Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
File: 35e18274-54dc-3145-922d-ae98be85a0d4.roa (raw, json)
Hash identifier: NJU/br1K4pij/nMHTM5XdUTMemwQDsrkr7aDgX0TuZk=
Subject key identifier: 09:81:4D:2B:66:B4:65:91:36:97:3C:1C:48:CD:FC:25:8F:06:31:2F
Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial: 010D0C9F432858482EC007790754B06ACB1DB800
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 22793
IP address blocks: 148.76.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:07:79:07:54:b0:6a:cb:1d:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=239634eb-9d48-445f-b1fd-3959a1f27c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:1e:30:00:7a:a7:31:1b:6d:8c:93:76:b9:
cf:8b:2a:23:47:60:9b:d3:95:d7:12:3e:b2:43:bc:
cb:05:c1:02:84:49:cb:9f:dc:78:5b:48:d4:9e:e3:
5d:8b:95:09:9d:0d:f4:d8:2a:cc:ac:d5:0d:cb:4b:
9e:b5:44:c6:55:c5:12:ad:93:50:72:0f:1c:d1:ca:
63:90:fe:97:cd:37:b6:34:a9:5f:f0:90:ea:95:b2:
2c:55:da:1c:f8:b9:88:8f:17:bd:92:92:8b:87:c5:
b4:3e:42:24:fb:2c:41:12:5b:2e:72:90:4b:42:3f:
33:29:f0:4c:06:8c:af:4e:04:83:25:c8:f7:37:fb:
3f:2c:46:53:6e:63:70:49:fb:6d:04:08:4b:9e:0d:
c9:0b:2d:46:b7:ec:f4:df:bd:eb:7c:c7:52:1c:8a:
c2:bd:eb:06:15:d7:7b:17:59:d9:6b:66:0c:a1:30:
2a:ee:f7:30:cb:74:4a:a6:1d:43:d5:bf:c8:ec:5a:
d7:63:18:34:db:23:37:62:ef:fc:bb:dc:87:43:bf:
71:b2:10:b5:71:45:3d:29:70:83:e3:0d:af:2e:e9:
a6:db:32:9b:8a:f5:2f:82:a7:5f:30:2f:67:cf:c8:
94:3f:ff:24:ee:b7:18:83:0e:ff:ca:b8:76:0b:c5:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:4D:2B:66:B4:65:91:36:97:3C:1C:48:CD:FC:25:8F:06:31:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
X509v3 Authority Key Identifier:
keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
sbgp-ipAddrBlock: critical
IPv4:
148.76.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:eb:4c:59:41:cd:d1:cb:ef:5f:80:82:d8:32:a6:bd:89:b0:
e3:89:3d:61:a7:bf:7e:23:c7:b3:fe:da:61:79:9f:46:1e:d5:
8b:a5:d2:51:84:e4:24:ae:4e:be:e1:d4:b9:02:93:4e:31:7d:
6b:f7:c7:c4:1e:bf:ab:ea:89:de:d2:2b:fb:89:af:62:23:cb:
a4:ff:28:1d:ba:2b:cd:50:87:98:6e:7c:18:9c:b1:36:dc:99:
bf:41:fb:5e:5c:2a:11:83:e9:ae:a8:70:15:4e:42:05:4a:a2:
a3:73:c7:10:43:52:42:68:93:d5:ef:3a:96:20:3c:da:25:ee:
1e:ee:a8:df:fb:af:0f:8c:bb:c3:67:54:bb:9a:e3:dd:dd:b8:
0d:5b:c7:d0:ba:41:bb:41:2e:9f:27:67:e2:d0:49:0a:14:a1:
6c:b6:75:31:5e:5a:31:0e:be:ba:b3:43:33:83:04:b7:09:f6:
59:25:d9:45:c0:ca:9c:91:95:30:7b:40:fc:01:a3:cc:88:31:
43:f4:a9:39:d1:63:68:4e:3b:4e:4b:d3:1f:de:8c:e6:b8:d3:
ba:bd:01:18:d2:4c:24:79:31:7d:ce:74:09:b6:14:d2:af:73:
b3:6f:b0:24:9f:b2:95:30:9d:c5:90:46:fe:5e:49:63:9c:82:
5c:e9:b5:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwAd5B1SwassduAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
MjM5NjM0ZWItOWQ0OC00NDVmLWIxZmQtMzk1OWExZjI3Yzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9IeMAB6pzEbbYyTdrnPiyojR2Cb05XXEj6y
Q7zLBcEChEnLn9x4W0jUnuNdi5UJnQ302CrMrNUNy0uetUTGVcUSrZNQcg8c0cpj
kP6XzTe2NKlf8JDqlbIsVdoc+LmIjxe9kpKLh8W0PkIk+yxBElsucpBLQj8zKfBM
BoyvTgSDJcj3N/s/LEZTbmNwSfttBAhLng3JCy1Gt+z0373rfMdSHIrCvesGFdd7
F1nZa2YMoTAq7vcwy3RKph1D1b/I7FrXYxg02yM3Yu/8u9yHQ79xshC1cUU9KXCD
4w2vLumm2zKbivUvgqdfMC9nz8iUP/8k7rcYgw7/yrh2C8WDywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmBTStmtGWRNpc8HEjN/CWPBjEvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvMzVlMTgyNzQtNTRkYy0z
MTQ1LTkyMmQtYWU5OGJlODVhMGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEx5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvrTFlBzdHL71+Agtgypr2JsOOJPWGnv34jx7P+2mF5n0Ye1Yul0lGE
5CSuTr7h1LkCk04xfWv3x8Qev6vqid7SK/uJr2Ijy6T/KB26K81Qh5hufBicsTbc
mb9B+15cKhGD6a6ocBVOQgVKoqNzxxBDUkJok9XvOpYgPNol7h7uqN/7rw+Mu8Nn
VLua493duA1bx9C6QbtBLp8nZ+LQSQoUoWy2dTFeWjEOvrqzQzODBLcJ9lkl2UXA
ypyRlTB7QPwBo8yIMUP0qTnRY2hOO05L0x/ejOa407q9ARjSTCR5MX3OdAm2FNKv
c7NvsCSfspUwncWQRv5eSWOcglzptTg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:38 2025 by rpki-client