Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
File: 60937ba8-97a0-39b2-9125-b389bb3810bd.roa (raw, json)
Hash identifier: PnHcAyN1oi6UcOAbNzIcDklR90DBrySRMhjL6FRNbPo=
Subject key identifier: D1:7E:0C:7E:37:F4:D7:74:59:F3:68:48:B8:E1:7F:92:74:8A:85:0E
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858486695AFBBD66A567E8AA89900
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 148.164.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:af:bb:d6:6a:56:7e:8a:a8:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=bf208a41-0cc6-4f57-99ee-3a2f1a94c18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:f7:52:d0:39:50:11:1d:ff:cd:b8:c6:39:
c2:97:30:8b:97:00:3c:6f:17:b3:0e:58:09:b5:08:
c5:46:1c:94:f1:86:b2:c2:6c:06:f8:e4:4d:ec:6c:
cd:3b:41:a9:a3:e9:22:25:90:92:a9:62:9c:49:fc:
d8:bd:66:94:1c:e5:d7:12:10:0c:da:50:55:89:f0:
ec:cd:77:0c:40:33:c9:4c:48:d8:4f:38:b6:7e:9f:
d3:6f:0b:4a:08:12:c0:87:fe:b9:32:29:4a:a3:16:
cb:04:0f:ae:0d:9a:90:46:8a:00:9d:1c:32:d9:72:
7b:33:14:e9:f7:04:c6:e4:f0:00:67:a8:7a:70:6c:
36:eb:9e:06:80:e5:21:21:45:1d:3d:d1:ba:ae:3e:
a6:c0:a7:14:65:9d:5b:41:de:8f:d7:ae:e0:09:ab:
20:33:6d:82:a2:07:69:e2:c2:16:5f:d3:c5:41:42:
c9:a3:9d:25:c0:64:ec:f3:0a:a0:64:8f:0b:d0:66:
0a:3e:e3:c3:b4:04:19:2e:1b:72:c7:04:71:b4:04:
d4:a7:d2:0f:c6:f0:4a:b6:f0:ff:49:9c:0b:b1:ee:
43:f5:bc:04:a0:1b:db:b2:ec:86:7e:00:2e:4e:be:
b1:c9:74:a8:7b:c0:61:1a:e1:d4:48:04:c5:38:70:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:0C:7E:37:F4:D7:74:59:F3:68:48:B8:E1:7F:92:74:8A:85:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4d:9d:bb:0a:26:3d:bf:f2:3d:05:5b:66:cd:b5:68:68:cd:
66:91:39:e6:b1:7c:7e:96:76:1e:c1:ca:84:b4:50:62:f7:ec:
96:91:82:9a:74:eb:72:18:55:ca:11:1a:02:5d:ce:8e:21:1f:
7b:25:14:28:50:b7:47:1a:5a:71:0f:83:7a:77:1e:82:89:9f:
35:14:d9:4a:53:9d:90:8f:9b:1a:ca:88:9c:57:00:ba:ce:7f:
f3:66:43:83:1a:35:e6:13:df:c6:a7:2a:d6:24:0f:e4:e1:03:
6c:ff:46:d0:9e:9d:0f:52:f0:b5:7c:f8:d0:03:4f:0e:c6:7d:
8e:93:6e:35:d6:ff:d1:68:b2:a2:ab:89:2a:4c:fb:6d:15:49:
1e:13:0b:d5:54:2b:fb:fb:f7:34:3d:36:2c:a0:02:b6:b7:fd:
1c:c0:ed:68:ef:e6:38:2b:d4:43:d2:da:c0:65:27:bc:33:25:
b0:c7:d9:f0:67:3c:72:8f:dc:ea:91:b8:4f:da:8b:36:29:0b:
ed:56:53:44:b5:67:51:02:51:c5:3d:a6:d4:26:e2:15:fb:cc:
6c:f2:da:a5:52:1c:9d:25:49:ea:be:7a:59:40:be:e5:6b:3b:
61:e0:fa:df:60:77:41:e8:6b:3e:57:32:9e:c6:71:88:06:5d:
8a:74:29:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmla+71mpWfoqomQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YmYyMDhhNDEtMGNjNi00ZjU3LTk5ZWUtM2EyZjFhOTRjMThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEX3UtA5UBEd/824xjnClzCLlwA8bxezDlgJ
tQjFRhyU8YaywmwG+ORN7GzNO0Gpo+kiJZCSqWKcSfzYvWaUHOXXEhAM2lBVifDs
zXcMQDPJTEjYTzi2fp/TbwtKCBLAh/65MilKoxbLBA+uDZqQRooAnRwy2XJ7MxTp
9wTG5PAAZ6h6cGw2654GgOUhIUUdPdG6rj6mwKcUZZ1bQd6P167gCasgM22Cogdp
4sIWX9PFQULJo50lwGTs8wqgZI8L0GYKPuPDtAQZLhtyxwRxtATUp9IPxvBKtvD/
SZwLse5D9bwEoBvbsuyGfgAuTr6xyXSoe8BhGuHUSATFOHDK7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNF+DH439Nd0WfNoSLjhf5J0ioUOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvNjA5MzdiYTgtOTdhMC0z
OWIyLTkxMjUtYjM4OWJiMzgxMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtNnbsKJj2/8j0FW2bNtWhozWaROeaxfH6Wdh7ByoS0UGL37JaRgpp0
63IYVcoRGgJdzo4hH3slFChQt0caWnEPg3p3HoKJnzUU2UpTnZCPmxrKiJxXALrO
f/NmQ4MaNeYT38anKtYkD+ThA2z/RtCenQ9S8LV8+NADTw7GfY6TbjXW/9FosqKr
iSpM+20VSR4TC9VUK/v79zQ9NiygAra3/RzA7Wjv5jgr1EPS2sBlJ7wzJbDH2fBn
PHKP3OqRuE/aizYpC+1WU0S1Z1ECUcU9ptQm4hX7zGzy2qVSHJ0lSeq+ellAvuVr
O2Hg+t9gd0Hoaz5XMp7GcYgGXYp0KfU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:36:23 2025 by rpki-client