Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa
File: 889a674f-b7ab-3a50-94db-75ada2818b38.roa (raw, json)
Hash identifier: 9u/GXPX9wm6LpLVIBXan7BQO54H4fO2OZYOUngX3eqo=
Subject key identifier: ED:D3:DA:9F:4A:33:98:B5:C8:53:DF:D6:24:10:58:A2:0C:2D:84:C1
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584953C41712179E73D1C884AB80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 2920
IP address blocks: 198.188.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:17:12:17:9e:73:d1:c8:84:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=e350ba8e-54b7-4b5c-aaaf-0e5df4931b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:c8:d5:98:88:fe:13:bc:0b:c7:24:8d:40:
f6:db:b1:17:67:2e:c5:73:44:ac:76:df:a6:0f:60:
35:dd:7f:4d:09:5b:0c:49:b2:52:00:62:04:6e:31:
9f:c9:c6:c9:68:7c:9f:2b:8b:f8:8a:d9:87:1d:84:
f1:51:09:8c:ce:27:08:e7:29:34:09:ea:17:f0:b2:
c2:12:48:a7:3a:7a:e0:a5:be:48:fc:03:d5:b3:b0:
7b:9b:10:07:6f:d9:9c:77:67:15:44:19:20:d9:15:
23:5c:7c:12:4b:f5:e5:8d:94:3c:62:a9:8d:f0:16:
70:5f:40:b8:2d:57:63:76:ab:3b:9d:d1:f8:05:69:
04:76:59:28:e2:bf:b5:fa:bc:65:86:75:10:48:f2:
bf:58:07:1a:73:37:68:74:49:70:c7:95:32:14:79:
19:b4:8b:b3:fe:e8:18:5f:e7:f3:67:06:34:89:b8:
9e:d9:70:93:54:0d:98:8b:41:8f:ef:ca:06:85:2e:
ac:d9:b9:10:78:2e:57:1e:4c:29:3d:5e:15:00:35:
f1:cd:a3:e5:01:e1:ca:4a:ed:41:54:5e:0e:1b:3d:
58:88:3c:3e:d9:d2:44:2b:1c:0c:f5:a9:b1:45:d0:
58:ed:29:74:e8:d4:52:f3:65:7d:d5:b7:60:51:4e:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:DA:9F:4A:33:98:B5:C8:53:DF:D6:24:10:58:A2:0C:2D:84:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/889a674f-b7ab-3a50-94db-75ada2818b38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
198.188.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:9b:65:61:9f:03:d2:41:b1:af:a8:ca:6d:f1:c6:47:31:7d:
73:67:55:0e:b4:ec:d8:bb:e6:fe:bd:56:3f:6f:e0:d0:ad:a7:
2f:04:0b:6a:85:5d:e7:ed:7c:ad:c9:71:56:bb:12:31:a4:a8:
18:b5:70:f4:ce:53:05:f0:a2:23:90:f8:32:b2:fb:87:fa:e9:
7b:eb:0f:4b:ed:c4:cf:35:12:cf:79:6e:ec:5a:16:da:a5:a8:
6d:ec:9d:11:9c:8c:41:55:eb:a3:a2:53:c5:71:8a:85:99:f5:
88:20:73:c3:3a:d3:01:a5:33:90:d6:70:21:da:00:1b:a0:1d:
9a:78:da:74:50:8d:34:22:a7:e8:70:98:a4:85:cf:26:7b:40:
71:ef:42:f9:88:dd:f7:a0:59:51:ef:a3:e0:e9:0b:3a:b6:bc:
54:c5:4c:85:d2:eb:2a:26:02:f9:4d:62:c2:08:bb:02:5e:eb:
9e:e0:ec:a0:9a:30:99:0d:19:06:bd:4f:01:14:2e:b6:04:b7:
f0:2b:d4:f7:f2:51:89:ac:fd:3b:ed:36:0d:5e:f7:34:e5:af:
11:7d:e1:84:82:07:4f:dd:71:08:7a:36:ac:18:38:bd:1f:b6:
51:fb:aa:98:7b:0a:cd:e7:50:35:c4:35:1e:ea:01:80:1c:51:
dd:12:b0:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBcSF55z0ciEq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTM1MGJhOGUtNTRiNy00YjVjLWFhYWYtMGU1ZGY0OTMxYjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz3I1ZiI/hO8C8ckjUD227EXZy7Fc0Ssdt+m
D2A13X9NCVsMSbJSAGIEbjGfycbJaHyfK4v4itmHHYTxUQmMzicI5yk0CeoX8LLC
EkinOnrgpb5I/APVs7B7mxAHb9mcd2cVRBkg2RUjXHwSS/XljZQ8YqmN8BZwX0C4
LVdjdqs7ndH4BWkEdlko4r+1+rxlhnUQSPK/WAcaczdodElwx5UyFHkZtIuz/ugY
X+fzZwY0ibie2XCTVA2Yi0GP78oGhS6s2bkQeC5XHkwpPV4VADXxzaPlAeHKSu1B
VF4OGz1YiDw+2dJEKxwM9amxRdBY7Sl06NRS82V91bdgUU5dZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3T2p9KM5i1yFPf1iQQWKIMLYTBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvODg5YTY3NGYtYjdhYi0z
YTUwLTk0ZGItNzVhZGEyODE4YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHubZWGfA9JBsa+oym3xxkcxfXNnVQ607Ni75v69Vj9v4NCtpy8EC2qF
XeftfK3JcVa7EjGkqBi1cPTOUwXwoiOQ+DKy+4f66XvrD0vtxM81Es95buxaFtql
qG3snRGcjEFV66OiU8VxioWZ9Yggc8M60wGlM5DWcCHaABugHZp42nRQjTQip+hw
mKSFzyZ7QHHvQvmI3fegWVHvo+DpCzq2vFTFTIXS6yomAvlNYsIIuwJe657g7KCa
MJkNGQa9TwEULrYEt/Ar1PfyUYms/TvtNg1e9zTlrxF94YSCB0/dcQh6NqwYOL0f
tlH7qph7Cs3nUDXENR7qAYAcUd0SsLo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:43 2025 by rpki-client