Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa
File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json)
Hash identifier: X1TVDmH2aiRRWYATOYHoiDaOpOlybyc/zSMVtQzX6uI=
Subject key identifier: B0:DD:8B:9B:8B:92:6A:93:EF:66:C3:3A:97:B0:36:B7:16:BB:DE:BA
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858487A207DCD50C32936B5B41EC8
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 1239
IP address blocks: 149.143.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:7d:cd:50:c3:29:36:b5:b4:1e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=7aa4fb18-d9ce-4b0f-9d8b-909f1ab0c0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:be:cd:3e:12:1a:76:8d:d6:62:76:c5:41:
3c:1b:7f:4d:42:cf:71:de:70:58:7f:99:54:74:a0:
42:02:38:a6:34:46:2e:c3:9c:2c:df:9d:93:81:38:
df:ef:58:c6:cc:e5:6a:82:ee:09:80:18:c6:6f:13:
6d:2a:90:af:f1:78:d3:7b:80:dc:d3:31:23:9f:47:
42:a1:20:6e:34:4a:83:e1:76:c5:f7:12:fd:c2:28:
43:13:44:50:0b:ff:51:38:6f:3e:e0:46:20:6d:d5:
88:3e:54:a8:82:6c:aa:69:b7:09:89:ec:f6:8d:5e:
b7:26:d1:33:ab:9b:31:55:74:ab:40:f0:1b:22:40:
23:b5:54:b9:1f:29:3a:eb:0b:1d:3a:aa:65:d5:62:
c7:72:1e:0c:eb:6d:80:bf:b0:64:15:b6:d0:3d:1d:
a4:98:5f:67:a0:96:44:95:d1:8d:70:40:62:7b:38:
15:e3:b9:eb:2d:22:e1:d8:ef:e9:fe:84:31:2b:b5:
c0:aa:81:25:45:71:2f:b5:1d:29:b9:5e:01:10:3b:
88:f3:43:32:f0:29:63:50:c6:08:df:80:19:48:8b:
12:97:0b:98:39:b0:be:1e:ab:87:3c:d0:8e:e0:a3:
4e:81:b1:11:6d:64:08:64:b0:13:4e:76:47:34:a0:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:8B:9B:8B:92:6A:93:EF:66:C3:3A:97:B0:36:B7:16:BB:DE:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:d0:93:09:48:99:dd:8d:ee:17:d3:4d:02:e7:ba:d4:35:06:
cb:94:95:4c:a0:7a:7f:23:fd:ff:1b:3a:c5:a0:6f:5c:7f:dd:
8b:16:61:e7:0c:f2:91:1a:80:c2:01:f2:80:97:d1:e4:ef:b9:
30:ee:3d:e6:c9:3a:70:d3:8b:c4:75:1a:6b:56:17:ed:11:48:
6f:57:d9:ed:0b:79:64:df:9c:e8:df:16:df:ae:ac:37:d8:24:
ec:4c:fb:74:c0:8f:e7:47:f2:d2:ac:bf:3d:cd:91:7f:75:ab:
2c:f9:64:f6:0f:4c:db:2e:35:8f:78:40:3c:27:8a:e3:8a:07:
58:74:75:21:1b:28:5a:25:60:f7:c4:73:7b:ce:00:87:3b:7f:
77:21:4a:6e:76:90:e1:ba:3d:f5:f6:f5:30:00:ad:4a:15:6a:
d8:e2:cc:3f:d7:5f:cc:55:ee:5c:74:3d:df:21:8a:5a:e7:81:
9d:ba:dd:93:5f:20:f5:a7:be:85:4f:ce:95:d4:13:51:94:6f:
93:d1:ab:1b:f0:46:69:af:e6:58:92:8a:97:14:33:90:78:54:
c0:47:18:f9:a5:70:d2:76:62:cf:6c:6b:c0:f5:62:11:e7:24:
1b:72:14:3b:86:44:57:1f:11:d0:ec:9d:00:0d:81:c9:3f:9d:
68:67:20:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IH3NUMMpNrW0HsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
N2FhNGZiMTgtZDljZS00YjBmLTlkOGItOTA5ZjFhYjBjMGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8i+zT4SGnaN1mJ2xUE8G39NQs9x3nBYf5lU
dKBCAjimNEYuw5ws352TgTjf71jGzOVqgu4JgBjGbxNtKpCv8XjTe4Dc0zEjn0dC
oSBuNEqD4XbF9xL9wihDE0RQC/9ROG8+4EYgbdWIPlSogmyqabcJiez2jV63JtEz
q5sxVXSrQPAbIkAjtVS5Hyk66wsdOqpl1WLHch4M622Av7BkFbbQPR2kmF9noJZE
ldGNcEBiezgV47nrLSLh2O/p/oQxK7XAqoElRXEvtR0puV4BEDuI80My8CljUMYI
34AZSIsSlwuYObC+HquHPNCO4KNOgbERbWQIZLATTnZHNKD/SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDdi5uLkmqT72bDOpewNrcWu966MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z
MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrQkwlImd2N7hfTTQLnutQ1BsuUlUygen8j/f8bOsWgb1x/3YsWYecM
8pEagMIB8oCX0eTvuTDuPebJOnDTi8R1GmtWF+0RSG9X2e0LeWTfnOjfFt+urDfY
JOxM+3TAj+dH8tKsvz3NkX91qyz5ZPYPTNsuNY94QDwniuOKB1h0dSEbKFolYPfE
c3vOAIc7f3chSm52kOG6PfX29TAArUoVatjizD/XX8xV7lx0Pd8hilrngZ263ZNf
IPWnvoVPzpXUE1GUb5PRqxvwRmmv5liSipcUM5B4VMBHGPmlcNJ2Ys9sa8D1YhHn
JBtyFDuGRFcfEdDsnQANgck/nWhnIOY=
-----END CERTIFICATE-----
Generated at Fri May 9 09:19:01 2025 by rpki-client