Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd603bbe-8127-361e-ab34-45d687715c00.roa
File: dd603bbe-8127-361e-ab34-45d687715c00.roa (raw, json)
Hash identifier: Av/LEEN+QWZnHcraOYiv+YM7iXPbqZVPNs0/g/VebyQ=
Subject key identifier: 77:8E:53:46:58:0B:73:BA:D7:D0:DC:5E:39:B1:A5:9A:B6:E3:D0:64
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57697FDA5C05886F6D628C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd603bbe-8127-361e-ab34-45d687715c00.roa
Signing time: Tue 04 Feb 2025 13:40:05 +0000
ROA not before: Tue 04 Feb 2025 13:40:05 +0000
ROA not after: Mon 05 May 2025 12:40:05 +0000
asID: 30036
IP address blocks: 150.195.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:76:97:fd:a5:c0:58:86:f6:d6:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:40:05 2025 GMT
Not After : May 5 12:40:05 2025 GMT
Subject: CN=2a4a25ed-7716-4807-befb-0977fe50fe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:c3:c6:92:d8:3b:e6:cc:a0:36:32:ec:4c:
e2:3a:61:b3:f9:3c:51:2f:56:99:fb:9c:0d:d0:77:
88:2c:ea:f2:b3:e7:52:ec:54:73:b5:92:53:f1:66:
6e:3f:e1:4d:9d:5b:3b:a4:11:9f:76:7c:f8:2f:98:
63:1a:09:16:a4:15:dd:17:fc:41:29:d7:b9:40:01:
e9:aa:3f:e0:d2:b4:bb:81:74:4a:3d:ed:0a:11:a5:
1b:27:f1:73:d4:e1:b5:61:51:ae:0f:e2:27:cc:af:
08:23:52:62:d6:93:2d:38:2f:d7:9b:35:a9:27:95:
95:56:1f:b6:2f:9d:27:aa:bd:45:4a:18:f5:e8:05:
2a:fb:43:72:22:a2:55:e3:b5:6f:0b:69:89:e7:57:
82:a4:50:15:a8:ad:2b:23:ca:36:5a:8b:86:1f:f6:
43:d0:ef:9a:4a:c8:31:87:78:b6:22:09:01:d8:86:
b1:a8:2b:ca:ee:71:05:6e:da:cf:b4:09:c9:68:20:
3f:ee:0b:4c:88:66:7f:8b:f3:5b:86:ce:7a:88:f0:
b4:ad:ae:04:6e:8f:23:32:1d:30:e3:fe:1e:2c:00:
b7:62:57:32:75:d9:e6:e1:b3:92:f0:0b:b0:b5:e1:
a9:cc:a0:bc:2f:bd:f7:c0:f3:e6:62:7a:95:be:92:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8E:53:46:58:0B:73:BA:D7:D0:DC:5E:39:B1:A5:9A:B6:E3:D0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd603bbe-8127-361e-ab34-45d687715c00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0d:fb:7e:62:4d:06:33:7f:42:f6:c3:35:7f:8d:d8:b9:6f:
53:86:f2:0e:bf:f2:ff:d1:f5:ac:9b:fe:1b:2d:a3:ea:38:0c:
cb:e8:08:d9:06:22:40:a0:47:25:98:f2:a5:3b:0c:66:0e:d3:
aa:87:50:21:d5:9a:a3:2b:a7:23:a1:40:cd:67:32:58:97:96:
07:ac:5a:a8:a2:c0:6c:08:8b:76:c2:35:7a:60:f9:fe:7e:53:
26:cf:91:f0:33:ab:8c:84:53:96:eb:9f:8e:84:f8:15:db:67:
52:5f:68:0a:93:5f:ff:14:2e:0a:49:34:8d:2b:b2:ce:b4:95:
f9:89:c6:10:79:a5:2c:19:e0:c6:95:c9:f9:08:d7:29:fc:f4:
16:a2:5a:df:fe:eb:cd:e6:16:ad:b9:63:69:ea:d9:91:57:02:
63:c9:b0:53:95:4a:a6:33:0f:da:4e:50:a1:b2:ea:c8:cf:de:
ec:5b:ee:2a:f5:61:0f:e2:41:7c:da:6f:0a:7d:d2:bf:f6:56:
6b:80:9e:2d:05:e6:9b:e8:ea:a8:83:01:45:0f:2b:4e:b8:fe:
21:5e:b9:14:d6:e6:22:2f:67:1f:8b:0a:00:c9:02:90:21:37:
f4:af:4c:60:da:cb:d7:96:a0:5e:21:de:e8:30:ce:d2:c3:5b:
0f:83:69:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdpf9pcBYhvbWKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNDAwNVoXDTI1MDUwNTEyNDAwNVowLzEtMCsGA1UEAxMk
MmE0YTI1ZWQtNzcxNi00ODA3LWJlZmItMDk3N2ZlNTBmZTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/XDxpLYO+bMoDYy7EziOmGz+TxRL1aZ+5wN
0HeILOrys+dS7FRztZJT8WZuP+FNnVs7pBGfdnz4L5hjGgkWpBXdF/xBKde5QAHp
qj/g0rS7gXRKPe0KEaUbJ/Fz1OG1YVGuD+InzK8II1Ji1pMtOC/XmzWpJ5WVVh+2
L50nqr1FShj16AUq+0NyIqJV47VvC2mJ51eCpFAVqK0rI8o2WouGH/ZD0O+aSsgx
h3i2IgkB2IaxqCvK7nEFbtrPtAnJaCA/7gtMiGZ/i/Nbhs56iPC0ra4Ebo8jMh0w
4/4eLAC3Ylcyddnm4bOS8AuwteGpzKC8L733wPPmYnqVvpKgUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHeOU0ZYC3O619DcXjmxpZq249BkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGQ2MDNiYmUtODEyNy0z
NjFlLWFiMzQtNDVkNjg3NzE1YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkN+35iTQYzf0L2wzV/jdi5b1OG8g6/8v/R9ayb/hsto+o4DMvoCNkG
IkCgRyWY8qU7DGYO06qHUCHVmqMrpyOhQM1nMliXlgesWqiiwGwIi3bCNXpg+f5+
UybPkfAzq4yEU5brn46E+BXbZ1JfaAqTX/8ULgpJNI0rss60lfmJxhB5pSwZ4MaV
yfkI1yn89BaiWt/+683mFq25Y2nq2ZFXAmPJsFOVSqYzD9pOUKGy6sjP3uxb7ir1
YQ/iQXzabwp90r/2VmuAni0F5pvo6qiDAUUPK064/iFeuRTW5iIvZx+LCgDJApAh
N/SvTGDay9eWoF4h3ugwztLDWw+DaTs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:23 2025 by rpki-client