Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa
File: 37219094-f4ad-3a5e-a5de-82c59292ef7c.roa (raw, json)
Hash identifier: mQUGUn0fik0uWZoTBc4xoiu5lSht5q13RyaP99XnzBY=
Subject key identifier: AC:51:20:AF:4A:3A:C4:C1:BF:63:89:A7:39:68:80:13:D9:D8:66:F8
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695B01775EE4144B97A8E00
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b0:17:75:ee:41:44:b9:7a:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=1d3346d7-0949-4089-a98a-263e677ebd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:38:71:71:dc:6c:f9:50:0c:0d:c5:74:4f:
44:c5:f1:fc:ce:f1:6e:a8:0b:be:e1:95:96:f2:cb:
94:36:a6:bf:30:a3:c5:da:3c:b4:82:30:80:6c:16:
15:04:a6:16:c7:89:0f:5c:05:bd:e3:c2:b0:a7:d2:
19:2f:b0:b4:ff:b8:e9:a6:92:d2:35:0d:e1:03:10:
99:db:84:a8:ab:58:20:5d:22:2d:e2:f3:60:15:d6:
ba:bb:67:fe:ad:c3:46:2b:41:8d:d5:c2:04:5a:b9:
be:94:ba:cf:18:99:ba:5d:27:73:d1:91:9d:5e:88:
d9:17:4e:04:fb:3d:f1:c0:53:eb:f8:58:95:75:d1:
3e:e5:62:38:95:08:a4:25:1b:ee:be:e0:d6:02:22:
fc:e9:f5:64:7d:78:5c:05:d8:d2:4b:00:3f:d4:0e:
27:c2:af:ff:e4:98:cc:92:10:a0:3d:25:fa:be:9e:
08:b1:07:92:1a:ee:75:cb:1d:7e:d1:9c:b8:5e:f4:
d3:bc:28:74:f9:7c:2c:aa:f7:54:f3:f5:d5:21:90:
f5:84:0c:43:ee:f8:e8:24:47:3a:17:67:9f:cc:a8:
35:0b:bd:c5:42:e3:af:a4:f5:25:9f:74:1d:57:c9:
b1:8d:ff:df:29:f2:c4:d7:42:17:19:34:e3:1f:5e:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:20:AF:4A:3A:C4:C1:BF:63:89:A7:39:68:80:13:D9:D8:66:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e0:63:d7:09:36:5a:e2:ec:72:19:5e:a9:3c:b9:5b:3b:e4:
e2:31:3b:c3:98:be:a6:54:f6:05:5b:c6:ab:00:2c:b4:19:d9:
f3:d9:d2:fd:07:b8:8f:75:22:35:53:c6:9e:1c:48:82:21:78:
44:16:94:ed:cb:81:e1:76:ee:ab:5d:a8:b0:c9:45:c7:05:b4:
b5:22:d8:06:c9:a7:52:7c:6a:fc:45:9e:ed:25:f1:77:a9:1c:
3d:f9:1e:8c:81:bd:77:87:a4:0a:4f:92:d8:f7:49:bf:12:f0:
de:e1:5a:3c:28:1e:6b:db:58:01:ce:ce:4f:54:6f:14:79:7a:
c2:5f:0e:df:6d:e9:4a:de:ae:3b:8b:be:af:69:98:71:38:6f:
56:16:2f:f4:d6:7e:6f:d9:04:af:dd:0d:38:b2:45:f0:b8:c8:
2d:93:fc:73:48:6e:9d:3f:a1:e3:7d:ae:7d:ca:ac:f1:00:82:
74:e9:5b:8f:08:34:7c:89:2e:2d:1a:70:5e:67:2f:05:1e:dd:
db:86:fc:e1:93:65:d1:23:05:d1:8f:a8:fb:1a:62:7b:26:7d:
52:29:6e:d7:cc:56:16:fe:b2:fb:9c:5d:69:6c:26:53:75:e9:
cb:30:8f:4c:5e:8f:2e:de:8b:a0:13:07:45:a9:ab:61:c0:58:
18:3c:3a:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbAXde5BRLl6jgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MWQzMzQ2ZDctMDk0OS00MDg5LWE5OGEtMjYzZTY3N2ViZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4w4cXHcbPlQDA3FdE9ExfH8zvFuqAu+4ZWW
8suUNqa/MKPF2jy0gjCAbBYVBKYWx4kPXAW948Kwp9IZL7C0/7jpppLSNQ3hAxCZ
24Soq1ggXSIt4vNgFda6u2f+rcNGK0GN1cIEWrm+lLrPGJm6XSdz0ZGdXojZF04E
+z3xwFPr+FiVddE+5WI4lQikJRvuvuDWAiL86fVkfXhcBdjSSwA/1A4nwq//5JjM
khCgPSX6vp4IsQeSGu51yx1+0Zy4XvTTvCh0+XwsqvdU8/XVIZD1hAxD7vjoJEc6
F2efzKg1C73FQuOvpPUln3QdV8mxjf/fKfLE10IXGTTjH15MfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxRIK9KOsTBv2OJpzlogBPZ2Gb4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMzcyMTkwOTQtZjRhZC0z
YTVlLWE1ZGUtODJjNTkyOTJlZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXgY9cJNlri7HIZXqk8uVs75OIxO8OYvqZU9gVbxqsALLQZ2fPZ0v0H
uI91IjVTxp4cSIIheEQWlO3LgeF27qtdqLDJRccFtLUi2AbJp1J8avxFnu0l8Xep
HD35HoyBvXeHpApPktj3Sb8S8N7hWjwoHmvbWAHOzk9UbxR5esJfDt9t6UrerjuL
vq9pmHE4b1YWL/TWfm/ZBK/dDTiyRfC4yC2T/HNIbp0/oeN9rn3KrPEAgnTpW48I
NHyJLi0acF5nLwUe3duG/OGTZdEjBdGPqPsaYnsmfVIpbtfMVhb+svucXWlsJlN1
6cswj0xejy7ei6ATB0Wpq2HAWBg8OpE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:38 2025 by rpki-client