Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa
File: f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa (raw, json)
Hash identifier: AUzN58srKr1c4qOXDjrLRrNUsi7YpQ/BG5c38xy/DYg=
Subject key identifier: C4:D2:42:04:DE:26:56:B2:0A:AB:F9:9B:6F:64:15:DA:68:D0:23:F9
Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial: 010D0C9F43285848AF2B78E9EADC7633590599C0
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 19108
IP address blocks: 198.168.122.0/23 maxlen: 23
198.168.122.0/24 maxlen: 24
198.168.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:78:e9:ea:dc:76:33:59:05:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=00ed4f24-ecc3-4237-a4d2-c458a9a46492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:9b:1a:75:2d:e0:0a:10:40:b6:64:78:c2:
e7:19:ad:c6:fd:cd:f8:2e:0c:f1:8b:05:a8:5a:20:
cc:04:37:4a:2a:d2:d7:a0:a3:4e:1c:5d:30:ad:f5:
ba:ba:bd:9d:0a:33:7f:0e:7e:be:77:d6:bb:ba:64:
fc:36:13:7b:e1:e8:5a:38:4d:40:3a:f7:5d:78:e4:
c8:ce:22:38:84:83:85:1b:9c:19:94:b5:72:83:47:
cc:89:bb:b8:04:37:2c:90:28:9a:3e:bc:2b:06:68:
d4:9c:ef:9f:2f:fc:b6:25:5e:ff:02:ac:51:7f:e9:
9f:60:4a:bc:3e:80:47:95:c1:ff:7c:15:b1:76:47:
ad:3a:4a:55:97:58:fe:b3:3d:d7:c0:21:92:a9:60:
0a:82:0f:c5:c2:f7:94:89:cd:b7:a4:e4:f3:87:6b:
81:a1:80:d5:cd:7a:89:d8:52:2f:ed:2b:a7:b7:1f:
23:bc:51:4b:6f:a5:66:f9:34:a2:89:03:69:01:82:
22:e3:9e:a3:17:21:e3:80:e2:86:1a:1a:fd:2e:f7:
0f:46:55:23:dd:bb:b6:28:e3:6f:b0:e6:98:09:b6:
8a:4b:e4:a6:7d:b0:69:85:1e:ae:eb:a6:a9:83:0f:
fc:9e:e0:a6:eb:b0:58:99:ae:50:6e:46:44:f7:d7:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D2:42:04:DE:26:56:B2:0A:AB:F9:9B:6F:64:15:DA:68:D0:23:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
X509v3 Authority Key Identifier:
keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.168.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8e:50:26:f5:1c:07:b7:ea:62:79:34:63:3d:47:cf:e4:a9:
f6:d4:b1:0d:97:ac:69:fb:a2:1f:c9:cd:33:77:3b:60:84:2b:
83:ad:2a:f6:df:20:e3:a5:d4:3c:35:37:2e:6b:ef:55:ba:30:
ca:29:09:60:de:a2:5d:b1:cd:c1:ca:6a:f4:c9:ea:bf:06:43:
45:96:c1:5d:31:42:7c:50:cc:cd:c5:89:a1:46:37:23:42:2e:
75:e9:1a:e8:85:96:e2:28:23:bd:f1:1b:a6:46:4a:fd:1f:a2:
5e:a2:85:59:8b:b1:94:42:1f:01:e9:8f:74:be:8b:55:83:0f:
1e:74:e8:59:da:3a:63:0a:f2:3a:65:84:ed:5b:3c:16:e5:98:
ae:27:36:4c:7c:8e:d1:b8:16:ad:a9:69:bd:c1:3f:fb:99:c9:
84:cc:8a:cc:54:15:d9:60:00:e9:e1:0d:21:c2:dd:17:78:8b:
a7:d6:15:d6:40:c0:ed:5d:b8:b3:2a:be:36:48:c1:54:b2:51:
b3:9a:eb:9d:0f:4c:94:c4:c3:42:d8:5c:11:cf:de:91:54:f5:
43:2c:22:6f:ec:79:92:da:12:f4:e9:da:e4:75:fc:0d:55:3d:
84:95:f6:42:20:e5:0c:51:cd:d7:30:7b:a9:42:f2:53:dc:56:
0f:f5:2e:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3jp6tx2M1kFmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx
MzFlMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MDBlZDRmMjQtZWNjMy00MjM3LWE0ZDItYzQ1OGE5YTQ2NDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPGbGnUt4AoQQLZkeMLnGa3G/c34LgzxiwWo
WiDMBDdKKtLXoKNOHF0wrfW6ur2dCjN/Dn6+d9a7umT8NhN74ehaOE1AOvddeOTI
ziI4hIOFG5wZlLVyg0fMibu4BDcskCiaPrwrBmjUnO+fL/y2JV7/AqxRf+mfYEq8
PoBHlcH/fBWxdketOkpVl1j+sz3XwCGSqWAKgg/FwveUic23pOTzh2uBoYDVzXqJ
2FIv7Suntx8jvFFLb6Vm+TSiiQNpAYIi456jFyHjgOKGGhr9LvcPRlUj3bu2KONv
sOaYCbaKS+SmfbBphR6u66apgw/8nuCm67BYma5QbkZE99e7LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTSQgTeJlayCqv5m29kFdpo0CP5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk
N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZjhiZDkyZjAtZjY5Yi0z
M2M3LTg0YjEtMWNhMWQ4MWY5ZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk
MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy
MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy
NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeOUCb1HAe36mJ5NGM9R8/kqfbUsQ2XrGn7oh/JzTN3O2CEK4OtKvbf
IOOl1Dw1Ny5r71W6MMopCWDeol2xzcHKavTJ6r8GQ0WWwV0xQnxQzM3FiaFGNyNC
LnXpGuiFluIoI73xG6ZGSv0fol6ihVmLsZRCHwHpj3S+i1WDDx506FnaOmMK8jpl
hO1bPBblmK4nNkx8jtG4Fq2pab3BP/uZyYTMisxUFdlgAOnhDSHC3Rd4i6fWFdZA
wO1duLMqvjZIwVSyUbOa650PTJTEw0LYXBHP3pFU9UMsIm/seZLaEvTp2uR1/A1V
PYSV9kIg5QxRzdcwe6lC8lPcVg/1Lgs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:28 2025 by rpki-client