Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d76eeb79-598e-30a0-b720-84a0c6899a02.roa
File: d76eeb79-598e-30a0-b720-84a0c6899a02.roa (raw, json)
Hash identifier: XsMjiedlk1u0ffVRxGY9El/bwznLf05Nemca7LMraik=
Subject key identifier: B8:A6:34:2A:DA:2F:7D:0F:51:C1:46:C2:37:CF:91:3B:B2:0B:9E:33
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858493243E249A2033DCA971D8880
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d76eeb79-598e-30a0-b720-84a0c6899a02.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 62651
IP address blocks: 192.200.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e2:49:a2:03:3d:ca:97:1d:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=ccb1e124-853e-4fc4-b710-d26469487ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:db:04:49:67:55:bd:78:dd:50:3a:0b:5e:
25:91:20:de:14:6f:ed:b1:75:20:4a:75:c8:9b:a4:
2e:a2:dd:f1:7e:71:84:1c:df:10:70:94:78:25:22:
8d:bc:1a:13:20:f2:91:e3:f4:66:92:20:be:87:dc:
5a:2f:cb:ae:09:1e:50:55:ff:0a:53:e5:fd:33:25:
35:5f:73:6e:2a:09:b8:2b:e7:2c:25:84:3e:79:54:
72:bb:a7:dd:c5:a6:ba:a7:cd:50:01:bd:cc:57:c2:
08:65:41:a0:6d:bc:df:ff:e2:1b:56:25:8b:9b:fc:
43:59:03:d2:59:2e:15:0f:59:1a:3a:f8:74:92:f6:
e2:4f:2b:9d:38:6f:0e:f1:66:bc:99:c2:01:42:ba:
f4:e0:8a:84:c0:60:ef:ec:e6:65:0a:92:bc:41:06:
13:7d:a3:65:f1:14:ff:9b:0f:34:5d:aa:bb:1a:2b:
d4:aa:5d:a7:e9:60:d6:99:13:d7:33:f7:b8:ee:f3:
e5:83:2e:df:8c:5c:b7:19:9b:04:f8:c3:15:da:99:
96:b1:a1:ea:a1:52:5a:3b:c4:29:82:45:1b:9a:59:
9f:3e:9b:b2:d0:79:d4:50:b6:75:d3:17:85:a8:d1:
d3:f3:1e:1c:85:24:90:d8:98:43:b1:08:43:95:49:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:34:2A:DA:2F:7D:0F:51:C1:46:C2:37:CF:91:3B:B2:0B:9E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d76eeb79-598e-30a0-b720-84a0c6899a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d9:cd:14:1b:0e:e7:61:97:df:53:ce:43:cc:15:dd:89:67:
5c:87:99:82:41:9d:45:86:96:a9:f6:9b:1e:c8:56:92:15:e0:
96:1e:4c:56:dd:af:8e:dc:e4:3a:34:7a:04:cc:dc:0d:33:06:
76:59:b5:41:24:0f:d7:c6:cf:84:14:eb:0e:82:93:88:be:92:
d0:5d:ea:79:78:97:d0:3b:34:af:d3:4a:50:2a:de:c9:a0:a2:
c5:d4:99:b9:82:43:55:3c:a6:8c:bd:25:a1:a1:b6:3b:0e:e2:
ef:9c:bb:88:aa:09:b8:20:1f:b5:fe:33:9f:03:f1:dc:03:c4:
c5:39:e0:d0:ee:27:fe:f2:4a:d3:24:3d:9a:4b:36:bb:85:50:
fc:b1:35:e1:b4:c0:c5:1d:33:1a:70:34:77:00:64:9b:53:5a:
ec:18:a2:b2:9f:93:84:fd:d8:63:0c:35:57:a8:33:2b:b2:33:
ef:b1:e9:26:5c:cc:20:b1:80:d7:85:33:29:d9:2a:f1:83:1b:
c2:7d:9d:64:f3:6f:0e:68:c1:24:b9:b3:5b:f4:97:47:e9:23:
f7:40:63:e4:b7:ba:29:b5:34:0f:52:9b:75:aa:f3:4f:de:79:
c6:7d:e3:ce:01:54:67:fb:13:2b:5e:24:3a:c4:97:a6:a8:e5:
97:bc:6c:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+JJogM9ypcdiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2NiMWUxMjQtODUzZS00ZmM0LWI3MTAtZDI2NDY5NDg3YWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpHbBElnVb143VA6C14lkSDeFG/tsXUgSnXI
m6Quot3xfnGEHN8QcJR4JSKNvBoTIPKR4/RmkiC+h9xaL8uuCR5QVf8KU+X9MyU1
X3NuKgm4K+csJYQ+eVRyu6fdxaa6p81QAb3MV8IIZUGgbbzf/+IbViWLm/xDWQPS
WS4VD1kaOvh0kvbiTyudOG8O8Wa8mcIBQrr04IqEwGDv7OZlCpK8QQYTfaNl8RT/
mw80Xaq7GivUql2n6WDWmRPXM/e47vPlgy7fjFy3GZsE+MMV2pmWsaHqoVJaO8Qp
gkUbmlmfPpuy0HnUULZ10xeFqNHT8x4chSSQ2JhDsQhDlUkzaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLimNCraL30PUcFGwjfPkTuyC54zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDc2ZWViNzktNTk4ZS0z
MGEwLWI3MjAtODRhMGM2ODk5YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMiUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvZzRQbDudhl99TzkPMFd2JZ1yHmYJBnUWGlqn2mx7IVpIV4JYeTFbd
r47c5Do0egTM3A0zBnZZtUEkD9fGz4QU6w6Ck4i+ktBd6nl4l9A7NK/TSlAq3smg
osXUmbmCQ1U8poy9JaGhtjsO4u+cu4iqCbggH7X+M58D8dwDxMU54NDuJ/7yStMk
PZpLNruFUPyxNeG0wMUdMxpwNHcAZJtTWuwYorKfk4T92GMMNVeoMyuyM++x6SZc
zCCxgNeFMynZKvGDG8J9nWTzbw5owSS5s1v0l0fpI/dAY+S3uim1NA9Sm3Wq80/e
ecZ9484BVGf7EyteJDrEl6ao5Ze8bG0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:47 2025 by rpki-client