Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/4e8379af-da5c-3fc5-8a03-9a8b11958a84.roa
File: 4e8379af-da5c-3fc5-8a03-9a8b11958a84.roa (raw, json)
Hash identifier: Ta8G8kCN+YTvlH+xHnBhBnG9U2oi28pHi9uCKJc2JJY=
Subject key identifier: BD:7C:DE:20:83:E6:27:0B:C7:5E:6B:6A:B8:20:66:47:56:57:3E:19
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285848EC9DAAB5D8E26C1572F94580
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/4e8379af-da5c-3fc5-8a03-9a8b11958a84.roa
Signing time: Tue 18 Feb 2025 14:15:20 +0000
ROA not before: Tue 18 Feb 2025 14:15:20 +0000
ROA not after: Mon 19 May 2025 13:15:20 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:9d:aa:b5:d8:e2:6c:15:72:f9:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Feb 18 14:15:20 2025 GMT
Not After : May 19 13:15:20 2025 GMT
Subject: CN=648c965e-52d5-4e36-b6c9-09076b4b70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:9e:79:a0:17:07:fe:f4:e5:17:f5:e3:74:
9c:24:21:47:18:82:18:22:09:4b:14:aa:45:65:1d:
04:82:bb:e6:9d:90:ee:d0:9a:53:d6:a0:36:2e:0a:
f0:01:ae:99:b9:9a:7d:57:3c:83:1d:56:2d:ac:71:
d0:39:a7:e6:0f:05:63:47:81:5e:c1:a1:2f:ea:a2:
ca:ba:e2:74:cc:bc:49:25:23:fd:cb:2f:40:6b:b5:
45:46:2f:ac:a8:bd:b3:be:1a:7d:75:09:08:2d:80:
05:33:95:bd:53:01:37:b6:9f:5a:91:d2:eb:4f:f2:
45:da:0b:ff:a2:a5:2b:7b:db:e8:b2:02:66:d0:f8:
8c:4d:c9:06:d0:27:5f:42:c2:e0:b0:55:e1:01:2f:
c0:36:03:99:71:cc:b4:8f:d2:08:7d:c5:4c:8e:61:
be:bd:08:98:b2:16:d0:57:79:7a:e5:3e:30:90:24:
3f:97:3f:ff:f2:16:45:63:7e:d6:36:7e:30:96:21:
06:8d:8b:3f:0e:48:24:f9:14:dd:2e:31:66:1a:cf:
93:b0:40:8c:91:4f:f0:c5:e9:c1:cc:42:18:4b:b2:
fd:9c:be:96:1e:02:66:55:98:15:64:41:7c:3d:79:
e6:1d:0d:43:be:f5:cb:c5:69:ce:fb:e5:05:20:50:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:DE:20:83:E6:27:0B:C7:5E:6B:6A:B8:20:66:47:56:57:3E:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/4e8379af-da5c-3fc5-8a03-9a8b11958a84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:7e:56:05:99:b8:80:26:ea:ae:1e:55:43:e6:b1:2e:58:99:
a0:df:18:26:cc:cc:f5:f8:6a:c1:83:16:23:22:d0:80:4d:76:
0b:6f:8f:b5:7a:55:42:6a:42:03:df:dc:6d:10:69:b2:2f:f6:
c2:34:1a:0c:1a:14:a4:db:66:c0:2a:69:bf:ab:e5:de:96:2e:
7a:26:99:27:fa:69:d0:06:cc:62:00:89:d7:67:aa:81:90:43:
78:c3:85:95:48:e5:b2:99:5a:b6:2c:fb:c6:b4:96:5a:4a:34:
ad:15:40:2a:8a:14:c5:b6:54:a7:da:6e:69:a7:57:45:6d:f9:
e5:04:3e:e3:1f:15:c2:cf:e9:44:2a:d3:9c:92:54:31:e0:b3:
f6:5b:a6:6e:a1:0f:06:ea:2f:09:4e:32:60:4d:0f:17:4d:8e:
83:40:96:e1:c8:09:6d:dd:b2:0a:e7:fb:e1:91:e1:8b:a3:85:
a3:30:52:a8:ef:28:c9:44:d9:d9:cc:64:e8:fe:0a:55:f8:da:
cc:93:5f:39:e0:fa:8b:b5:7a:93:54:09:a7:c2:92:b7:fa:c8:
22:0c:fe:50:90:3c:dd:07:79:cc:34:0d:00:30:4e:87:6c:43:
61:eb:94:de:91:7a:58:cc:06:10:ea:f0:77:53:13:5d:51:8d:
8b:bd:cb:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsnaq12OJsFXL5RYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3
M2JjMB4XDTI1MDIxODE0MTUyMFoXDTI1MDUxOTEzMTUyMFowLzEtMCsGA1UEAxMk
NjQ4Yzk2NWUtNTJkNS00ZTM2LWI2YzktMDkwNzZiNGI3MGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN6eeaAXB/705Rf143ScJCFHGIIYIglLFKpF
ZR0EgrvmnZDu0JpT1qA2LgrwAa6ZuZp9VzyDHVYtrHHQOafmDwVjR4FewaEv6qLK
uuJ0zLxJJSP9yy9Aa7VFRi+sqL2zvhp9dQkILYAFM5W9UwE3tp9akdLrT/JF2gv/
oqUre9vosgJm0PiMTckG0CdfQsLgsFXhAS/ANgOZccy0j9IIfcVMjmG+vQiYshbQ
V3l65T4wkCQ/lz//8hZFY37WNn4wliEGjYs/Dkgk+RTdLjFmGs+TsECMkU/wxenB
zEIYS7L9nL6WHgJmVZgVZEF8PXnmHQ1DvvXLxWnO++UFIFCcTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL183iCD5icLx15rarggZkdWVz4ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw
OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvNGU4Mzc5YWYtZGE1Yy0z
ZmM1LThhMDMtOWE4YjExOTU4YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi
NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw
NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl
ZmYyMDczYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACF+VgWZuIAm6q4eVUPmsS5YmaDfGCbMzPX4asGDFiMi0IBNdgtvj7V6
VUJqQgPf3G0QabIv9sI0GgwaFKTbZsAqab+r5d6WLnommSf6adAGzGIAiddnqoGQ
Q3jDhZVI5bKZWrYs+8a0llpKNK0VQCqKFMW2VKfabmmnV0Vt+eUEPuMfFcLP6UQq
05ySVDHgs/Zbpm6hDwbqLwlOMmBNDxdNjoNAluHICW3dsgrn++GR4YujhaMwUqjv
KMlE2dnMZOj+ClX42syTXzng+ou1epNUCafCkrf6yCIM/lCQPN0Hecw0DQAwTods
Q2HrlN6ReljMBhDq8HdTE11RjYu9ywc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:08 2025 by rpki-client