Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa
File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json)
Hash identifier: giRwfLT7FgIQSPTkOEwAUIHrX5XaUTXP9mV9XwyVdcw=
Subject key identifier: 1C:41:1D:6F:F2:8F:A9:92:B1:C8:24:45:FC:B4:F3:EE:12:BD:48:94
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858494733DB5EEDE35D0A84D83920
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 23154
IP address blocks: 148.164.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:db:5e:ed:e3:5d:0a:84:d8:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=97ac2650-22bc-4df0-a029-e53a547c5da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:53:12:70:03:8a:e5:27:24:93:84:78:6e:
9a:c2:4b:1d:a2:81:95:5e:6f:bd:ee:4b:a9:ad:71:
80:38:60:14:e2:5c:73:76:7b:8f:79:4a:14:05:0c:
6e:3a:f0:9d:10:4d:f3:f6:11:54:9b:ea:ee:e5:58:
cf:40:ba:20:3b:e1:a1:54:45:0d:1f:b7:bf:93:3e:
a4:fb:7c:95:56:d1:b7:0e:ff:d5:e6:02:67:66:51:
22:ec:b3:64:63:e9:42:1a:9d:23:20:b3:91:13:c8:
c7:9a:b6:25:cd:d0:46:ba:4b:c7:45:f5:0b:4d:2f:
fc:d7:ec:16:c9:8a:f1:b1:a2:d2:e7:fb:b3:7b:13:
96:7b:33:b0:0d:10:05:5d:39:79:cd:17:21:bc:83:
3c:2d:06:2e:ee:fc:ba:7c:e3:d0:26:c2:40:80:5e:
79:78:63:cf:89:a5:a7:a2:dc:c1:33:16:4d:89:d7:
2e:cc:f9:8e:ac:4c:2f:e8:96:43:c3:d3:aa:f6:7e:
8f:e1:5a:61:31:a1:30:63:57:ac:1d:43:c3:81:c6:
3f:c9:59:d8:28:0e:ae:31:a3:75:22:33:15:e1:9a:
ad:81:83:3d:42:10:7e:d4:05:56:d9:c3:6b:00:03:
a0:60:eb:66:f1:ca:cb:cc:a5:92:24:be:d7:70:a3:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:1D:6F:F2:8F:A9:92:B1:C8:24:45:FC:B4:F3:EE:12:BD:48:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:1c:c9:43:b6:2f:4c:e8:69:2e:50:19:ed:02:41:86:d8:e2:
b2:89:cb:85:41:08:dc:c7:41:dd:52:84:39:0d:c6:92:25:42:
df:28:9c:a4:21:65:83:3b:bd:6d:be:20:30:73:1e:9f:5d:cc:
37:3a:62:9f:fd:26:1a:7a:29:eb:7f:18:4f:23:4c:46:c0:e5:
ea:88:41:6b:9a:ad:75:32:c6:c7:1a:fa:e6:09:b6:8b:d6:0f:
9e:ff:3e:61:55:1e:06:70:33:12:a3:0d:b2:1c:e9:e8:06:d6:
0d:4f:35:b6:e5:7d:d5:26:53:d8:be:c8:c5:d3:3c:e7:b1:3a:
d5:45:54:0f:f2:18:db:4b:62:82:e6:8e:bf:c1:5d:6e:72:02:
93:b8:59:0b:30:f2:3c:78:50:5c:9e:c5:e2:17:ed:5a:fc:e7:
fe:25:c2:34:df:cf:76:b9:f0:6e:43:07:1e:9a:af:ca:5a:fe:
f9:1e:23:72:20:7d:8b:cc:38:9e:94:0b:68:7e:21:c4:21:77:
48:aa:70:5c:f8:63:86:26:32:ed:85:9a:a7:44:4e:f1:c8:0a:
59:87:d0:e6:65:71:d4:77:2d:3c:d2:59:e0:20:41:08:44:d3:
3d:cc:98:c1:fd:2b:a4:fc:4e:0e:e2:90:05:d3:99:6d:7a:c2:
5c:eb:c9:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM9te7eNdCoTYOSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
OTdhYzI2NTAtMjJiYy00ZGYwLWEwMjktZTUzYTU0N2M1ZGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnVTEnADiuUnJJOEeG6awksdooGVXm+97kup
rXGAOGAU4lxzdnuPeUoUBQxuOvCdEE3z9hFUm+ru5VjPQLogO+GhVEUNH7e/kz6k
+3yVVtG3Dv/V5gJnZlEi7LNkY+lCGp0jILORE8jHmrYlzdBGukvHRfULTS/81+wW
yYrxsaLS5/uzexOWezOwDRAFXTl5zRchvIM8LQYu7vy6fOPQJsJAgF55eGPPiaWn
otzBMxZNidcuzPmOrEwv6JZDw9Oq9n6P4VphMaEwY1esHUPDgcY/yVnYKA6uMaN1
IjMV4ZqtgYM9QhB+1AVW2cNrAAOgYOtm8crLzKWSJL7XcKMVgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxBHW/yj6mSscgkRfy08+4SvUiUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z
YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEcyUO2L0zoaS5QGe0CQYbY4rKJy4VBCNzHQd1ShDkNxpIlQt8onKQh
ZYM7vW2+IDBzHp9dzDc6Yp/9Jhp6Ket/GE8jTEbA5eqIQWuarXUyxsca+uYJtovW
D57/PmFVHgZwMxKjDbIc6egG1g1PNbblfdUmU9i+yMXTPOexOtVFVA/yGNtLYoLm
jr/BXW5yApO4WQsw8jx4UFyexeIX7Vr85/4lwjTfz3a58G5DBx6ar8pa/vkeI3Ig
fYvMOJ6UC2h+IcQhd0iqcFz4Y4YmMu2FmqdETvHIClmH0OZlcdR3LTzSWeAgQQhE
0z3MmMH9K6T8Tg7ikAXTmW16wlzryVw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:31 2025 by rpki-client