Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa
File: d45a5249-bf9a-3fab-aef4-be6e656a9773.roa (raw, json)
Hash identifier: 518EDYNW/h/yNR6HClC+ksIumoC7id9bi2eRhA9RVd4=
Subject key identifier: 50:9C:7E:A9:13:B5:6E:38:A9:24:EC:61:77:22:9B:38:D7:08:7D:5F
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847EBBF8BF17668B88F2CF57E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa
Signing time: Mon 18 Nov 2024 14:00:40 +0000
ROA not before: Mon 18 Nov 2024 14:00:40 +0000
ROA not after: Sun 16 Feb 2025 14:00:40 +0000
asID: 13335
IP address blocks: 150.48.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:bf:8b:f1:76:68:b8:8f:2c:f5:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Nov 18 14:00:40 2024 GMT
Not After : Feb 16 14:00:40 2025 GMT
Subject: CN=9bb879fe-13f5-4adc-add5-4b8b686f9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:10:14:f4:1d:a4:bd:62:38:f1:e9:4f:90:
98:34:87:87:08:63:17:bf:a1:50:4f:b2:34:14:6b:
7a:3d:d7:05:f0:ca:82:12:dc:29:d1:d6:e5:3c:14:
f2:35:a0:83:b6:24:1e:48:a8:af:3c:a9:3a:b3:8d:
aa:c6:ed:7c:da:82:cb:c4:06:58:6d:b4:d5:ef:5a:
07:3d:77:7d:e6:5f:ef:e7:a6:3c:2d:b4:7c:00:7d:
dd:ed:05:4f:cd:f2:f9:39:19:61:c3:b3:04:9d:a2:
72:ca:6c:b0:80:6c:d6:14:e7:47:33:7f:35:ef:2b:
87:3c:f6:e1:0c:0a:f0:99:63:bf:11:74:92:62:c9:
40:52:46:5d:73:68:a4:f2:19:3f:03:6b:e5:66:12:
04:05:6f:27:3b:1e:1d:c9:06:23:c3:91:be:f5:84:
c3:b9:7b:f5:72:ca:b9:9c:b1:61:ca:8a:29:bf:02:
0c:e0:73:fe:a4:53:68:1c:65:cf:e4:6d:cf:97:45:
e6:10:81:fc:8f:b2:e2:87:6a:25:cc:c4:53:7e:45:
60:19:f1:10:92:fe:62:30:ce:86:71:7d:71:ab:97:
9b:f9:4e:ad:79:b6:88:53:ac:07:ac:0a:f9:c5:e2:
f5:16:97:11:ad:51:1b:b4:39:cc:31:02:94:60:cd:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9C:7E:A9:13:B5:6E:38:A9:24:EC:61:77:22:9B:38:D7:08:7D:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
150.48.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:49:e0:39:fb:39:e8:2d:02:d1:16:dc:da:bc:32:80:02:e5:
d2:14:25:a7:23:f2:e0:fd:aa:94:84:9a:ad:e3:cb:46:b4:1e:
40:50:14:7a:d1:dc:02:83:a9:b2:e0:26:19:ed:87:29:5a:31:
14:78:25:cd:49:1c:a8:04:68:78:13:bd:8a:01:66:c7:7b:5f:
c9:7a:32:f4:14:d6:e1:55:55:de:37:c9:d2:f2:78:b7:65:66:
93:f3:1f:09:15:ab:72:f5:7c:cc:aa:3f:df:35:0c:74:cd:cb:
1e:67:34:33:92:b2:aa:78:3c:b9:dd:a9:a2:f5:e4:04:64:d3:
22:fe:6e:ec:c0:6e:f1:04:c5:52:67:38:69:c6:54:b7:25:86:
63:a9:40:0e:93:eb:d3:b6:c8:1a:f9:cc:ed:f9:4a:9e:64:c6:
83:aa:9f:f5:fc:d4:31:e2:67:f4:54:ca:7a:11:45:d7:c0:aa:
26:1a:ae:fa:1c:30:8d:2a:43:8e:a8:20:75:82:b2:8c:c0:bb:
7b:65:f1:a6:50:f2:4b:67:1b:67:97:f4:21:18:44:20:2c:42:
44:bd:7d:68:e4:a6:f5:c5:af:89:fd:bc:fe:43:10:9b:7e:ab:
10:3d:0c:0f:59:0f:aa:04:7e:37:24:d9:f3:c5:6a:7a:b4:fd:
ac:3d:77:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4vxdmi4jyz1foAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
OWJiODc5ZmUtMTNmNS00YWRjLWFkZDUtNGI4YjY4NmY5ZTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9YQFPQdpL1iOPHpT5CYNIeHCGMXv6FQT7I0
FGt6PdcF8MqCEtwp0dblPBTyNaCDtiQeSKivPKk6s42qxu182oLLxAZYbbTV71oH
PXd95l/v56Y8LbR8AH3d7QVPzfL5ORlhw7MEnaJyymywgGzWFOdHM3817yuHPPbh
DArwmWO/EXSSYslAUkZdc2ik8hk/A2vlZhIEBW8nOx4dyQYjw5G+9YTDuXv1csq5
nLFhyoopvwIM4HP+pFNoHGXP5G3Pl0XmEIH8j7Lih2olzMRTfkVgGfEQkv5iMM6G
cX1xq5eb+U6tebaIU6wHrAr5xeL1FpcRrVEbtDnMMQKUYM0DcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCcfqkTtW44qSTsYXcimzjXCH1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDQ1YTUyNDktYmY5YS0z
ZmFiLWFlZjQtYmU2ZTY1NmE5NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhJ4Dn7OegtAtEW3Nq8MoAC5dIUJacj8uD9qpSEmq3jy0a0HkBQFHrR
3AKDqbLgJhnthylaMRR4Jc1JHKgEaHgTvYoBZsd7X8l6MvQU1uFVVd43ydLyeLdl
ZpPzHwkVq3L1fMyqP981DHTNyx5nNDOSsqp4PLndqaL15ARk0yL+buzAbvEExVJn
OGnGVLclhmOpQA6T69O2yBr5zO35Sp5kxoOqn/X81DHiZ/RUynoRRdfAqiYarvoc
MI0qQ46oIHWCsozAu3tl8aZQ8ktnG2eX9CEYRCAsQkS9fWjkpvXFr4n9vP5DEJt+
qxA9DA9ZD6oEfjck2fPFanq0/aw9d2o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:30 2025 by rpki-client