Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
File: 9f8ef9be-15b7-3961-a979-22278b9141cc.roa (raw, json)
Hash identifier: 4tqgZhfZCYzVUkOc9STRfmd64n5g/OprQGHeZgWIMBU=
Subject key identifier: 08:B3:7A:E2:D4:E9:BC:3F:90:87:1A:E9:7E:47:36:8A:B5:0F:F3:10
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858489BA0A605819B2326544C53E0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 2559
IP address blocks: 198.241.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a6:05:81:9b:23:26:54:4c:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=e2ecfcfb-8885-4615-a66a-3ea84d9a7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:bf:3c:73:fa:4d:66:d0:2b:9f:c6:1a:28:
93:44:c8:3f:5b:fa:bd:08:d4:f0:fe:7c:ab:5b:b6:
69:ec:98:4a:a1:96:72:31:8b:db:6c:43:c8:24:4e:
75:22:89:86:19:90:ba:10:6b:cf:6d:13:c0:85:42:
59:6b:f1:af:9c:f0:40:55:2c:a7:fd:b7:6a:9a:33:
da:98:40:8d:16:97:e6:08:5c:32:ee:66:b4:cb:58:
18:07:2a:74:06:59:42:3d:1f:75:28:59:7b:51:fd:
ee:b3:90:fd:3f:ac:a7:85:9b:69:cb:17:d1:c2:88:
0b:00:dc:ed:e2:46:47:fb:b1:82:04:6a:ab:ca:f2:
b2:8d:ab:36:2f:8b:ea:6a:a1:4c:bf:83:38:cd:9e:
34:da:83:8e:a4:cd:d8:da:c9:60:30:b8:dc:27:98:
05:12:f3:b7:50:25:fa:51:63:1d:54:aa:38:50:98:
28:3b:af:13:4b:37:60:e0:df:e8:93:e9:85:aa:2f:
c6:1a:43:8e:e2:11:9f:0f:f7:77:13:2f:dd:2b:ab:
5f:73:81:3d:68:a1:c3:80:05:64:ba:c9:b3:a7:9c:
ba:bf:d1:e7:de:bc:a3:c6:fa:bf:ab:08:29:2e:3c:
40:7f:fe:dd:7f:bc:3d:60:cd:40:83:ba:da:05:6e:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:7A:E2:D4:E9:BC:3F:90:87:1A:E9:7E:47:36:8A:B5:0F:F3:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/9f8ef9be-15b7-3961-a979-22278b9141cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:fd:c0:62:f8:db:7d:81:4e:4a:d5:14:db:30:81:8d:c6:38:
17:b9:61:8d:3b:0e:51:08:cc:85:d2:34:76:4b:04:17:da:b3:
60:a2:72:46:b5:a8:97:b7:d3:60:99:31:e4:7e:27:42:0c:f4:
8e:fd:9d:9d:00:8f:66:7b:22:fe:5d:a3:ba:e4:c9:17:cc:12:
a0:17:dc:b3:ba:a3:11:56:ef:73:35:ab:c1:b2:3b:0c:7b:08:
ee:6a:51:39:04:84:55:e8:aa:83:94:ed:37:da:66:43:d7:e6:
be:68:ec:82:65:a0:30:6a:42:ea:cb:93:a0:76:67:3d:01:1f:
e6:9b:14:da:84:4b:07:6b:56:a8:06:f5:b0:fc:27:a3:a0:2e:
d9:de:fe:06:e1:ab:e5:68:7a:6f:96:d1:6d:b8:35:5a:f0:6a:
c7:70:fb:4e:e6:c1:2a:85:00:bf:a3:eb:be:12:41:92:13:c6:
3d:cb:c5:13:ee:2d:ca:5e:18:56:8c:92:bf:78:f0:a3:87:d9:
b0:8c:d0:9e:5d:ce:e0:2a:c3:03:5e:07:06:5c:03:68:dd:90:
2a:d8:2e:dc:be:ba:13:d2:ff:4d:60:b4:82:c8:b8:e1:1a:7a:
13:81:ff:b7:8e:b2:68:6b:cf:c3:0c:28:a6:77:35:7f:a8:af:
21:3b:93:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKYFgZsjJlRMU+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZTJlY2ZjZmItODg4NS00NjE1LWE2NmEtM2VhODRkOWE3OTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WC/PHP6TWbQK5/GGiiTRMg/W/q9CNTw/nyr
W7Zp7JhKoZZyMYvbbEPIJE51IomGGZC6EGvPbRPAhUJZa/GvnPBAVSyn/bdqmjPa
mECNFpfmCFwy7ma0y1gYByp0BllCPR91KFl7Uf3us5D9P6ynhZtpyxfRwogLANzt
4kZH+7GCBGqryvKyjas2L4vqaqFMv4M4zZ402oOOpM3Y2slgMLjcJ5gFEvO3UCX6
UWMdVKo4UJgoO68TSzdg4N/ok+mFqi/GGkOO4hGfD/d3Ey/dK6tfc4E9aKHDgAVk
usmzp5y6v9Hn3ryjxvq/qwgpLjxAf/7df7w9YM1Ag7raBW4ddwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAizeuLU6bw/kIca6X5HNoq1D/MQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvOWY4ZWY5YmUtMTViNy0z
OTYxLWE5NzktMjIyNzhiOTE0MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHj9wGL4232BTkrVFNswgY3GOBe5YY07DlEIzIXSNHZLBBfas2Cicka1
qJe302CZMeR+J0IM9I79nZ0Aj2Z7Iv5do7rkyRfMEqAX3LO6oxFW73M1q8GyOwx7
CO5qUTkEhFXoqoOU7TfaZkPX5r5o7IJloDBqQurLk6B2Zz0BH+abFNqESwdrVqgG
9bD8J6OgLtne/gbhq+Voem+W0W24NVrwasdw+07mwSqFAL+j674SQZITxj3LxRPu
LcpeGFaMkr948KOH2bCM0J5dzuAqwwNeBwZcA2jdkCrYLty+uhPS/01gtILIuOEa
ehOB/7eOsmhrz8MMKKZ3NX+oryE7kzc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:43 2025 by rpki-client