Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
File: aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa (raw, json)
Hash identifier: NHV10ufI2V6YX7bldVWWfHHxA+d737IWU+ViV721fUs=
Subject key identifier: 59:12:FD:5F:72:3C:6F:C7:0D:1E:09:B1:78:75:DD:5D:1F:88:05:98
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285848C6E62E371824FEF1C758AB80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 8075
IP address blocks: 199.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2e:37:18:24:fe:f1:c7:58:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=401cf4eb-8c0a-481f-a170-12bfed2f2460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:72:a9:86:ca:26:ba:ad:16:fc:d3:20:24:
32:51:46:be:0b:7a:fa:3f:27:49:14:15:ea:d7:76:
d4:e7:17:28:ef:cb:a9:27:48:7e:9f:0f:86:fe:1b:
09:6d:63:49:59:3f:ab:4c:b1:6d:89:9c:91:2d:26:
83:d4:4f:b7:72:0d:9b:75:49:a7:5e:bb:e4:5a:44:
00:ab:70:79:ef:c1:f3:e1:91:ff:5a:78:7d:b1:6e:
8d:23:9b:36:4d:ce:ac:6d:54:f5:c9:e2:51:ec:b7:
1b:c4:38:bb:56:0c:24:2f:b2:f0:e2:05:6d:cb:94:
bb:7f:64:2a:9f:82:cd:0c:7d:44:e5:cf:97:3c:25:
a8:56:10:81:f7:6b:92:2b:5f:b0:67:89:1a:68:6b:
83:25:08:3c:17:ac:99:e0:0d:88:04:df:16:82:9b:
45:62:5a:a0:db:16:a4:a2:86:56:e8:a2:ef:fa:7f:
4b:4a:d0:48:dd:3b:61:1f:cb:0c:d6:a6:fc:4a:55:
54:2e:cd:16:b7:5b:19:73:3f:34:8d:56:e2:8a:f2:
46:d5:a1:18:45:91:bb:8f:3c:88:10:04:d1:db:ad:
24:9b:9b:dc:95:58:ac:55:dd:6a:1c:28:9b:0b:ce:
fc:9d:b4:8b:75:29:5b:b5:25:7d:8a:19:f0:3f:68:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:FD:5F:72:3C:6F:C7:0D:1E:09:B1:78:75:DD:5D:1F:88:05:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:19:5f:56:09:64:05:47:a9:e3:a4:20:41:9a:33:c2:0a:0a:
20:4e:19:3c:6d:5d:49:1c:14:5c:56:53:a0:8f:db:fd:69:41:
9d:db:71:2c:7c:6f:de:73:be:8a:28:3d:82:a0:e8:a3:a1:49:
d4:d7:cb:ff:a0:af:93:13:8f:08:7c:17:b6:60:00:e6:88:a9:
11:16:07:2e:5d:4e:91:d4:05:99:00:ce:eb:8b:87:d5:b6:da:
ac:f4:11:8a:3b:82:84:fd:f0:ec:ab:58:d6:1b:ac:c8:d3:14:
b4:bc:c8:09:af:dc:81:0c:57:e7:a9:2c:4a:d3:b5:05:d5:a4:
34:fc:b2:42:13:8b:0d:6e:4c:5e:59:14:06:5d:5c:96:ac:9b:
ca:8a:29:1c:31:52:ec:cc:2d:e7:ac:7c:fb:21:e6:b7:38:08:
6c:45:dc:12:c8:8a:7f:c9:d2:6e:19:e1:c1:c8:84:a2:f4:c6:
6e:ab:6e:1b:48:7e:f2:8a:df:92:40:3b:34:80:12:a5:fd:e6:
63:c8:6c:65:85:7d:24:17:f4:a8:a2:e2:33:41:3b:75:85:f9:
bf:1f:82:ec:e1:89:cb:5f:95:1d:b0:8d:cc:3c:56:c6:4f:7e:
e7:a7:ed:83:b3:b4:21:7c:02:28:0c:7e:71:a9:47:a5:06:54:
af:98:f0:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5i43GCT+8cdYq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDAxY2Y0ZWItOGMwYS00ODFmLWExNzAtMTJiZmVkMmYyNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxlyqYbKJrqtFvzTICQyUUa+C3r6PydJFBXq
13bU5xco78upJ0h+nw+G/hsJbWNJWT+rTLFtiZyRLSaD1E+3cg2bdUmnXrvkWkQA
q3B578Hz4ZH/Wnh9sW6NI5s2Tc6sbVT1yeJR7LcbxDi7VgwkL7Lw4gVty5S7f2Qq
n4LNDH1E5c+XPCWoVhCB92uSK1+wZ4kaaGuDJQg8F6yZ4A2IBN8WgptFYlqg2xak
ooZW6KLv+n9LStBI3TthH8sM1qb8SlVULs0Wt1sZcz80jVbiivJG1aEYRZG7jzyI
EATR260km5vclVisVd1qHCibC878nbSLdSlbtSV9ihnwP2gEGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkS/V9yPG/HDR4JsXh13V0fiAWYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWE3YzkwZWYtYjhkYy0z
YzA5LTg5YmQtNTEyYmI1OTg5ZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALUZX1YJZAVHqeOkIEGaM8IKCiBOGTxtXUkcFFxWU6CP2/1pQZ3bcSx8
b95zvoooPYKg6KOhSdTXy/+gr5MTjwh8F7ZgAOaIqREWBy5dTpHUBZkAzuuLh9W2
2qz0EYo7goT98OyrWNYbrMjTFLS8yAmv3IEMV+epLErTtQXVpDT8skITiw1uTF5Z
FAZdXJasm8qKKRwxUuzMLeesfPsh5rc4CGxF3BLIin/J0m4Z4cHIhKL0xm6rbhtI
fvKK35JAOzSAEqX95mPIbGWFfSQX9Kii4jNBO3WF+b8fguzhictflR2wjcw8VsZP
fuen7YOztCF8AigMfnGpR6UGVK+Y8PQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:13 2025 by rpki-client