Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
File: 00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json)
Hash identifier: Z1aiNtspEoPLIdM1PKbzr56nzQ/J5EWj9R7GyEng/LQ=
Subject key identifier: 98:27:0D:74:70:EC:5D:A2:59:82:D3:46:AA:02:25:E4:E4:7B:38:44
Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4
Certificate serial: 010D0C9F43285849287E623713642995C098AE80
Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 22571
IP address blocks: 192.131.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:62:37:13:64:29:95:c0:98:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=f380e2fc-32f0-4ac2-a1e2-9a7ac0191436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:c1:ea:fa:44:08:76:79:03:a8:43:fd:d0:
f6:aa:d1:40:90:86:27:06:ec:6f:1a:e5:97:ee:65:
9d:b6:0c:d0:95:21:d8:ec:93:d7:44:74:de:e2:9a:
b0:80:3b:33:d1:d5:14:3e:5a:5b:92:b7:a0:93:38:
63:ee:4f:21:4c:ab:13:da:c7:2a:d9:28:10:b5:ca:
75:bf:f5:ec:9b:91:94:df:d9:f5:5e:b1:98:bb:44:
59:d2:cd:ab:bd:c2:15:39:f5:a4:49:15:b9:a2:1f:
83:a4:10:b6:3c:7b:5b:2b:88:c9:d5:d9:4e:f0:04:
e0:3b:64:4c:e9:82:3e:10:b9:76:92:1d:7f:d0:29:
f8:02:20:72:a3:b1:cc:06:67:ee:bc:29:b3:56:c1:
cc:28:48:1b:d7:7d:4c:cf:f5:44:8e:a4:e1:ca:d8:
8f:f1:4b:59:ad:e8:c7:1d:88:ae:c7:03:3a:19:39:
09:32:c0:83:4d:d1:9a:74:24:09:5d:c9:e0:03:98:
20:ac:0a:16:e7:ce:10:ca:6d:39:df:07:17:4e:5a:
14:30:11:16:e9:ef:10:47:c3:18:73:c9:7d:da:6e:
f2:f0:06:5a:4f:6f:5f:a3:25:64:87:71:e4:48:90:
fc:81:dc:51:7e:01:e3:43:ab:70:13:8a:9b:b6:99:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:0D:74:70:EC:5D:A2:59:82:D3:46:AA:02:25:E4:E4:7B:38:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl
X509v3 Authority Key Identifier:
keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.131.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ba:80:81:83:89:7f:23:e2:08:47:db:ec:bf:a5:30:81:9c:
1a:e7:9a:75:64:82:c7:5c:01:bf:b8:70:76:14:d5:6a:e0:f3:
c9:7d:16:c1:92:ab:fc:cd:1d:62:49:e3:3a:92:b6:ab:a7:8f:
f3:bc:d2:86:e8:7a:e2:9f:b1:ff:a0:94:4d:3f:2c:12:7d:c8:
c1:18:37:a4:f5:de:f7:cc:9b:28:ab:91:d2:66:e0:99:c2:b2:
b6:8c:41:b2:53:bb:6d:ef:43:f6:9c:98:b1:6d:a8:64:d6:1c:
17:76:8e:d2:19:f5:31:e7:87:bf:50:35:e2:27:94:24:ea:09:
ac:1d:16:72:ac:ba:ab:4d:2f:16:7d:2e:45:b3:20:0f:8e:4a:
6c:c2:30:58:fd:3c:1e:96:57:7b:87:90:06:a6:e9:b4:1e:72:
7e:8b:a2:f4:f0:ec:6d:6d:65:48:e4:02:1a:a7:e8:4e:c3:6e:
f6:69:b9:49:8f:6b:7b:88:61:fc:03:f4:59:2b:20:68:60:3b:
94:ce:c4:6f:80:3e:04:69:3b:2a:78:64:1f:d7:98:62:e8:3b:
75:55:0c:32:fd:24:cd:0d:65:97:dd:08:39:1a:1e:98:07:9c:
10:82:1f:24:3c:27:e1:a7:09:ec:d3:d6:46:c8:41:42:ba:a7:
05:a1:ee:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmI3E2QplcCYroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0
NWM0MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjM4MGUyZmMtMzJmMC00YWMyLWExZTItOWE3YWMwMTkxNDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUTB6vpECHZ5A6hD/dD2qtFAkIYnBuxvGuWX
7mWdtgzQlSHY7JPXRHTe4pqwgDsz0dUUPlpbkregkzhj7k8hTKsT2scq2SgQtcp1
v/Xsm5GU39n1XrGYu0RZ0s2rvcIVOfWkSRW5oh+DpBC2PHtbK4jJ1dlO8ATgO2RM
6YI+ELl2kh1/0Cn4AiByo7HMBmfuvCmzVsHMKEgb131Mz/VEjqThytiP8UtZrejH
HYiuxwM6GTkJMsCDTdGadCQJXcngA5ggrAoW584Qym053wcXTloUMBEW6e8QR8MY
c8l92m7y8AZaT29foyVkh3HkSJD8gdxRfgHjQ6twE4qbtpl1uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgnDXRw7F2iWYLTRqoCJeTkezhEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk
NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvMDBhOWJlNzMtNmUwZC0z
MWJhLWE1MTAtNmVlMmIzMjVmYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1
NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5
NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm
ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADW6gIGDiX8j4ghH2+y/pTCBnBrnmnVkgsdcAb+4cHYU1Wrg88l9FsGS
q/zNHWJJ4zqStqunj/O80oboeuKfsf+glE0/LBJ9yMEYN6T13vfMmyirkdJm4JnC
sraMQbJTu23vQ/acmLFtqGTWHBd2jtIZ9THnh79QNeInlCTqCawdFnKsuqtNLxZ9
LkWzIA+OSmzCMFj9PB6WV3uHkAam6bQecn6LovTw7G1tZUjkAhqn6E7DbvZpuUmP
a3uIYfwD9FkrIGhgO5TOxG+APgRpOyp4ZB/XmGLoO3VVDDL9JM0NZZfdCDkaHpgH
nBCCHyQ8J+GnCezT1kbIQUK6pwWh7vg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:26 2025 by rpki-client