Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa
File: f6d7603a-e610-3284-b984-ead8840e61a0.roa (raw, json)
Hash identifier: nfHOZqHlArFlNAanFhy/FMkJTEkcEdqyf8Kc8bC0e9k=
Subject key identifier: C5:DC:90:DF:62:6A:94:D2:D2:3D:30:F2:C1:15:35:D7:D9:26:AC:35
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285849002169295E757031815CBD40
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 1351
IP address blocks: 209.198.99.64/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:69:29:5e:75:70:31:81:5c:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=46850c3b-2c6b-43e6-b080-8c6ad5e54570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:03:aa:34:15:5a:a6:c3:49:4b:0e:50:fa:
19:f9:50:6c:70:80:fa:0a:37:bf:41:3e:e9:b6:f6:
c8:d5:dd:5b:dd:5b:9d:da:5d:ec:ac:02:03:fb:9b:
f8:5c:df:5a:e0:b6:2d:61:c0:0c:3b:a7:fa:1e:4d:
76:82:4a:8e:10:d6:1b:2d:8a:22:d2:56:54:d5:3b:
b9:08:a4:1d:b1:f5:f0:d4:b8:87:d4:e6:13:b6:b3:
c1:be:5a:2b:44:b1:1d:f4:02:04:97:e8:3a:33:53:
c0:0f:83:d0:d8:36:e0:23:89:db:86:0e:78:e3:48:
96:f2:c9:6f:1a:fd:35:08:54:56:4f:5a:ed:c3:9c:
22:10:40:c8:69:46:bf:61:d7:8f:25:c6:8b:c8:68:
8a:0f:c1:5e:b1:af:18:39:df:11:56:bd:fe:ac:d7:
74:35:e4:11:01:2d:96:00:b2:06:15:8b:f5:89:56:
2f:ef:3a:1c:0e:49:d1:2d:77:79:b5:4e:5d:ca:21:
66:e8:0d:93:b4:cc:b3:44:6e:88:62:4a:35:b4:cf:
2d:c1:e5:84:a5:46:8d:9d:a1:44:ca:e1:46:79:c3:
71:39:56:88:93:f4:89:88:7e:b8:57:e1:33:af:4e:
a6:a8:59:e6:10:63:2b:f2:7a:0a:bb:a9:9b:77:5e:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:90:DF:62:6A:94:D2:D2:3D:30:F2:C1:15:35:D7:D9:26:AC:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f6d7603a-e610-3284-b984-ead8840e61a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.99.64/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:44:eb:24:9e:30:1a:b2:62:8c:c6:cb:e5:60:86:1b:d7:da:
d0:c6:86:66:44:06:0c:61:d5:b6:ca:6d:d9:51:85:0c:f1:fa:
25:63:54:2d:42:28:de:87:c2:a1:48:80:fb:95:56:90:63:26:
39:02:fd:d6:bc:cc:b4:2f:94:27:ea:46:75:61:74:d7:88:b1:
cb:e5:bb:bd:d4:e7:18:f3:77:a4:56:7e:52:14:91:28:89:1b:
77:da:e3:43:e6:7c:d4:fe:b2:3d:f6:46:b5:b4:23:dd:ab:24:
7e:67:89:c9:4a:f2:67:dd:66:c2:64:bd:cf:ab:2b:b4:af:ae:
ca:0d:ea:ec:b2:1f:1f:fa:8e:94:2b:b3:3f:f4:a1:f2:e2:af:
f6:cc:69:f5:c3:d8:10:27:26:69:99:8e:4e:b6:9c:08:1c:90:
92:a5:51:9b:58:dd:bc:8b:28:d5:7d:2c:88:6f:77:52:ca:50:
19:90:a1:a3:08:b8:de:5c:d3:1a:2d:2d:46:72:9c:56:f9:80:
47:b2:57:41:7d:0b:80:b3:80:aa:d1:fb:32:69:97:46:e3:7b:
3f:74:4f:65:fd:59:fa:ac:28:a8:c8:0c:06:cd:73:81:26:21:
68:bc:cd:0c:d3:37:71:e0:43:90:83:70:eb:e3:75:44:11:b3:
34:f9:68:e3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkAIWkpXnVwMYFcvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NDY4NTBjM2ItMmM2Yi00M2U2LWIwODAtOGM2YWQ1ZTU0NTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/4DqjQVWqbDSUsOUPoZ+VBscID6Cje/QT7p
tvbI1d1b3Vud2l3srAID+5v4XN9a4LYtYcAMO6f6Hk12gkqOENYbLYoi0lZU1Tu5
CKQdsfXw1LiH1OYTtrPBvlorRLEd9AIEl+g6M1PAD4PQ2DbgI4nbhg5440iW8slv
Gv01CFRWT1rtw5wiEEDIaUa/YdePJcaLyGiKD8Fesa8YOd8RVr3+rNd0NeQRAS2W
ALIGFYv1iVYv7zocDknRLXd5tU5dyiFm6A2TtMyzRG6IYko1tM8tweWEpUaNnaFE
yuFGecNxOVaIk/SJiH64V+Ezr06mqFnmEGMr8noKu6mbd16HewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMXckN9iapTS0j0w8sEVNdfZJqw1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZjZkNzYwM2EtZTYxMC0z
Mjg0LWI5ODQtZWFkODg0MGU2MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0cZjQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDCROsknjAasmKMxsvlYIYb19rQxoZmRAYMYdW2ym3ZUYUM8folY1Qt
Qijeh8KhSID7lVaQYyY5Av3WvMy0L5Qn6kZ1YXTXiLHL5bu91OcY83ekVn5SFJEo
iRt32uND5nzU/rI99ka1tCPdqyR+Z4nJSvJn3WbCZL3Pqyu0r67KDerssh8f+o6U
K7M/9KHy4q/2zGn1w9gQJyZpmY5OtpwIHJCSpVGbWN28iyjVfSyIb3dSylAZkKGj
CLjeXNMaLS1GcpxW+YBHsldBfQuAs4Cq0fsyaZdG43s/dE9l/Vn6rCioyAwGzXOB
JiFovM0M0zdx4EOQg3Dr43VEEbM0+Wjj
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:09:49 2025 by rpki-client