Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa
File: 958b8918-f172-31ae-a424-106ec0eef078.roa (raw, json)
Hash identifier: NRqF3d9BZvOovLQqYSBXX1M5of/y4GLaryI+Fo4cnRc=
Subject key identifier: B4:BF:BB:88:44:7A:4E:B3:DB:0B:AF:B3:35:50:BB:8D:66:39:48:36
Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial: 010D0C9F43285848E006571247DD3F63B3BF3F40
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 56274
IP address blocks: 198.208.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:57:12:47:dd:3f:63:b3:bf:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=ead4cf00-a8dc-4d45-97c2-2810f994d313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:26:09:d7:6f:2c:6a:3a:2f:44:5a:ca:2c:
79:b7:94:74:4b:aa:5d:e8:38:65:d8:f3:9d:f1:1d:
a0:87:f9:ba:86:4d:4b:79:c9:32:77:f7:11:ec:1b:
55:31:d2:4f:a8:86:df:cf:70:a8:b1:06:98:e7:51:
c1:15:3a:15:85:8c:98:bb:be:3c:53:de:51:a4:d1:
f8:e0:ce:39:dc:00:46:22:84:53:08:ac:ff:aa:3e:
f8:1e:af:80:00:fd:51:c6:d6:c1:57:40:23:82:64:
40:8b:70:64:57:e6:7a:ea:f0:69:01:e6:42:40:da:
f7:7d:8e:bf:b7:a2:4e:68:b3:f5:7d:fa:72:37:0e:
09:1f:42:34:75:94:13:af:6b:38:5a:07:76:48:d8:
d1:3a:1d:d8:b0:3c:65:12:79:e2:17:aa:fa:07:bf:
fa:74:d9:90:9d:c5:25:7c:26:d2:92:2c:31:71:f8:
6e:63:fa:55:82:f9:6a:ed:a3:d8:3a:fe:6e:d7:c0:
70:68:74:56:0b:1e:cd:e1:0f:6a:76:20:ed:8c:e7:
f8:25:85:07:28:fa:c6:8f:89:29:6c:23:db:f8:3c:
1e:24:17:86:76:ab:58:2e:40:9a:e4:5d:8b:76:b2:
b1:b2:01:33:1e:7c:26:30:96:be:ac:22:56:0b:6a:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:BB:88:44:7A:4E:B3:DB:0B:AF:B3:35:50:BB:8D:66:39:48:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
X509v3 Authority Key Identifier:
keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.208.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:21:ab:35:f9:62:16:5d:35:25:9a:eb:ac:44:af:af:2c:c1:
c8:7b:4f:36:0f:49:11:13:9f:57:16:62:c7:8d:00:24:3f:90:
1e:f2:0e:48:67:f7:45:7e:85:5f:11:4b:58:8b:5a:c1:87:e8:
2f:6b:b8:bc:0e:54:82:5a:ff:89:b2:31:7a:0e:67:d6:d7:c3:
39:db:7c:d6:76:87:4e:94:1f:46:e8:07:8e:d5:e1:48:ca:2d:
ee:03:ae:46:06:55:0c:b6:94:ad:a9:ae:40:1e:53:0f:51:70:
af:59:76:10:fc:f6:58:f3:e5:02:d2:c0:2a:ff:28:9d:2e:75:
95:93:a0:12:99:67:71:9b:fe:18:bc:b6:2a:11:b5:1c:a7:92:
f1:63:20:0a:f0:a5:b9:11:bd:8a:2d:91:01:86:30:40:89:18:
bd:02:26:f7:6a:05:8b:70:f0:13:7d:9d:4c:88:96:af:41:5e:
d3:9f:80:3a:be:e0:1f:2c:f7:ad:76:f9:50:66:86:f9:23:0f:
84:5b:c9:d7:4e:27:62:c9:87:6d:00:1f:43:54:86:df:10:cc:
43:7e:2d:3d:2d:c9:87:b8:74:f5:63:1d:8b:e0:d8:64:4e:ce:
b1:31:d8:0b:63:00:5c:79:0e:3c:00:90:f7:2d:24:f6:c4:09:
f5:58:58:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlcSR90/Y7O/P0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWFkNGNmMDAtYThkYy00ZDQ1LTk3YzItMjgxMGY5OTRkMzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp8mCddvLGo6L0Rayix5t5R0S6pd6Dhl2POd
8R2gh/m6hk1Leckyd/cR7BtVMdJPqIbfz3CosQaY51HBFToVhYyYu748U95RpNH4
4M453ABGIoRTCKz/qj74Hq+AAP1RxtbBV0AjgmRAi3BkV+Z66vBpAeZCQNr3fY6/
t6JOaLP1ffpyNw4JH0I0dZQTr2s4Wgd2SNjROh3YsDxlEnniF6r6B7/6dNmQncUl
fCbSkiwxcfhuY/pVgvlq7aPYOv5u18BwaHRWCx7N4Q9qdiDtjOf4JYUHKPrGj4kp
bCPb+DweJBeGdqtYLkCa5F2LdrKxsgEzHnwmMJa+rCJWC2pLNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLS/u4hEek6z2wuvszVQu41mOUg2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvOTU4Yjg5MTgtZjE3Mi0z
MWFlLWE0MjQtMTA2ZWMwZWVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwhqzX5YhZdNSWa66xEr68swch7TzYPSRETn1cWYseNACQ/kB7yDkhn
90V+hV8RS1iLWsGH6C9ruLwOVIJa/4myMXoOZ9bXwznbfNZ2h06UH0boB47V4UjK
Le4DrkYGVQy2lK2prkAeUw9RcK9ZdhD89ljz5QLSwCr/KJ0udZWToBKZZ3Gb/hi8
tioRtRynkvFjIArwpbkRvYotkQGGMECJGL0CJvdqBYtw8BN9nUyIlq9BXtOfgDq+
4B8s9612+VBmhvkjD4RbyddOJ2LJh20AH0NUht8QzEN+LT0tyYe4dPVjHYvg2GRO
zrEx2AtjAFx5DjwAkPctJPbECfVYWBc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:23 2025 by rpki-client