Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b4e67bb-5ccc-3ce9-b3f3-997db1badcde.roa
File: 0b4e67bb-5ccc-3ce9-b3f3-997db1badcde.roa (raw, json)
Hash identifier: OmaKYZGIVGzFd4i2/tVCEXwJh2U/oHRGvTXSc9JVHXg=
Subject key identifier: 5A:AB:41:DD:64:E6:90:44:69:D8:87:EB:5B:0C:A7:53:E6:15:7D:69
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21105662F90FD77BC681680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b4e67bb-5ccc-3ce9-b3f3-997db1badcde.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 36679
IP address blocks: 146.145.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:05:66:2f:90:fd:77:bc:68:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=e27d9bf1-8668-4820-94a0-999994a0146c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:aa:79:d6:09:d3:0d:f9:f5:e6:2b:33:4e:
c7:f8:7f:a3:63:a8:ae:e4:f7:cd:37:0a:95:a5:c2:
f6:23:da:63:d1:74:bf:9e:fb:d0:58:82:d4:42:d8:
db:08:01:4a:1c:1a:b6:a5:f4:de:b2:47:3e:0c:10:
7c:e4:42:46:17:d7:f4:bd:55:28:3a:80:ec:2f:88:
86:ff:56:30:0b:b3:cb:06:11:c2:5c:56:ec:30:d7:
b0:b5:a1:5a:7d:56:14:2d:66:17:75:76:76:65:4e:
cf:e8:8f:84:01:ba:df:65:0e:7d:1d:4b:c5:43:8d:
fb:e2:e2:ee:95:cc:fe:89:07:28:e6:49:05:58:9b:
47:4b:f7:86:15:60:71:cb:1a:6f:fa:2c:c6:02:2d:
c3:ea:5b:d6:ce:d0:67:11:e2:10:e6:7c:91:c7:e0:
be:f8:2c:92:3b:6e:fa:c6:46:fc:b0:a7:72:da:3a:
bd:4c:c3:2e:3e:fe:3a:77:60:bf:d9:dd:af:b5:ac:
be:01:6e:76:4e:bf:e9:d5:7a:83:2b:25:1a:23:d3:
e4:91:ba:5b:9d:15:57:e3:cd:d9:1a:57:bb:76:86:
ef:89:3a:56:c7:ec:fa:99:b9:be:d1:c2:76:30:be:
fd:ff:0f:00:78:b5:4f:10:ca:55:13:c7:76:4a:c1:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:41:DD:64:E6:90:44:69:D8:87:EB:5B:0C:A7:53:E6:15:7D:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b4e67bb-5ccc-3ce9-b3f3-997db1badcde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
146.145.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:aa:87:1c:c2:6f:8c:a4:a7:7c:69:9d:13:c8:9c:f4:2d:11:
af:51:04:e5:bd:65:7c:33:ac:43:35:44:36:2d:9c:b5:10:4e:
5b:96:fa:41:14:e5:40:a5:a4:fb:6b:ef:d0:24:12:70:52:c2:
5f:b5:77:98:19:dd:07:26:ed:ac:62:1e:86:09:6b:ef:81:e1:
10:13:c6:2f:92:4a:88:73:7a:e4:63:5c:6b:92:64:e5:40:5b:
17:0c:68:00:7a:2e:b6:87:b1:84:8a:96:27:ce:a2:b8:7e:a8:
8d:39:9d:3f:08:a4:7a:11:0f:5c:01:9b:0e:cb:dd:3f:9a:12:
fd:89:09:58:6b:6a:f9:24:ac:7d:5f:cc:44:5c:dd:15:86:3f:
67:8e:38:35:ef:2e:ea:4e:83:ce:ba:b2:93:d3:43:83:67:b1:
d9:87:7f:e4:7e:df:77:5b:8a:82:99:90:af:c9:2a:b2:75:9e:
e4:11:15:34:88:5e:23:e0:16:a4:3d:6c:5b:02:db:95:2e:fb:
91:2b:d8:14:15:bc:f2:62:66:5d:94:1d:c6:8a:59:8a:1b:32:
f8:ef:f9:7e:0d:c8:96:ea:96:e6:1d:c5:89:4a:c6:ee:8b:3e:
b7:78:78:40:81:b9:75:80:a5:6a:1b:89:52:91:5d:80:a5:c9:
1c:e6:03:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQVmL5D9d7xoFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTI3ZDliZjEtODY2OC00ODIwLTk0YTAtOTk5OTk0YTAxNDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxGqedYJ0w359eYrM07H+H+jY6iu5PfNNwqV
pcL2I9pj0XS/nvvQWILUQtjbCAFKHBq2pfTeskc+DBB85EJGF9f0vVUoOoDsL4iG
/1YwC7PLBhHCXFbsMNewtaFafVYULWYXdXZ2ZU7P6I+EAbrfZQ59HUvFQ4374uLu
lcz+iQco5kkFWJtHS/eGFWBxyxpv+izGAi3D6lvWztBnEeIQ5nyRx+C++CySO276
xkb8sKdy2jq9TMMuPv46d2C/2d2vtay+AW52Tr/p1XqDKyUaI9PkkbpbnRVX483Z
Gle7dobviTpWx+z6mbm+0cJ2ML79/w8AeLVPEMpVE8d2SsEs3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqrQd1k5pBEadiH61sMp1PmFX1pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI0ZTY3YmItNWNjYy0z
Y2U5LWIzZjMtOTk3ZGIxYmFkY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkpGRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiqhxzCb4ykp3xpnRPInPQtEa9RBOW9ZXwzrEM1RDYtnLUQTluW+kEU
5UClpPtr79AkEnBSwl+1d5gZ3Qcm7axiHoYJa++B4RATxi+SSohzeuRjXGuSZOVA
WxcMaAB6LraHsYSKlifOorh+qI05nT8IpHoRD1wBmw7L3T+aEv2JCVhravkkrH1f
zERc3RWGP2eOODXvLupOg866spPTQ4NnsdmHf+R+33dbioKZkK/JKrJ1nuQRFTSI
XiPgFqQ9bFsC25Uu+5Er2BQVvPJiZl2UHcaKWYobMvjv+X4NyJbqluYdxYlKxu6L
Prd4eECBuXWApWobiVKRXYClyRzmAy4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:22 2025 by rpki-client