Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
File: 27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa (raw, json)
Hash identifier: 9H3yb/LEM3XVxvxqcpk8EQf9LYBVci08h/2fodVqFro=
Subject key identifier: 40:D1:08:3A:1E:2E:16:68:3C:0F:BF:72:C5:F5:40:EF:AC:6A:36:4B
Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial: 010D0C9F43285848AF2B860AEF10EF2F938803C0
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 32771
IP address blocks: 198.241.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:86:0a:ef:10:ef:2f:93:88:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=84be1c50-7759-44ef-8966-27f6124d8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:ad:e3:64:09:26:5d:e6:21:c7:20:16:ea:
18:fa:e2:0b:95:0f:67:f2:96:b2:84:3e:b3:fd:18:
ca:44:fa:55:c0:dc:1e:a1:05:16:6d:73:65:8b:29:
f3:29:9c:ac:32:74:f4:f6:ea:f1:66:f0:bb:6c:6e:
f5:e4:de:70:91:f0:9b:f8:23:66:4a:da:07:f5:5f:
fb:74:29:4d:d1:fa:f3:7f:bb:f9:17:36:fe:34:c9:
6e:02:b5:26:3e:ad:a3:d2:b9:0a:3d:d2:8e:bd:df:
79:36:8c:5e:ef:1b:06:fb:a8:c2:d6:ce:9b:f0:8c:
52:d0:be:9c:b9:ba:c5:b3:e1:60:85:38:5c:b8:90:
19:1f:00:0a:7e:06:b1:1f:d3:5d:52:25:d0:ff:4f:
4e:d2:84:b3:fc:e6:26:c9:f6:b0:68:11:da:87:36:
70:aa:a2:a6:77:4d:52:d2:d0:9a:e2:cc:5b:6c:69:
1c:46:df:be:c6:96:31:80:2c:17:3d:34:61:85:97:
81:a6:01:5b:d9:dc:ab:5b:f2:64:ce:09:86:63:8a:
fe:d4:9c:3c:6a:6a:e6:02:a6:83:ca:ca:5b:18:18:
8f:79:2b:87:09:1e:85:22:3d:6d:9e:31:98:21:27:
be:85:57:e0:fd:7d:80:df:2a:f4:3a:8f:a8:f8:46:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D1:08:3A:1E:2E:16:68:3C:0F:BF:72:C5:F5:40:EF:AC:6A:36:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
X509v3 Authority Key Identifier:
keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c2:25:41:05:2b:a2:40:66:24:95:e0:05:7e:3a:72:4e:3d:
fd:29:fd:b8:56:3f:6a:bf:ae:db:2e:f1:06:61:2f:12:6c:c6:
9f:20:e2:f0:31:a8:69:c6:46:7d:d8:34:97:4d:37:ba:de:d3:
25:05:cb:34:9d:2c:8b:45:d2:80:88:f6:f2:05:bc:2d:2d:6b:
83:33:89:f9:2d:52:34:70:5f:a1:10:c2:aa:99:b2:73:93:74:
1b:df:0d:d1:39:34:a9:81:72:e5:95:51:6e:65:1f:ed:4b:5d:
0c:5a:e8:42:57:10:82:c3:4a:22:4e:cf:ac:4c:70:aa:e8:09:
50:2d:72:ee:18:fe:ab:13:0d:22:c7:9a:af:b4:a4:33:9c:7a:
21:a3:1e:63:19:d4:32:5d:67:2a:3f:a8:49:4c:18:c1:65:c0:
45:c8:05:fe:dc:a6:0c:ea:33:0a:71:f8:fe:19:e4:b0:4f:53:
33:8b:6e:0a:9d:5c:61:ea:1d:b1:70:8e:7b:31:01:1e:d6:fb:
b4:9d:1a:73:9a:13:9f:68:b1:d9:af:78:40:8c:af:52:99:bb:
0e:f2:af:5c:35:06:91:63:66:c7:9e:d1:ad:18:7c:95:18:f9:
f7:a9:b8:b8:c4:80:0c:78:21:8b:9b:5e:f9:47:81:ee:d3:53:
46:72:52:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4YK7xDvL5OIA8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl
OTVjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ODRiZTFjNTAtNzc1OS00NGVmLTg5NjYtMjdmNjEyNGQ4Y2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Wt42QJJl3mIccgFuoY+uILlQ9n8payhD6z
/RjKRPpVwNweoQUWbXNliynzKZysMnT09urxZvC7bG715N5wkfCb+CNmStoH9V/7
dClN0frzf7v5Fzb+NMluArUmPq2j0rkKPdKOvd95Noxe7xsG+6jC1s6b8IxS0L6c
ubrFs+FghThcuJAZHwAKfgaxH9NdUiXQ/09O0oSz/OYmyfawaBHahzZwqqKmd01S
0tCa4sxbbGkcRt++xpYxgCwXPTRhhZeBpgFb2dyrW/JkzgmGY4r+1Jw8amrmAqaD
yspbGBiPeSuHCR6FIj1tnjGYISe+hVfg/X2A3yr0Oo+o+EZrSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDRCDoeLhZoPA+/csX1QO+sajZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5
OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMjdkMGZlNjEtOGE3Ni0z
NzQ4LWI5N2ItMGY3ZmI5OTI1ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4
ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0
ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh
YzU1NGU5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvEKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPCJUEFK6JAZiSV4AV+OnJOPf0p/bhWP2q/rtsu8QZhLxJsxp8g4vAx
qGnGRn3YNJdNN7re0yUFyzSdLItF0oCI9vIFvC0ta4MzifktUjRwX6EQwqqZsnOT
dBvfDdE5NKmBcuWVUW5lH+1LXQxa6EJXEILDSiJOz6xMcKroCVAtcu4Y/qsTDSLH
mq+0pDOceiGjHmMZ1DJdZyo/qElMGMFlwEXIBf7cpgzqMwpx+P4Z5LBPUzOLbgqd
XGHqHbFwjnsxAR7W+7SdGnOaE59osdmveECMr1KZuw7yr1w1BpFjZsee0a0YfJUY
+fepuLjEgAx4IYubXvlHge7TU0ZyUnI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:05 2025 by rpki-client