Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
File: 15d723b0-2ac4-355b-9b80-4009a2416282.roa (raw, json)
Hash identifier: idrJqGOnKtScf0T93lbBxqKQWjoGBMplR2uDQ0opDf0=
Subject key identifier: 84:5D:F3:36:76:D9:77:05:BF:7B:91:83:85:C4:AF:FC:F5:32:B9:D4
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490E16BFBA4BC04EB45A88D380
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 19437
IP address blocks: 131.153.176.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:bf:ba:4b:c0:4e:b4:5a:88:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=654a07b7-f5c2-4ee5-9d0a-b0fbe9cec628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:7f:cb:1e:6d:2c:57:3a:5a:e3:2f:02:03:
9e:6e:ec:75:b8:38:9d:07:a9:a9:35:8a:0c:bb:ef:
d7:57:2a:20:f8:75:13:4f:ce:90:e9:d0:bc:44:84:
83:81:fa:c2:a4:1c:f9:32:a7:28:a3:da:31:8a:c9:
f5:9a:b4:aa:6e:33:22:3d:25:37:ed:d9:53:66:f7:
56:c5:db:e7:af:03:81:b9:21:e0:c1:e5:ad:a5:85:
40:e7:b3:7e:5a:83:26:62:08:04:3e:ff:ab:c7:bf:
83:32:96:47:e2:fa:59:a5:e5:ec:35:75:f3:7c:3b:
c0:b2:64:da:54:04:5a:7b:11:65:d8:8f:be:6f:9b:
9e:a7:65:5d:41:9a:3d:72:d4:bc:54:79:36:4d:a5:
a1:05:76:d4:68:48:93:3f:10:99:34:ec:9c:e0:3a:
f5:5b:a8:5e:da:fb:1a:58:d8:3f:69:d9:4f:55:3b:
6e:de:28:a3:62:05:a0:63:ce:27:23:7c:da:5c:1f:
bb:c7:84:6b:56:16:af:e0:11:c2:b0:c7:74:c5:38:
4b:e7:d3:b8:34:81:eb:e3:b8:95:a6:fc:60:5a:23:
93:32:ef:d1:dc:b1:22:58:7f:7e:77:14:45:9d:19:
80:33:f5:04:b9:16:bd:76:9e:c7:89:98:7e:38:c4:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:F3:36:76:D9:77:05:BF:7B:91:83:85:C4:AF:FC:F5:32:B9:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e2:74:35:a4:8c:62:38:af:e3:71:d7:b0:30:5a:3a:ac:35:
64:23:25:f7:db:44:ae:21:d8:61:73:bd:cb:3a:b7:a9:ae:7b:
bc:b7:97:e0:fa:e6:4e:81:11:d7:d6:04:8d:8b:85:e6:e8:a8:
37:1f:7c:5c:2e:9a:10:da:12:5b:7b:55:e4:72:ec:72:11:e7:
6a:86:cb:19:fd:cb:fe:ee:e1:95:bd:20:7b:62:0a:f0:c6:c0:
01:92:a1:22:4a:28:ba:c7:9a:30:d2:ec:ea:40:60:06:0d:90:
f4:61:c5:ff:7f:18:53:04:7e:2a:2b:a9:7a:4c:46:fc:59:04:
be:74:97:56:8a:4a:5f:2c:75:97:5e:e0:2a:67:36:bb:f8:aa:
49:4f:59:d7:8b:e6:c7:3f:f6:78:31:58:11:e5:5e:f7:c3:94:
31:0e:70:35:81:bb:2f:bf:d9:dc:87:29:a2:e4:02:7d:79:6b:
04:e6:c9:92:ae:fb:2b:d4:78:08:21:a3:13:a9:a9:03:dc:16:
e1:76:2b:bd:1b:ab:5d:ba:3a:b9:0a:1d:83:cb:de:2d:85:14:
fe:bb:02:70:9d:1e:79:26:69:23:55:62:82:d7:e7:89:a2:47:
92:36:d5:61:e3:77:4d:6f:57:e8:87:56:8a:0d:37:56:e6:6a:
cb:84:3d:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr+6S8BOtFqI04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjU0YTA3YjctZjVjMi00ZWU1LTlkMGEtYjBmYmU5Y2VjNjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YV/yx5tLFc6WuMvAgOebux1uDidB6mpNYoM
u+/XVyog+HUTT86Q6dC8RISDgfrCpBz5Mqcoo9oxisn1mrSqbjMiPSU37dlTZvdW
xdvnrwOBuSHgweWtpYVA57N+WoMmYggEPv+rx7+DMpZH4vpZpeXsNXXzfDvAsmTa
VARaexFl2I++b5uep2VdQZo9ctS8VHk2TaWhBXbUaEiTPxCZNOyc4Dr1W6he2vsa
WNg/adlPVTtu3iijYgWgY84nI3zaXB+7x4RrVhav4BHCsMd0xThL59O4NIHr47iV
pvxgWiOTMu/R3LEiWH9+dxRFnRmAM/UEuRa9dp7HiZh+OMR6GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRd8zZ22XcFv3uRg4XEr/z1MrnUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTVkNzIzYjAtMmFjNC0z
NTViLTliODAtNDAwOWEyNDE2MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg5mwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvidDWkjGI4r+Nx17AwWjqsNWQjJffbRK4h2GFzvcs6t6mue7y3l+D6
5k6BEdfWBI2LheboqDcffFwumhDaElt7VeRy7HIR52qGyxn9y/7u4ZW9IHtiCvDG
wAGSoSJKKLrHmjDS7OpAYAYNkPRhxf9/GFMEfiorqXpMRvxZBL50l1aKSl8sdZde
4CpnNrv4qklPWdeL5sc/9ngxWBHlXvfDlDEOcDWBuy+/2dyHKaLkAn15awTmyZKu
+yvUeAghoxOpqQPcFuF2K70bq126OrkKHYPL3i2FFP67AnCdHnkmaSNVYoLX54mi
R5I21WHjd01vV+iHVooNN1bmasuEPYQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:48 2025 by rpki-client