Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/fe8d6e6e-c80b-3929-8e57-bb2972714177.roa
File: fe8d6e6e-c80b-3929-8e57-bb2972714177.roa (raw, json)
Hash identifier: f8haOZPOHR3mjucYeS+XKhQg861Lq0dscn1w5iOU2aE=
Subject key identifier: D2:76:B4:62:07:FE:7C:A0:6A:DB:3F:BC:62:E6:C4:F7:00:E5:7A:83
Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial: 010D0C9F432858493C092F38F307FCC73D3F3380
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/fe8d6e6e-c80b-3929-8e57-bb2972714177.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 14907
IP address blocks: 198.35.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2f:38:f3:07:fc:c7:3d:3f:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=bde0130b-9efd-4a01-832c-086937100694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:f0:c2:41:9b:4b:e8:98:d0:fd:44:66:06:
a9:68:3c:50:65:47:fe:68:52:c1:13:da:05:ca:10:
a8:a1:7a:65:d1:a2:8a:8e:01:1f:65:54:40:56:54:
0a:7f:2a:28:53:76:c1:d2:46:f6:5c:ef:84:84:ef:
a9:18:97:03:22:d2:5d:b7:65:11:34:9f:f2:7e:4d:
f9:f3:34:e4:4b:87:f2:78:62:37:ce:82:20:fd:67:
e1:ce:b2:bc:07:4a:98:20:bf:a4:e5:21:9e:2f:d5:
bb:1a:2c:39:6c:10:8a:8c:62:73:cf:a1:29:e9:e5:
6c:61:ba:bb:57:dd:05:31:b7:03:86:8f:18:51:cc:
ec:84:9a:1b:b8:3d:73:6a:3b:14:ea:e3:87:8d:fc:
3f:f4:fb:f4:be:28:1d:bd:cd:99:20:0d:56:cc:47:
60:c7:f7:ff:7c:1d:cf:21:4b:32:54:f5:48:7a:cd:
ae:c1:7d:17:9d:8e:1a:a8:58:d3:7e:d6:84:d4:e7:
35:d7:82:8b:26:02:23:f4:b1:70:49:97:25:2c:1d:
25:0f:46:57:a5:5a:50:59:72:81:fb:58:89:e7:22:
47:d8:f3:1e:fd:43:53:ef:1c:95:26:ce:2b:34:27:
d1:62:43:8a:6f:de:68:ee:5e:e2:a7:bb:79:ad:66:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:B4:62:07:FE:7C:A0:6A:DB:3F:BC:62:E6:C4:F7:00:E5:7A:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/fe8d6e6e-c80b-3929-8e57-bb2972714177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
X509v3 Authority Key Identifier:
keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b4:bd:05:d4:ad:13:b3:1f:1c:51:e7:fb:0b:3b:30:dc:8f:
7f:f6:be:72:a9:92:f0:48:96:b0:64:fd:23:ed:ae:e4:ea:bc:
6a:6b:46:22:f3:82:7b:cb:c1:79:31:f9:c8:36:ab:0f:72:2d:
ba:5c:9d:63:5a:28:b9:8b:2b:fd:d4:4c:38:59:ca:76:9d:ff:
90:ad:a3:81:19:c1:8d:73:09:d3:7b:ee:f1:18:47:37:8c:4a:
52:8d:8d:51:2e:fe:89:a5:bb:be:e5:e0:e6:11:94:c6:75:eb:
20:46:e4:73:6a:65:13:12:65:3a:f6:f1:01:11:78:d6:01:0b:
97:f8:6a:fa:58:07:2f:c3:77:75:6f:5e:ea:9d:9c:fe:8d:b5:
8e:c9:de:2a:49:18:eb:fc:45:64:fc:0e:8d:29:b7:63:8f:ee:
1b:1a:0f:e1:9d:f7:18:d3:04:30:da:8f:8e:77:b9:6b:0c:ca:
cf:4f:3c:5f:ed:19:4b:0b:4e:a9:46:e1:d5:ec:82:15:d5:29:
90:70:09:12:60:1b:5e:a8:1d:cd:82:20:60:5b:ef:dd:60:7f:
01:40:6e:49:52:4e:f2:e6:68:56:39:db:67:11:68:e2:b0:48:
a5:d3:9f:d5:29:c9:ba:fb:a6:d7:13:c1:f3:9e:4e:2b:d1:3d:
fa:88:f8:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CS848wf8xz0/M4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl
OTk4MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YmRlMDEzMGItOWVmZC00YTAxLTgzMmMtMDg2OTM3MTAwNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlILwwkGbS+iY0P1EZgapaDxQZUf+aFLBE9oF
yhCooXpl0aKKjgEfZVRAVlQKfyooU3bB0kb2XO+EhO+pGJcDItJdt2URNJ/yfk35
8zTkS4fyeGI3zoIg/WfhzrK8B0qYIL+k5SGeL9W7Giw5bBCKjGJzz6Ep6eVsYbq7
V90FMbcDho8YUczshJobuD1zajsU6uOHjfw/9Pv0vigdvc2ZIA1WzEdgx/f/fB3P
IUsyVPVIes2uwX0XnY4aqFjTftaE1Oc114KLJgIj9LFwSZclLB0lD0ZXpVpQWXKB
+1iJ5yJH2PMe/UNT7xyVJs4rNCfRYkOKb95o7l7ip7t5rWbvqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJ2tGIH/nygats/vGLmxPcA5XqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl
MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvZmU4ZDZlNmUtYzgwYi0z
OTI5LThlNTctYmIyOTcyNzE0MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3
NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx
ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5
YTQ4MWU5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiMaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGG0vQXUrROzHxxR5/sLOzDcj3/2vnKpkvBIlrBk/SPtruTqvGprRiLz
gnvLwXkx+cg2qw9yLbpcnWNaKLmLK/3UTDhZynad/5Cto4EZwY1zCdN77vEYRzeM
SlKNjVEu/omlu77l4OYRlMZ16yBG5HNqZRMSZTr28QEReNYBC5f4avpYBy/Dd3Vv
XuqdnP6NtY7J3ipJGOv8RWT8Do0pt2OP7hsaD+Gd9xjTBDDaj453uWsMys9PPF/t
GUsLTqlG4dXsghXVKZBwCRJgG16oHc2CIGBb791gfwFAbklSTvLmaFY522cRaOKw
SKXTn9Upybr7ptcTwfOeTivRPfqI+PA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:10 2025 by rpki-client