15:99:15:6e:d5:08:be:e1:ed:bc:78:10:1f:9b:c3:be:03:
22:97:d2:41:37:2b:9b:87:4f:03:83:1b:7b:c0:d2:0d:36:dd:
bf:9d:35:bd:eb:65:be:08:2e:ca:b5:a0:06:6a:a1:f2:7f:6a:
7b:05:0e:5a:89:11:14:6a:30:91:f3:7a:af:71:23:1e:78:06:
7c:4c:10:9e:fc:a9:b5:c5:ce:24:20:8b:5d:a1:79:a9:67:8f:
32:fd:b2:00:06:dd:0e:fc:29:10:88:d3:ca:79:83:89:99:4e:
17:f5:d4:be:e7:76:89:91:fd:4d:0f:be:09:77:f6:27:fe:98:
c7:01:ed:7c:e4:52:fc:9a:05:1f:94:3d:0f:f6:92:b5:ee:0a:
c8:80:af:0a:a4:8c:91:af:7b:c3:f8:09:9f:4e:1c:35:9e:63:
27:ce:86:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtBIA3Jz3KWQedIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MWIxNWQ0NzEtZGQ4Ny00NTdkLTg3YWMtMDgzOGJmYzY2N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyiWA83Kt3Ctx8VyyYovMz7pMsLahqlW3lrn
+3F5usozmKFCgubTT8GWXZt+t9EybDfrdDL7Tt/Uxi2bfp8/009xyLlIddDhwKqO
COSbI/8PxpOc9aLSNs8MNntqXnELFJE6q7hRdoqvRGw2suh4RZt5q6seao6mqNEF
RtwURhw73/p+h0cC8IEPBHD/680/Vz2359WNJMcrn+OH2bunqKTJ7/ht9eas9zCd
4ZtCJF7TEgTO50UaFwFo658jyTC2jIcOn+E3RhwluDwBffVzlC5RjOms8EGqPLaz
F/5XI3vEoOWXcjJq3v38xwQyN0Z3ZVYqNFt8/7/F/eLNxTMDwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOeKHucAUp3W3KC4ElRQ7hbItZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZmFjODE4YWItYTQ2MS0z
MGNjLTlhNDgtYmUyNmNlMDRkMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/PhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWlLG6gotv4sSCytSnYYUnUFymtqRf23wBqM8ljz69LmF1P/zrIP8+G
ITNZo7Uv2qUbL5Y13V/ph4Aa+X1uz5958YyCI5UlNlpmX4XQbMq/bi/+nlZCDsL9
86UVmRVu1Qi+4e28eBAfm8O+AyKX0kE3K5uHTwODG3vA0g023b+dNb3rZb4ILsq1
oAZqofJ/ansFDlqJERRqMJHzeq9xIx54BnxMEJ78qbXFziQgi12healnjzL9sgAG
3Q78KRCI08p5g4mZThf11L7ndomR/U0Pvgl39if+mMcB7XzkUvyaBR+UPQ/2krXu
CsiArwqkjJGve8P4CZ9OHDWeYyfOhi8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:31 2025 by rpki-client