Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
File: 16315bab-49c8-3caf-be0c-7c6a9af964f5.roa (raw, json)
Hash identifier: GlnY/AbfdYTdC4NySmXmbLtFe5zq+r2wf22wYyRqvhE=
Subject key identifier: 60:73:15:D2:5C:D2:3E:5E:B8:56:A8:92:8D:19:36:FB:CC:68:B3:03
Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial: 010D0C9F4328584900214A8165B823DAD8EEA300
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 161.199.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4a:81:65:b8:23:da:d8:ee:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=fd55fd15-9e4a-4b60-8286-d6d1e082fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:ac:74:3f:12:99:17:b4:3b:35:2d:e1:3a:
b8:ae:0f:fb:da:66:40:79:fd:22:b4:38:5a:d7:8c:
9f:43:be:45:e6:c8:7f:48:3c:63:63:74:33:06:46:
eb:ca:da:58:f8:99:b1:2f:9a:9c:c4:05:7f:d8:a4:
9a:bf:6b:42:b7:8e:18:8b:54:4d:87:3b:4c:ff:57:
94:31:5d:09:b1:ee:93:01:d3:a4:31:37:e8:43:5a:
7b:1a:8a:e1:33:16:73:b4:24:80:7c:e7:72:77:27:
ff:02:a3:9c:46:50:49:2d:55:d7:29:05:db:0e:14:
0f:95:ea:43:f4:a8:b0:8d:4f:99:53:da:79:28:8c:
b1:9e:44:06:c3:f2:0e:04:d8:db:02:ce:67:05:ec:
46:b7:c5:ca:fa:94:93:cd:8b:2b:49:86:af:fa:8a:
e3:d0:c4:9f:93:56:43:c9:11:98:7b:2b:5e:43:1f:
f6:3a:46:fc:98:ae:a8:3b:91:6d:ec:b9:ba:cf:92:
6d:22:ca:ca:b3:80:f1:41:31:6b:0e:61:a9:40:fa:
78:ff:a8:16:1a:9c:85:cf:65:0b:31:96:e2:72:f3:
22:92:48:4e:b5:47:91:d9:45:00:59:a3:52:7b:f6:
58:41:30:9a:10:ee:51:45:ab:2e:ee:4e:c6:9f:2c:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:15:D2:5C:D2:3E:5E:B8:56:A8:92:8D:19:36:FB:CC:68:B3:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
X509v3 Authority Key Identifier:
keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0f:ac:58:7b:84:34:65:48:83:d9:b1:52:a2:00:44:35:e1:
1b:98:29:23:93:d9:97:57:1e:60:62:b8:d6:1e:03:3e:89:5b:
46:93:cb:8a:f7:3a:26:be:c6:95:4c:ce:68:7d:3c:6b:09:86:
93:88:b5:b6:c4:a3:0a:0d:53:05:4f:a5:7b:d2:aa:2f:3b:7c:
77:cb:17:d6:d9:06:4f:af:ee:dd:0d:20:98:38:e7:d6:d9:eb:
6a:ee:00:da:93:7e:f8:49:62:cd:03:6a:e2:af:ab:80:81:ab:
4e:36:e0:b2:fc:85:6f:ce:c3:74:e0:15:a1:db:b7:13:18:e2:
db:82:71:7d:52:b1:12:03:7f:b3:0a:72:71:6a:eb:dd:d2:17:
87:f7:d9:f6:ef:44:40:fd:dd:e1:eb:a0:ab:5b:88:9a:69:35:
38:a5:af:63:05:51:3f:db:a8:14:8a:7b:5c:57:27:e2:50:32:
f7:79:00:1f:11:43:e8:bb:5b:01:5f:01:9f:80:f7:44:10:c9:
11:12:2d:1d:d4:6d:8d:d0:19:f8:db:09:db:ba:b2:09:5a:5c:
3f:42:64:95:a9:44:25:44:f6:e2:b5:22:b7:26:97:ad:c8:d2:
54:70:e8:74:d7:aa:60:19:55:5a:23:98:e2:91:7d:ea:e4:ca:
f0:53:34:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUqBZbgj2tjuowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3
NmU4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZmQ1NWZkMTUtOWU0YS00YjYwLTgyODYtZDZkMWUwODJmZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntmsdD8SmRe0OzUt4Tq4rg/72mZAef0itDha
14yfQ75F5sh/SDxjY3QzBkbrytpY+JmxL5qcxAV/2KSav2tCt44Yi1RNhztM/1eU
MV0Jse6TAdOkMTfoQ1p7GorhMxZztCSAfOdydyf/AqOcRlBJLVXXKQXbDhQPlepD
9KiwjU+ZU9p5KIyxnkQGw/IOBNjbAs5nBexGt8XK+pSTzYsrSYav+orj0MSfk1ZD
yRGYeyteQx/2Okb8mK6oO5Ft7Lm6z5JtIsrKs4DxQTFrDmGpQPp4/6gWGpyFz2UL
MZbicvMikkhOtUeR2UUAWaNSe/ZYQTCaEO5RRasu7k7GnyyWRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBzFdJc0j5euFaoko0ZNvvMaLMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3
OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvMTYzMTViYWItNDljOC0z
Y2FmLWJlMGMtN2M2YTlhZjk2NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm
ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk
NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2
N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUPrFh7hDRlSIPZsVKiAEQ14RuYKSOT2ZdXHmBiuNYeAz6JW0aTy4r3
Oia+xpVMzmh9PGsJhpOItbbEowoNUwVPpXvSqi87fHfLF9bZBk+v7t0NIJg459bZ
62ruANqTfvhJYs0DauKvq4CBq0424LL8hW/Ow3TgFaHbtxMY4tuCcX1SsRIDf7MK
cnFq693SF4f32fbvRED93eHroKtbiJppNTilr2MFUT/bqBSKe1xXJ+JQMvd5AB8R
Q+i7WwFfAZ+A90QQyRESLR3UbY3QGfjbCdu6sglaXD9CZJWpRCVE9uK1Ircml63I
0lRw6HTXqmAZVVojmOKRferkyvBTNPE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:08 2025 by rpki-client