Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/50c74bb3-d4ea-355d-813d-e86559fc98de.roa
File: 50c74bb3-d4ea-355d-813d-e86559fc98de.roa (raw, json)
Hash identifier: i1jcyAbWre5z/pXH3ThSt+bVGZm60HThW7gTzMMpjdw=
Subject key identifier: 21:19:63:AD:E8:CD:31:76:88:28:C4:48:AB:DF:1E:0A:C4:22:A1:BE
Certificate issuer: /CN=c48344cd-71dd-4852-8081-dbc4e9c4e5d4
Certificate serial: 010D0C9F432858486695BA314CA9906CF5015780
Authority key identifier: 11:91:33:93:D4:45:82:EB:73:60:76:CC:4B:EB:02:E0:43:2B:1F:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/50c74bb3-d4ea-355d-813d-e86559fc98de.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 964
IP address blocks: 198.73.190.0/24 maxlen: 24
2606:ddc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ba:31:4c:a9:90:6c:f5:01:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48344cd-71dd-4852-8081-dbc4e9c4e5d4
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=9bb9d79b-ffa2-41a4-9fbf-5db6f3a5ba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:76:28:dc:69:f0:fd:4c:3f:10:10:cb:eb:
30:ec:36:16:e7:01:dd:36:7d:ad:4a:54:c5:9e:8c:
3b:10:7b:a8:68:b5:fa:c6:c0:c8:85:01:14:4a:86:
e1:46:c1:9d:54:c5:28:03:77:5a:18:5b:ca:82:94:
ae:f7:bf:dd:8b:0d:c8:77:8b:50:7a:2d:7f:f9:8b:
68:1f:20:0a:08:84:c9:8a:9b:55:9b:ad:dd:26:a7:
30:20:fc:b9:79:ee:c4:ff:33:ac:aa:0b:cd:fc:40:
ad:a6:0c:47:33:c7:69:42:8e:75:84:5d:b2:be:d7:
bb:92:4a:79:63:f0:8e:6c:18:d3:14:2b:42:57:5c:
7d:9f:f2:5a:e1:a6:9b:6d:73:5a:7b:a2:cd:a8:3a:
a1:42:52:24:81:af:ac:12:43:f9:db:44:57:82:75:
6e:7b:cb:2c:95:15:a9:94:cf:29:db:a2:ff:9b:32:
51:ec:73:18:1c:81:f2:6a:fd:87:3a:af:0c:a0:80:
d0:7a:80:4f:de:24:e5:ff:1a:cf:b8:9e:9f:8a:bf:
dc:ef:14:fe:32:1e:ac:f8:87:ad:c2:5f:ce:77:f9:
6d:ed:55:bd:7a:85:9d:82:ed:3e:57:14:1b:94:be:
e9:00:4c:6f:83:49:db:96:82:92:3f:15:a3:34:64:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:63:AD:E8:CD:31:76:88:28:C4:48:AB:DF:1E:0A:C4:22:A1:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/50c74bb3-d4ea-355d-813d-e86559fc98de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.crl
X509v3 Authority Key Identifier:
keyid:11:91:33:93:D4:45:82:EB:73:60:76:CC:4B:EB:02:E0:43:2B:1F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.73.190.0/24
IPv6:
2606:ddc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e1:4f:49:28:65:db:32:00:33:9a:74:b6:00:5e:fb:47:dd:
51:61:25:ff:17:2d:b5:a0:0e:1d:de:b2:10:60:23:c9:ec:b2:
2e:93:46:c8:c2:55:7f:33:9a:e1:43:b9:2d:84:43:7f:2a:56:
07:e5:e5:0c:73:a7:0a:90:14:bf:7b:b7:67:c3:b6:b8:84:46:
68:b3:15:dd:2d:16:71:98:c1:52:4f:52:5f:a5:0a:3c:58:51:
88:c7:4d:7b:8f:02:a4:78:fd:59:01:b6:f8:0a:34:1f:d6:40:
4a:23:33:d6:6d:26:44:c1:a1:07:c8:63:86:f6:7c:8a:1e:2a:
30:3e:a0:ee:44:ae:d8:24:35:47:d8:08:6d:c4:00:54:29:5d:
91:be:bc:32:03:fa:23:e2:7f:d7:ea:44:1e:2a:2f:6b:19:bc:
b9:aa:01:8b:be:7f:a8:30:fe:17:d6:cc:f6:b9:ae:de:99:95:
06:e7:03:9b:da:b6:9a:29:b8:69:75:4e:77:c1:fb:7c:27:dc:
26:c4:d6:d1:ea:16:6f:d2:63:98:1f:47:6c:e6:45:8d:3d:68:
7a:c6:e6:01:f9:bf:e5:85:46:4e:6a:4d:7b:e8:83:1c:cc:98:
80:95:10:ca:43:86:04:16:f2:c8:9b:99:47:21:f1:80:8d:01:
58:e7:08:97
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEhmlboxTKmQbPUBV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQ4MzQ0Y2QtNzFkZC00ODUyLTgwODEtZGJjNGU5YzRl
NWQ0MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
OWJiOWQ3OWItZmZhMi00MWE0LTlmYmYtNWRiNmYzYTViYTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJh2KNxp8P1MPxAQy+sw7DYW5wHdNn2tSlTF
now7EHuoaLX6xsDIhQEUSobhRsGdVMUoA3daGFvKgpSu97/diw3Id4tQei1/+Yto
HyAKCITJiptVm63dJqcwIPy5ee7E/zOsqgvN/ECtpgxHM8dpQo51hF2yvte7kkp5
Y/CObBjTFCtCV1x9n/Ja4aabbXNae6LNqDqhQlIkga+sEkP520RXgnVue8sslRWp
lM8p26L/mzJR7HMYHIHyav2HOq8MoIDQeoBP3iTl/xrPuJ6fir/c7xT+Mh6s+Iet
wl/Od/lt7VW9eoWdgu0+VxQblL7pAExvg0nbloKSPxWjNGQdrQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFCEZY63ozTF2iCjESKvfHgrEIqG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNDgz
NDRjZC03MWRkLTQ4NTItODA4MS1kYmM0ZTljNGU1ZDQvNTBjNzRiYjMtZDRlYS0z
NTVkLTgxM2QtZTg2NTU5ZmM5OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzQ4MzQ0Y2QtNzFkZC00ODUyLTgw
ODEtZGJjNGU5YzRlNWQ0L2M0ODM0NGNkLTcxZGQtNDg1Mi04MDgxLWRiYzRlOWM0
ZTVkNC5jcmwwHwYDVR0jBBgwFoAUEZEzk9RFgutzYHbMS+sC4EMrH58wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNDgzNDRjZC03MWRkLTQ4NTItODA4MS1kYmM0
ZTljNGU1ZDQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAxkm+MA0E
AgACMAcDBQAmBt3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBACrhT0koZdsyADOadLYAXvtH3VFhJf8XLbWg
Dh3eshBgI8nssi6TRsjCVX8zmuFDuS2EQ38qVgfl5QxzpwqQFL97t2fDtriERmiz
Fd0tFnGYwVJPUl+lCjxYUYjHTXuPAqR4/VkBtvgKNB/WQEojM9ZtJkTBoQfIY4b2
fIoeKjA+oO5ErtgkNUfYCG3EAFQpXZG+vDID+iPif9fqRB4qL2sZvLmqAYu+f6gw
/hfWzPa5rt6ZlQbnA5vatpopuGl1TnfB+3wn3CbE1tHqFm/SY5gfR2zmRY09aHrG
5gH5v+WFRk5qTXvogxzMmICVEMpDhgQW8sibmUch8YCNAVjnCJc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:07 2025 by rpki-client