Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
File: d3a5dd72-8e2a-305c-8745-ad834707c297.roa (raw, json)
Hash identifier: Piw7vgSWhLzQPPyzQG638xpHI2q8kIf0BMTG6XrD70o=
Subject key identifier: 50:63:B8:4B:E8:F3:72:B1:9E:59:73:C8:DF:BE:75:1E:5D:45:97:0B
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F43285848FD56B98E4651451A94B02418
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 211440
IP address blocks: 199.48.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b9:8e:46:51:45:1a:94:b0:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=d260b206-8466-43c7-8a48-80f10e76c350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4b:08:83:a4:c9:a7:20:32:9e:85:08:48:37:
b2:a9:cb:0e:4c:30:0a:10:9b:6c:85:da:4a:da:c2:
fd:6f:f9:74:bf:42:c4:0c:20:50:be:5e:89:37:14:
03:47:ca:d6:44:8f:7f:c0:6a:ca:3d:f5:11:43:3f:
1c:8d:15:a7:69:31:06:f1:28:33:c2:92:2d:bb:b5:
e1:40:fb:7c:24:52:38:12:c3:fe:de:a4:9a:91:c9:
29:f4:3f:0f:6c:6b:52:5d:e5:6b:aa:9f:d3:31:f3:
70:2a:07:de:0e:b5:18:3b:bd:0b:db:3f:2e:48:50:
05:a0:df:6c:5f:51:f7:f6:ef:86:b2:0c:54:9f:01:
26:b9:61:c4:22:b9:53:a1:eb:2e:fc:74:45:03:fc:
7e:e5:08:e5:f3:ff:a8:c7:d9:97:a7:54:1e:95:85:
2b:b1:e1:64:27:71:63:e2:2b:64:5d:74:62:77:51:
69:4f:a5:52:8f:f8:23:74:70:98:d6:c6:59:1b:69:
bd:20:82:bc:46:48:ed:e4:23:0d:19:03:4c:99:76:
88:4d:37:d3:59:05:d4:01:28:43:40:bf:b5:78:ca:
09:27:ad:70:4b:8d:fb:a3:8d:df:0d:15:8d:80:60:
5f:4b:60:0d:1a:57:55:c2:30:69:c6:b2:30:54:fa:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:B8:4B:E8:F3:72:B1:9E:59:73:C8:DF:BE:75:1E:5D:45:97:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a9:06:90:57:b1:9e:f1:a9:7a:a5:83:c6:26:da:e7:46:e6:
df:a0:47:c8:b9:ff:fb:be:97:7d:17:78:fc:9f:77:d4:fc:a8:
af:72:74:55:0d:71:42:06:7f:bb:2d:40:9c:9b:05:cf:7f:dc:
bf:66:b4:0d:af:c6:44:5c:c3:30:dd:1e:7f:34:6c:16:89:3a:
f3:9f:16:98:4d:93:43:01:e0:57:8f:be:ef:b3:3f:e2:1c:f6:
7e:06:85:12:03:7e:04:fb:19:af:58:aa:ba:d8:eb:b2:af:e5:
91:4f:cb:c1:9c:a3:bc:c1:9b:77:d5:fa:d2:a0:7f:b8:6f:07:
c0:59:2b:71:cf:a8:52:bf:de:c2:b5:c7:d2:85:4c:f9:14:37:
c0:e9:93:14:da:fd:19:af:90:79:8d:8a:d1:fb:eb:14:66:89:
79:6b:eb:af:63:5d:bd:b6:d8:22:37:3a:cb:74:de:46:35:93:
db:3a:69:a4:38:56:f2:9c:5f:46:d8:59:e1:18:2d:10:a5:a6:
a5:15:79:c2:fb:da:43:e0:2a:a0:e9:e8:6f:ff:82:33:4e:81:
41:ab:0d:c5:4c:2c:3f:1e:12:9d:28:f4:3c:0b:de:5c:6a:dc:
cc:3d:59:c6:69:0b:48:b4:37:eb:48:dd:dc:86:c5:77:1c:d7:
f2:df:cd:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrmORlFFGpSwJBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0
NDk0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDI2MGIyMDYtODQ2Ni00M2M3LThhNDgtODBmMTBlNzZjMzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UsIg6TJpyAynoUISDeyqcsOTDAKEJtshdpK
2sL9b/l0v0LEDCBQvl6JNxQDR8rWRI9/wGrKPfURQz8cjRWnaTEG8SgzwpItu7Xh
QPt8JFI4EsP+3qSakckp9D8PbGtSXeVrqp/TMfNwKgfeDrUYO70L2z8uSFAFoN9s
X1H39u+GsgxUnwEmuWHEIrlToesu/HRFA/x+5Qjl8/+ox9mXp1QelYUrseFkJ3Fj
4itkXXRid1FpT6VSj/gjdHCY1sZZG2m9IIK8Rkjt5CMNGQNMmXaITTfTWQXUAShD
QL+1eMoJJ61wS437o43fDRWNgGBfS2ANGldVwjBpxrIwVPqaiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBjuEvo83KxnllzyN++dR5dRZcLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1
NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDNhNWRkNzItOGUyYS0z
MDVjLTg3NDUtYWQ4MzQ3MDdjMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx
YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk
NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk
ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGpBpBXsZ7xqXqlg8Ym2udG5t+gR8i5//u+l30XePyfd9T8qK9ydFUN
cUIGf7stQJybBc9/3L9mtA2vxkRcwzDdHn80bBaJOvOfFphNk0MB4FePvu+zP+Ic
9n4GhRIDfgT7Ga9YqrrY67Kv5ZFPy8Gco7zBm3fV+tKgf7hvB8BZK3HPqFK/3sK1
x9KFTPkUN8DpkxTa/RmvkHmNitH76xRmiXlr669jXb222CI3Ost03kY1k9s6aaQ4
VvKcX0bYWeEYLRClpqUVecL72kPgKqDp6G//gjNOgUGrDcVMLD8eEp0o9DwL3lxq
3Mw9WcZpC0i0N+tI3dyGxXcc1/LfzfA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:04 2025 by rpki-client