Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/03becb11-ee20-3623-8a97-8aeec87530d1.roa
File: 03becb11-ee20-3623-8a97-8aeec87530d1.roa (raw, json)
Hash identifier: SS6OyzPnLNOmdvgWAN9f/QfarooItQnGkHq5HL3/G8s=
Subject key identifier: D8:CF:69:2F:F3:5A:CC:B3:02:39:38:B7:F7:D8:93:DE:7F:A1:9C:76
Certificate issuer: /CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Certificate serial: 010D0C9F43285841106756B2C3E575E0A4BB13C0
Authority key identifier: 08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/03becb11-ee20-3623-8a97-8aeec87530d1.roa
Signing time: Tue 28 Feb 2023 18:57:57 +0000
ROA not before: Tue 28 Feb 2023 18:57:57 +0000
ROA not after: Mon 02 Jun 2025 04:00:00 +0000
asID: 399970
IP address blocks: 149.112.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:10:67:56:b2:c3:e5:75:e0:a4:bb:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Validity
Not Before: Feb 28 18:57:57 2023 GMT
Not After : Jun 2 04:00:00 2025 GMT
Subject: CN=f8406faa-f5af-4a08-841f-0a6bf725cf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:56:f0:09:51:b7:cb:d4:b3:35:f4:5e:01:
63:cc:f0:55:03:41:f6:04:a9:01:d9:9e:01:54:6c:
c7:ae:9a:d1:f3:22:82:4a:99:08:5f:79:61:fe:61:
bb:86:27:25:d4:a4:3d:da:fc:85:dc:a3:64:7e:4f:
0f:67:aa:ad:5c:01:db:1a:b3:58:d1:e0:cc:55:53:
1c:b1:41:8d:11:d2:72:26:98:14:3d:ad:0e:3d:76:
98:c0:a7:b0:86:da:c2:e1:1c:0d:bd:58:1b:68:40:
66:64:ac:62:59:75:7c:9c:8e:91:a7:42:20:73:2b:
7a:ae:91:63:7d:2c:e4:24:e5:36:f5:63:39:11:fc:
5e:a7:a9:ab:3b:78:66:31:b3:b5:fb:e4:53:e8:49:
0f:8e:f2:c6:ea:ed:26:da:94:b1:36:55:73:77:45:
d5:4b:28:c8:6e:37:55:4d:54:85:52:99:5f:1a:60:
1d:7e:c0:29:20:72:68:02:9c:50:f0:fa:34:19:26:
93:34:f5:5e:25:96:5a:9c:36:15:61:31:7e:08:72:
15:1e:2c:bc:52:f6:37:61:b0:2a:b1:88:2f:b0:f1:
10:be:ca:eb:75:06:c6:8e:90:66:5e:a8:33:4e:8b:
f7:01:b4:fe:9f:66:47:89:20:bb:ca:31:dc:38:16:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:69:2F:F3:5A:CC:B3:02:39:38:B7:F7:D8:93:DE:7F:A1:9C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/03becb11-ee20-3623-8a97-8aeec87530d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.crl
X509v3 Authority Key Identifier:
keyid:08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:1c:4f:6a:52:2a:4c:9f:29:fe:ab:61:b9:d7:64:74:84:65:
e0:82:2b:04:2a:7e:1d:fa:e1:7b:41:bf:30:ce:6c:97:d2:5e:
89:2d:34:de:76:7d:19:1a:a1:9f:78:c3:6d:80:2a:73:8a:91:
88:86:0c:4a:4b:f7:66:03:6e:90:5b:fb:29:62:d3:9e:ba:6d:
12:de:21:10:69:98:b3:cd:e2:cb:5b:d6:cc:b9:87:9d:ad:cb:
f0:dd:a0:f9:65:6b:98:c2:d1:e9:d6:5d:21:82:d5:26:f5:ee:
30:ba:01:eb:42:95:c6:d5:e9:b1:13:2b:d1:66:5e:42:94:e3:
2b:c3:2d:94:35:4c:69:ec:37:81:b4:1a:3e:16:9a:e5:68:d5:
17:58:89:fc:be:e2:62:5a:63:26:49:25:8d:04:63:55:5a:55:
ca:34:87:f6:25:5d:52:ee:cb:ad:db:47:e5:a2:8a:f4:b2:d2:
b0:4b:40:0c:17:a8:15:ee:32:8f:e2:5c:cc:8c:dd:87:5e:26:
7d:6e:0e:33:34:63:64:a8:02:06:e1:f1:56:70:04:54:f6:c4:
3f:58:61:92:0c:30:ec:0c:ff:5b:42:18:ac:95:a6:25:e5:b8:
dc:8d:73:50:ed:01:07:df:e5:01:56:46:68:a7:a6:20:0d:eb:
06:56:dc:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEQZ1ayw+V14KS7E8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI3MWUxYjItNTU5NS00NGNmLWFhNGQtNmI1ZDM1YWQz
ODBlMB4XDTIzMDIyODE4NTc1N1oXDTI1MDYwMjA0MDAwMFowLzEtMCsGA1UEAxMk
Zjg0MDZmYWEtZjVhZi00YTA4LTg0MWYtMGE2YmY3MjVjZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc1W8AlRt8vUszX0XgFjzPBVA0H2BKkB2Z4B
VGzHrprR8yKCSpkIX3lh/mG7hicl1KQ92vyF3KNkfk8PZ6qtXAHbGrNY0eDMVVMc
sUGNEdJyJpgUPa0OPXaYwKewhtrC4RwNvVgbaEBmZKxiWXV8nI6Rp0Igcyt6rpFj
fSzkJOU29WM5Efxep6mrO3hmMbO1++RT6EkPjvLG6u0m2pSxNlVzd0XVSyjIbjdV
TVSFUplfGmAdfsApIHJoApxQ8Po0GSaTNPVeJZZanDYVYTF+CHIVHiy8UvY3YbAq
sYgvsPEQvsrrdQbGjpBmXqgzTov3AbT+n2ZHiSC7yjHcOBYiIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjPaS/zWsyzAjk4t/fYk95/oZx2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wYjcx
ZTFiMi01NTk1LTQ0Y2YtYWE0ZC02YjVkMzVhZDM4MGUvMDNiZWNiMTEtZWUyMC0z
NjIzLThhOTctOGFlZWM4NzUzMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGI3MWUxYjItNTU5NS00NGNmLWFh
NGQtNmI1ZDM1YWQzODBlLzBiNzFlMWIyLTU1OTUtNDRjZi1hYTRkLTZiNWQzNWFk
MzgwZS5jcmwwHwYDVR0jBBgwFoAUCPbUaPEJ8ug+oemlCykuiNu48H8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wYjcxZTFiMi01NTk1LTQ0Y2YtYWE0ZC02YjVk
MzVhZDM4MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwcT2pSKkyfKf6rYbnXZHSEZeCCKwQqfh364XtBvzDObJfSXoktNN52
fRkaoZ94w22AKnOKkYiGDEpL92YDbpBb+yli0566bRLeIRBpmLPN4stb1sy5h52t
y/DdoPlla5jC0enWXSGC1Sb17jC6AetClcbV6bETK9FmXkKU4yvDLZQ1TGnsN4G0
Gj4WmuVo1RdYify+4mJaYyZJJY0EY1VaVco0h/YlXVLuy63bR+WiivSy0rBLQAwX
qBXuMo/iXMyM3YdeJn1uDjM0Y2SoAgbh8VZwBFT2xD9YYZIMMOwM/1tCGKyVpiXl
uNyNc1DtAQff5QFWRminpiAN6wZW3Hg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:03 2025 by rpki-client