Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
File: 7e41608c-f4a3-38f3-a7b4-736ec6086365.roa (raw, json)
Hash identifier: EQwxQ1frUT4H+HzqfeZs/63/gCB8DnOpYewZDjw2YuI=
Subject key identifier: DD:9A:E1:C7:55:CE:6B:D3:87:CA:ED:A4:56:D9:1C:1D:F7:55:1C:3F
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F432858490934C20CA8B9C7424487A380
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
Signing time: Fri 28 Feb 2025 20:02:24 +0000
ROA not before: Fri 28 Feb 2025 20:02:24 +0000
ROA not after: Thu 29 May 2025 19:02:24 +0000
asID: 396982
IP address blocks: 199.64.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:34:c2:0c:a8:b9:c7:42:44:87:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Feb 28 20:02:24 2025 GMT
Not After : May 29 19:02:24 2025 GMT
Subject: CN=b76d5630-a786-4305-bf20-f34766964217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:5b:e2:4e:05:55:8d:0b:a2:74:7b:54:fd:
d1:3d:37:a0:e3:15:d1:3c:05:d1:31:89:e7:4e:aa:
b9:ea:5c:54:03:d6:0c:33:08:b7:82:17:78:0d:b9:
48:97:4f:a2:1c:97:b6:2b:ce:28:ee:f6:9d:a4:f6:
74:83:c2:10:28:66:e7:86:7c:d4:26:d0:9f:e2:c7:
11:98:22:44:a5:6e:74:4a:33:65:57:6a:37:a7:89:
70:fa:c5:7c:6c:f1:0d:32:95:9a:68:58:9e:9d:dd:
49:1d:3f:f7:1a:bd:15:8a:ec:d5:80:11:34:dc:76:
97:26:03:88:2c:1a:70:da:67:36:31:3f:41:ae:af:
fe:c9:d2:35:19:af:89:08:01:94:37:45:83:0a:b3:
a0:50:b9:22:b6:f6:ac:b8:bd:c7:00:8c:17:5d:38:
fa:e9:cf:fc:3c:34:39:9b:31:51:f8:e0:cb:cb:6b:
1c:d9:50:73:81:f4:0b:16:bf:15:2c:04:a6:32:48:
d6:fb:bb:65:f4:14:5e:fd:e7:8d:be:52:c0:cc:a1:
48:8a:97:01:29:00:01:07:b9:6f:75:aa:a9:d6:61:
8f:2a:b6:1d:40:b1:69:d6:ee:6d:a6:a8:de:4e:af:
03:9c:80:fd:06:28:e1:a5:ab:4a:bf:a7:d2:7e:75:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:E1:C7:55:CE:6B:D3:87:CA:ED:A4:56:D9:1C:1D:F7:55:1C:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:df:07:ba:be:65:0f:4f:ef:a5:f1:6f:70:1e:c2:90:b5:37:
12:1f:c3:cf:e0:db:88:32:bd:9f:01:fe:51:eb:5b:f0:de:0d:
a0:ca:e7:64:d9:4c:75:da:42:f6:92:19:8a:66:00:85:c5:10:
6d:e9:b5:8f:57:fa:73:45:13:ed:34:85:6e:61:78:93:cc:a2:
6c:a7:b2:5d:15:6f:8e:62:87:e0:92:0d:70:3f:8e:3e:2f:56:
ec:fa:2b:24:ec:a8:97:88:5b:4a:76:b3:fe:d2:57:86:4c:51:
cc:cf:c1:64:a1:91:e9:e4:15:37:ab:be:9a:1f:14:2e:ed:f3:
74:5b:25:17:c2:6d:fc:ca:68:a8:2b:7c:ea:bf:22:d7:e0:4b:
eb:97:26:18:0c:64:63:b6:9b:65:22:53:71:54:c6:cd:41:3a:
68:6c:40:b8:f5:16:07:76:ef:7c:0c:e8:1f:32:46:98:2c:8a:
86:8a:f5:30:07:8a:ba:65:52:b4:9f:ef:cb:29:da:a9:00:00:
98:be:f8:6e:7b:21:24:26:02:e9:69:01:60:c9:c2:f0:a9:2b:
ee:f9:6d:1b:95:67:a5:94:88:8d:78:54:b2:aa:cd:f5:e0:93:
27:50:77:07:5e:95:d5:18:6d:5a:7f:4d:b6:70:4e:eb:a0:d2:
e0:ef:49:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJNMIMqLnHQkSHo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI1MDIyODIwMDIyNFoXDTI1MDUyOTE5MDIyNFowLzEtMCsGA1UEAxMk
Yjc2ZDU2MzAtYTc4Ni00MzA1LWJmMjAtZjM0NzY2OTY0MjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW1b4k4FVY0LonR7VP3RPTeg4xXRPAXRMYnn
Tqq56lxUA9YMMwi3ghd4DblIl0+iHJe2K84o7vadpPZ0g8IQKGbnhnzUJtCf4scR
mCJEpW50SjNlV2o3p4lw+sV8bPENMpWaaFiend1JHT/3Gr0ViuzVgBE03HaXJgOI
LBpw2mc2MT9Brq/+ydI1Ga+JCAGUN0WDCrOgULkitvasuL3HAIwXXTj66c/8PDQ5
mzFR+ODLy2sc2VBzgfQLFr8VLASmMkjW+7tl9BRe/eeNvlLAzKFIipcBKQABB7lv
daqp1mGPKrYdQLFp1u5tpqjeTq8DnID9BijhpatKv6fSfnWcLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2a4cdVzmvTh8rtpFbZHB33VRw/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvN2U0MTYwOGMtZjRhMy0z
OGYzLWE3YjQtNzM2ZWM2MDg2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0BOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnfB7q+ZQ9P76Xxb3AewpC1NxIfw8/g24gyvZ8B/lHrW/DeDaDK52TZ
THXaQvaSGYpmAIXFEG3ptY9X+nNFE+00hW5heJPMomynsl0Vb45ih+CSDXA/jj4v
Vuz6KyTsqJeIW0p2s/7SV4ZMUczPwWShkenkFTervpofFC7t83RbJRfCbfzKaKgr
fOq/ItfgS+uXJhgMZGO2m2UiU3FUxs1BOmhsQLj1Fgd273wM6B8yRpgsioaK9TAH
irplUrSf78sp2qkAAJi++G57ISQmAulpAWDJwvCpK+75bRuVZ6WUiI14VLKqzfXg
kydQdwdeldUYbVp/TbZwTuug0uDvST0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:51 2025 by rpki-client