Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa
File: 5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa (raw, json)
Hash identifier: Ph44wQ9MqupwkLZeW+MYuwM/Z+ngI7TNr8xYUzqm79E=
Subject key identifier: 2A:FF:BA:42:4F:F2:3E:0C:CD:83:F5:16:01:45:81:4C:98:A4:A6:D7
Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial: 010D0C9F43285849088162F3010010E1976914C0
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 6507
IP address blocks: 151.106.250.0/23 maxlen: 23
151.106.252.0/24 maxlen: 24
151.106.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:62:f3:01:00:10:e1:97:69:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=c463e71f-53cb-4e86-99b3-202b728825bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:44:83:09:a3:c8:ea:27:00:78:23:70:a2:
1e:93:de:82:f9:b2:f5:54:bf:f0:48:fc:d6:e4:eb:
c6:55:ce:ac:1f:58:1c:99:c7:66:19:a4:d9:e3:e1:
9a:df:85:fd:61:11:07:f7:97:cd:da:5b:3c:2d:54:
79:5c:f2:cd:1f:4f:42:24:80:9f:4c:11:57:4e:0b:
2d:af:a2:ec:38:4d:00:78:4d:96:a2:be:fe:54:e0:
d5:aa:38:97:d1:6b:ea:8d:b2:58:88:3e:f3:f4:87:
b1:ae:0f:f0:af:7a:0c:bb:58:e0:b2:59:62:86:f7:
d9:d5:c6:72:89:5e:3b:8f:db:5d:9d:e6:1c:36:0f:
b4:3a:bd:f9:4e:c5:a9:98:5a:c5:15:b8:a3:69:fc:
31:d8:67:04:4a:d9:94:4d:04:9f:5e:ab:bf:9c:76:
d5:91:6b:7f:39:8d:34:64:13:c0:76:56:62:df:a1:
d7:64:f1:6f:4d:5b:18:58:48:88:04:f7:94:2d:1e:
34:ed:f1:02:87:fb:37:8b:3e:dd:7a:dc:6d:76:5d:
54:d5:eb:d5:80:1c:49:54:eb:e9:54:fc:0a:00:21:
b8:ef:e1:cd:41:d9:eb:12:fd:32:03:c9:a7:aa:d1:
ba:81:b3:3d:d6:72:1e:5c:dc:f3:f3:bd:66:bf:4f:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:BA:42:4F:F2:3E:0C:CD:83:F5:16:01:45:81:4C:98:A4:A6:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/5328e4cc-f6ba-3ad8-8949-dc48a7161c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
X509v3 Authority Key Identifier:
keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
sbgp-ipAddrBlock: critical
IPv4:
151.106.250.0-151.106.252.255
151.106.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:6b:a4:5b:f6:26:a1:e0:57:c5:ac:8d:3f:51:7d:7c:8c:ad:
49:cb:14:53:70:dc:d4:6c:6f:96:c7:57:3a:35:dc:4b:f1:6a:
b9:4c:89:f2:ba:ab:d9:cb:dc:bd:1f:70:cf:20:8f:5e:d6:50:
9f:46:11:d6:5d:71:e3:2c:1a:59:03:12:93:f4:51:79:d6:97:
57:48:90:61:d1:81:1c:59:c0:36:3e:57:8c:57:d4:9e:41:91:
fb:84:5b:7b:bf:7a:50:f9:21:b6:28:30:98:e0:21:6c:6b:cc:
2b:6a:40:c8:b7:75:5c:17:0b:5a:0d:6a:92:0d:bd:0f:5b:60:
a4:ef:22:00:22:9c:cc:a2:ec:85:66:d2:87:6a:da:1c:bb:c9:
35:5a:b0:e2:c9:38:91:9e:24:d9:45:0a:e8:1e:86:ee:8c:fb:
28:75:cf:9a:89:f7:e7:c8:c7:73:7c:0b:ff:8c:d5:74:70:4e:
4a:f8:6f:9f:24:77:12:44:56:b7:8a:cf:ad:da:1f:ab:22:c2:
8c:47:33:e0:d4:62:95:62:86:2a:bd:2b:81:51:f3:3d:9d:c9:
25:7f:a4:3f:67:22:31:50:97:a7:c9:ea:64:57:0e:3e:39:b7:
a5:c8:b6:dd:11:db:7f:88:90:67:aa:58:82:c0:62:b2:82:aa:
98:ae:a8:f7
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEkIgWLzAQAQ4ZdpFMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy
NjkyMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
YzQ2M2U3MWYtNTNjYi00ZTg2LTk5YjMtMjAyYjcyODgyNWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVJEgwmjyOonAHgjcKIek96C+bL1VL/wSPzW
5OvGVc6sH1gcmcdmGaTZ4+Ga34X9YREH95fN2ls8LVR5XPLNH09CJICfTBFXTgst
r6LsOE0AeE2Wor7+VODVqjiX0WvqjbJYiD7z9Iexrg/wr3oMu1jgsllihvfZ1cZy
iV47j9tdneYcNg+0Or35TsWpmFrFFbijafwx2GcEStmUTQSfXqu/nHbVkWt/OY00
ZBPAdlZi36HXZPFvTVsYWEiIBPeULR407fECh/s3iz7detxtdl1U1evVgBxJVOvp
VPwKACG47+HNQdnrEv0yA8mnqtG6gbM91nIeXNzz871mv09NoQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFCr/ukJP8j4MzYP1FgFFgUyYpKbXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2
YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvNTMyOGU0Y2MtZjZiYS0z
YWQ4LTg5NDktZGM0OGE3MTYxYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx
ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl
MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4
MTc2ZTI2OTIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGXavoD
BACXavwDBACXav4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAamukW/YmoeBXxayNP1F9fIytScsUU3Dc1Gxv
lsdXOjXcS/FquUyJ8rqr2cvcvR9wzyCPXtZQn0YR1l1x4ywaWQMSk/RRedaXV0iQ
YdGBHFnANj5XjFfUnkGR+4Rbe796UPkhtigwmOAhbGvMK2pAyLd1XBcLWg1qkg29
D1tgpO8iACKczKLshWbSh2raHLvJNVqw4sk4kZ4k2UUK6B6G7oz7KHXPmon358jH
c3wL/4zVdHBOSvhvnyR3EkRWt4rPrdofqyLCjEcz4NRilWKGKr0rgVHzPZ3JJX+k
P2ciMVCXp8nqZFcOPjm3pci23RHbf4iQZ6pYgsBisoKqmK6o9w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:51 2025 by rpki-client