Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c4d7f923-c79a-315f-9748-0da9cec0ef0f.roa
File: c4d7f923-c79a-315f-9748-0da9cec0ef0f.roa (raw, json)
Hash identifier: bHTjmjDVg6iL/p4aAVX1+oflzeOdoUNBmEj1fygC32M=
Subject key identifier: 30:78:2E:D5:45:C9:54:31:1F:6C:C7:53:73:48:6E:BB:28:96:DC:41
Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial: 010D0C9F432858488EDC8BD39F04E6A7A58A329C
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c4d7f923-c79a-315f-9748-0da9cec0ef0f.roa
Signing time: Thu 16 Jan 2025 00:16:03 +0000
ROA not before: Thu 16 Jan 2025 00:16:03 +0000
ROA not after: Tue 15 Apr 2025 23:16:03 +0000
asID: 36691
IP address blocks: 158.142.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:dc:8b:d3:9f:04:e6:a7:a5:8a:32:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Validity
Not Before: Jan 16 00:16:03 2025 GMT
Not After : Apr 15 23:16:03 2025 GMT
Subject: CN=08bea94e-d47c-4feb-9f05-5e450582ddf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:4e:d7:4b:85:12:0e:6e:34:a7:63:a8:37:
01:07:5c:0d:3a:38:30:9a:0f:2b:2e:63:de:ae:fc:
67:5e:7d:cf:08:58:0f:7e:81:9a:0c:8a:0d:12:97:
c4:c4:d9:58:97:96:47:f0:b6:ed:18:c5:b0:cd:39:
dc:14:92:3b:4d:85:6f:1d:ae:5a:18:87:de:d7:f5:
5e:30:e3:8a:e6:78:c9:e0:9a:aa:f4:d7:60:58:cc:
31:af:69:9a:9e:eb:d5:7e:77:5b:e6:20:4b:7b:d3:
21:41:e1:a2:89:94:39:d4:27:d3:60:e0:85:2d:6c:
c4:cf:01:d4:eb:c7:3e:e1:6e:ec:2c:00:ec:e5:43:
69:6a:06:21:e0:8c:3f:43:1d:20:ba:df:d1:e6:9e:
60:ca:9b:ec:80:5f:18:98:e7:1a:39:21:c9:ce:52:
ea:64:ce:97:0a:f0:b5:3a:44:f9:8e:e8:0e:a2:c2:
90:12:fe:4c:9d:c0:e4:07:29:63:60:a5:bd:d4:8d:
27:0c:d3:0b:f9:31:71:0e:c3:98:33:8c:a7:49:b1:
f0:f9:ee:73:8a:52:cf:9a:e8:7c:f9:7d:49:e5:03:
7b:2d:38:2d:06:e4:83:2c:15:ea:cb:02:0b:ec:ec:
08:64:95:0d:32:2d:0e:95:30:18:78:c0:94:58:11:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:2E:D5:45:C9:54:31:1F:6C:C7:53:73:48:6E:BB:28:96:DC:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c4d7f923-c79a-315f-9748-0da9cec0ef0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
X509v3 Authority Key Identifier:
keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
sbgp-ipAddrBlock: critical
IPv4:
158.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:11:fe:1a:f0:12:ed:73:59:4b:25:ee:b0:c3:42:6a:d2:55:
cb:76:18:63:81:e5:dc:09:8d:d4:d8:de:8b:19:07:af:68:be:
d1:1b:8b:63:de:aa:30:30:cf:a4:87:e7:dc:5e:92:75:15:67:
0a:61:ec:96:70:0f:13:c2:b3:c8:21:6e:67:91:c4:79:46:c1:
b2:f2:18:d7:7d:9b:88:ab:88:5a:e2:33:a5:55:ca:8b:f0:94:
3c:de:e4:97:28:09:20:ef:8c:46:5c:ed:fb:9b:87:b9:dc:c3:
42:47:07:0d:48:51:11:6e:64:c7:00:28:9c:75:63:91:58:20:
47:51:0c:b2:70:7c:db:3d:31:70:65:68:fd:b9:61:2e:81:8b:
62:8f:7c:e7:bb:1e:27:6c:8a:81:80:de:3a:13:98:5d:e2:2e:
7f:9a:06:88:df:07:0e:bc:ee:ec:0a:a8:d8:1e:20:27:63:2a:
5c:46:d5:87:10:c8:75:50:23:d5:c5:9d:35:0e:85:87:e3:e2:
db:7a:b3:e5:80:63:4f:99:82:a3:c2:0c:62:6b:0f:b8:b9:9b:
4d:c3:5f:55:ba:1c:c8:f4:f2:79:3f:e4:4d:db:2a:6e:b2:a3:
7d:e6:ac:84:aa:10:1e:23:3a:bb:ee:fb:14:0b:13:9c:bf:6e:
5a:f2:4a:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiO3IvTnwTmp6WKMpwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI1MDExNjAwMTYwM1oXDTI1MDQxNTIzMTYwM1owLzEtMCsGA1UEAxMk
MDhiZWE5NGUtZDQ3Yy00ZmViLTlmMDUtNWU0NTA1ODJkZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvJO10uFEg5uNKdjqDcBB1wNOjgwmg8rLmPe
rvxnXn3PCFgPfoGaDIoNEpfExNlYl5ZH8LbtGMWwzTncFJI7TYVvHa5aGIfe1/Ve
MOOK5njJ4Jqq9NdgWMwxr2manuvVfndb5iBLe9MhQeGiiZQ51CfTYOCFLWzEzwHU
68c+4W7sLADs5UNpagYh4Iw/Qx0gut/R5p5gypvsgF8YmOcaOSHJzlLqZM6XCvC1
OkT5jugOosKQEv5MncDkByljYKW91I0nDNML+TFxDsOYM4ynSbHw+e5zilLPmuh8
+X1J5QN7LTgtBuSDLBXqywIL7OwIZJUNMi0OlTAYeMCUWBFs6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDB4LtVFyVQxH2zHU3NIbrsoltxBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYzRkN2Y5MjMtYzc5YS0z
MTVmLTk3NDgtMGRhOWNlYzBlZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKRH+GvAS7XNZSyXusMNCatJVy3YYY4Hl3AmN1NjeixkHr2i+0RuLY96q
MDDPpIfn3F6SdRVnCmHslnAPE8KzyCFuZ5HEeUbBsvIY132biKuIWuIzpVXKi/CU
PN7klygJIO+MRlzt+5uHudzDQkcHDUhREW5kxwAonHVjkVggR1EMsnB82z0xcGVo
/blhLoGLYo9857seJ2yKgYDeOhOYXeIuf5oGiN8HDrzu7Aqo2B4gJ2MqXEbVhxDI
dVAj1cWdNQ6Fh+Pi23qz5YBjT5mCo8IMYmsPuLmbTcNfVbocyPTyeT/kTdsqbrKj
feashKoQHiM6u+77FAsTnL9uWvJKuA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:14 2025 by rpki-client