Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
File: 64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa (raw, json)
Hash identifier: zxVS0LXN0BGAFjEvTFlq8J8P7EW/LyNCu+yZLF2esWo=
Subject key identifier: D0:4A:AB:C1:24:73:78:D9:85:CB:56:AF:13:15:6D:C7:B6:E1:89:94
Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial: 010D0C9F43285848A830B564D5D5B56F0D55E3E0
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 394195
IP address blocks: 199.7.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b5:64:d5:d5:b5:6f:0d:55:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=909c17eb-1774-486e-96c9-bf162b0e02cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:16:aa:0e:38:1f:ef:d3:c6:b0:1c:34:33:
b0:98:31:61:af:60:4b:78:e6:bb:65:ea:69:81:ef:
81:67:46:a2:d2:30:e0:40:4d:78:5f:5c:39:f1:99:
cd:29:a5:b5:38:43:52:c2:9f:10:8d:51:62:f9:cd:
90:50:7b:af:7e:a5:33:c3:df:69:7c:72:64:4b:36:
8b:fd:49:bd:df:ec:bf:a2:bb:ac:e5:55:80:58:9a:
4b:1d:4a:14:82:15:66:99:19:8f:bd:9d:19:0c:82:
78:74:89:aa:e3:f5:3d:82:8b:70:98:f9:7d:dc:d3:
c7:9d:d7:38:7a:a6:4c:a9:23:d6:16:a3:b7:67:ee:
17:17:8e:27:bb:96:e4:4f:0c:ae:57:9f:5c:c1:45:
8b:8c:e4:e1:12:2e:2f:f0:cc:4c:d1:00:ee:f2:6d:
4d:b5:32:3e:aa:f7:c2:22:26:a0:f9:96:1d:f9:0f:
bb:06:1a:5b:bf:ca:64:e5:d8:14:2d:63:4b:8e:9f:
5c:5c:4a:41:08:13:1a:a0:28:be:5f:30:70:1b:4d:
23:89:a9:de:ee:bc:8a:5f:d4:1e:16:55:c2:5f:77:
6f:3a:c1:0a:19:e5:0a:ae:10:77:a6:49:3e:c2:78:
ee:13:4e:03:9e:0e:aa:08:bc:05:bb:6a:27:17:bc:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:AB:C1:24:73:78:D9:85:CB:56:AF:13:15:6D:C7:B6:E1:89:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
X509v3 Authority Key Identifier:
keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:cb:9b:3a:ba:88:ac:53:91:75:49:4b:a8:62:89:14:28:94:
c0:3a:c4:3b:66:55:48:21:27:96:fb:91:52:50:fd:57:46:6d:
0f:93:e5:6c:91:b0:13:0e:09:c4:33:84:3c:0d:7a:be:01:2d:
62:7b:c5:00:86:c1:b3:5d:bb:98:c2:65:d2:78:b5:30:d8:39:
4b:be:34:b7:0d:9f:4a:b9:26:80:ea:b8:49:72:98:32:ee:32:
1f:13:1f:56:c6:c9:37:ed:eb:cd:82:da:5c:3f:be:15:6d:bf:
7e:e0:4c:47:86:2b:9d:cd:a0:d0:f5:30:cc:14:f1:75:e1:e9:
92:81:07:a2:21:37:cb:e7:84:7e:a4:1d:a3:8a:3b:58:a0:68:
09:2d:d4:48:27:3b:42:56:d2:90:89:5c:b6:fc:19:13:57:e5:
11:e0:d7:53:ce:be:a9:e7:4c:21:92:98:98:8c:00:b4:6b:1c:
c9:99:06:d0:fe:0d:7e:1b:ae:15:dd:de:ca:69:c3:d8:0a:c9:
46:a8:6a:e4:14:36:58:a9:f9:e8:5d:f1:f6:27:f7:5a:f8:39:
4f:c5:a1:73:86:87:c7:1e:0f:4e:44:21:99:af:96:5d:bb:39:
30:48:e4:c5:df:28:10:8f:fb:ff:18:07:de:42:6b:cf:6a:d2:
2a:95:4f:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLVk1dW1bw1V4+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj
MzZjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
OTA5YzE3ZWItMTc3NC00ODZlLTk2YzktYmYxNjJiMGUwMmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6MWqg44H+/TxrAcNDOwmDFhr2BLeOa7Zepp
ge+BZ0ai0jDgQE14X1w58ZnNKaW1OENSwp8QjVFi+c2QUHuvfqUzw99pfHJkSzaL
/Um93+y/orus5VWAWJpLHUoUghVmmRmPvZ0ZDIJ4dImq4/U9gotwmPl93NPHndc4
eqZMqSPWFqO3Z+4XF44nu5bkTwyuV59cwUWLjOThEi4v8MxM0QDu8m1NtTI+qvfC
Iiag+ZYd+Q+7Bhpbv8pk5dgULWNLjp9cXEpBCBMaoCi+XzBwG00jiane7ryKX9Qe
FlXCX3dvOsEKGeUKrhB3pkk+wnjuE04Dng6qCLwFu2onF7xLaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBKq8Ekc3jZhctWrxMVbce24YmUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj
ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvNjRmMzA5OGMtMjNkZC0z
MWNlLTlmMGEtNThlNzNhM2YzNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz
ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk
YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh
OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjLmzq6iKxTkXVJS6hiiRQolMA6xDtmVUghJ5b7kVJQ/VdGbQ+T5WyR
sBMOCcQzhDwNer4BLWJ7xQCGwbNdu5jCZdJ4tTDYOUu+NLcNn0q5JoDquElymDLu
Mh8TH1bGyTft682C2lw/vhVtv37gTEeGK53NoND1MMwU8XXh6ZKBB6IhN8vnhH6k
HaOKO1igaAkt1EgnO0JW0pCJXLb8GRNX5RHg11POvqnnTCGSmJiMALRrHMmZBtD+
DX4brhXd3sppw9gKyUaoauQUNlip+ehd8fYn91r4OU/FoXOGh8ceD05EIZmvll27
OTBI5MXfKBCP+/8YB95Ca89q0iqVT7g=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:23 2025 by rpki-client