Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33a64204-875e-3cf6-b95f-35d2e6148d01.roa
File: 33a64204-875e-3cf6-b95f-35d2e6148d01.roa (raw, json)
Hash identifier: fu4J8tC5jxA8rwJO4l57ESahqnxQKXkod6hBwGgfk0s=
Subject key identifier: 0D:DD:02:27:DC:9F:89:7E:BC:AE:FB:72:4C:F1:2E:FE:D5:1C:5C:8F
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848DBD670A2F95A6F77C24A50A0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33a64204-875e-3cf6-b95f-35d2e6148d01.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 62610
IP address blocks: 128.1.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:70:a2:f9:5a:6f:77:c2:4a:50:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=6025144a-fdd2-4ff8-8220-88b27c87e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:3a:0f:d6:ea:9b:cf:1f:2f:5e:33:43:49:
0b:db:df:71:40:d5:e9:cb:e1:de:dd:f1:ac:48:c2:
ee:72:ca:93:a4:c7:87:59:3f:2c:1c:49:bc:e0:83:
2f:30:6b:aa:1c:1b:d3:98:cc:c8:f7:d7:b7:6b:0f:
07:10:a2:8c:7f:58:30:6b:15:85:9d:0f:39:c9:db:
78:30:b9:19:5c:a6:a6:be:a3:ed:43:94:d6:ec:f4:
c8:da:08:81:34:54:bd:9f:d5:5a:79:01:ee:94:db:
db:80:20:56:d8:03:21:eb:ce:91:84:b5:34:f3:24:
69:d8:60:b7:45:08:3f:65:81:1a:ba:05:73:a0:01:
42:ce:86:22:bd:40:e2:4f:ef:cd:71:2d:5d:2f:67:
70:c2:7f:ee:d8:bb:c1:9d:68:bb:5c:ef:5c:72:fe:
15:3f:c5:86:82:da:59:b5:bc:08:ea:fc:37:98:2b:
7c:ed:51:d6:3a:d7:69:c6:a2:77:a3:94:b7:9f:8a:
a5:84:00:7b:19:c1:45:02:f5:2f:fa:c1:18:d9:01:
c6:a5:51:b1:09:bd:21:57:d4:83:4e:e0:e0:ca:2d:
3d:ea:a6:5a:db:35:52:e7:06:e2:02:e7:71:ba:56:
e0:44:73:68:c6:4b:f9:4a:b0:7b:6c:f7:43:dd:d1:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DD:02:27:DC:9F:89:7E:BC:AE:FB:72:4C:F1:2E:FE:D5:1C:5C:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33a64204-875e-3cf6-b95f-35d2e6148d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:57:dc:06:1f:ab:7c:7a:a8:72:90:8d:d8:79:80:3f:4d:e0:
e3:dc:fc:eb:3a:dd:e7:c6:2f:5c:f0:04:9c:22:28:0f:3c:98:
3e:7f:3e:f4:22:2c:4e:a7:4b:84:fc:4b:4f:75:f8:e5:a2:20:
d5:4b:fe:6d:d3:c1:69:76:2c:a2:e5:24:43:82:a8:26:55:b2:
de:da:2b:72:89:31:10:dc:2b:6c:47:f7:c9:c6:7c:ee:4b:75:
71:40:98:22:53:f4:b5:27:a7:f1:79:dd:5c:db:fb:f1:60:63:
e1:63:9a:2b:7e:6c:b3:ca:26:e7:b2:23:59:2f:ca:b9:d0:51:
de:94:5f:08:e2:7e:cb:ea:ae:6e:41:91:86:95:e7:57:14:96:
55:9c:f8:d9:df:80:5e:80:f6:4b:25:8e:e9:9b:9e:ec:ed:64:
5e:3c:20:7c:bd:38:42:43:07:c9:d8:ca:25:52:4b:c7:fd:8c:
fe:95:9a:66:eb:85:8b:46:8e:72:ac:2b:b5:1c:a0:5b:49:06:
b8:b0:21:8c:b6:69:90:5b:13:1a:25:20:fe:f9:c8:fa:0c:17:
d6:79:b8:39:0b:0c:68:ad:0f:0b:50:55:17:ff:35:bc:c2:f7:
f2:b1:eb:b6:cc:1a:4b:3b:10:c0:15:19:b2:c9:a2:30:e9:12:
15:5c:ea:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nCi+Vpvd8JKUKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
NjAyNTE0NGEtZmRkMi00ZmY4LTgyMjAtODhiMjdjODdlNThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLs6D9bqm88fL14zQ0kL299xQNXpy+He3fGs
SMLucsqTpMeHWT8sHEm84IMvMGuqHBvTmMzI99e3aw8HEKKMf1gwaxWFnQ85ydt4
MLkZXKamvqPtQ5TW7PTI2giBNFS9n9VaeQHulNvbgCBW2AMh686RhLU08yRp2GC3
RQg/ZYEaugVzoAFCzoYivUDiT+/NcS1dL2dwwn/u2LvBnWi7XO9ccv4VP8WGgtpZ
tbwI6vw3mCt87VHWOtdpxqJ3o5S3n4qlhAB7GcFFAvUv+sEY2QHGpVGxCb0hV9SD
TuDgyi096qZa2zVS5wbiAudxulbgRHNoxkv5SrB7bPdD3dHBKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3dAifcn4l+vK77ckzxLv7VHFyPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzNhNjQyMDQtODc1ZS0z
Y2Y2LWI5NWYtMzVkMmU2MTQ4ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtX3AYfq3x6qHKQjdh5gD9N4OPc/Os63efGL1zwBJwiKA88mD5/PvQi
LE6nS4T8S091+OWiINVL/m3TwWl2LKLlJEOCqCZVst7aK3KJMRDcK2xH98nGfO5L
dXFAmCJT9LUnp/F53Vzb+/FgY+Fjmit+bLPKJueyI1kvyrnQUd6UXwjifsvqrm5B
kYaV51cUllWc+NnfgF6A9ksljumbnuztZF48IHy9OEJDB8nYyiVSS8f9jP6Vmmbr
hYtGjnKsK7UcoFtJBriwIYy2aZBbExolIP75yPoMF9Z5uDkLDGitDwtQVRf/NbzC
9/Kx67bMGks7EMAVGbLJojDpEhVc6j4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:48 2025 by rpki-client