Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
File: b3daaa82-df38-3308-8f74-538c1b1500bb.roa (raw, json)
Hash identifier: yvSNtTGAyMsWyM69AaVQefvgBCqXLwWYgmjExTXKtYo=
Subject key identifier: EA:C6:4B:A8:4E:D2:FA:56:2E:34:9A:7C:32:46:C8:AF:A1:73:4E:81
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584851A5754492B139B25EC33480
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 395831
IP address blocks: 158.115.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:75:44:92:b1:39:b2:5e:c3:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=da942945-d8c2-4385-8f5e-c7d638d9dc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:59:af:94:94:42:a9:58:23:05:89:c1:2b:
39:2a:82:d7:de:0e:d6:66:2b:8a:ca:b4:17:d6:ee:
b9:f5:6e:c9:98:5c:ff:58:78:00:03:08:82:f5:fc:
e4:76:0f:2d:86:9b:43:d4:47:1c:0e:58:d1:63:18:
eb:6a:59:72:36:69:5a:45:0b:33:ba:65:f2:34:45:
bb:81:1d:aa:e3:cd:13:ea:26:00:f8:f4:57:32:a1:
76:6c:36:e8:d1:fc:13:19:9e:ca:62:a2:b0:17:d0:
2c:80:6e:1b:50:ce:9e:a5:f8:cd:23:af:69:64:a7:
ce:b0:0d:ee:e4:26:72:82:fe:4d:65:7e:e0:81:3b:
65:8f:c0:5c:b8:92:1d:17:7b:c1:2c:de:c9:b5:dc:
5b:bd:45:54:b0:a3:8b:82:e0:e1:b5:60:db:29:54:
31:44:90:e7:82:29:3f:69:91:01:1e:ef:87:66:61:
3c:f4:74:7e:21:34:2e:37:a6:5d:3d:46:79:96:4c:
6d:09:d4:9c:ef:a5:7f:31:fc:a8:16:aa:5f:43:92:
4d:ae:6f:63:f2:44:b8:e1:a0:78:cb:3d:c4:63:50:
11:11:ac:02:bb:df:e4:c7:35:c1:80:44:e8:29:5d:
40:de:dd:0e:e2:81:56:fd:2c:35:da:52:03:7f:32:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:4B:A8:4E:D2:FA:56:2E:34:9A:7C:32:46:C8:AF:A1:73:4E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:31:28:fe:b7:a7:1e:d0:b6:00:b6:80:b3:92:0e:44:d9:3f:
81:7c:bb:ae:ad:0f:c3:d0:c5:be:e9:18:34:88:21:ca:41:b5:
7c:59:64:26:7d:31:4c:79:da:4a:11:ec:27:da:af:0e:55:c1:
0a:38:68:91:9b:8f:e9:59:03:9a:fc:63:16:c7:83:99:8c:fe:
f8:5f:81:22:ea:43:1c:86:25:fb:09:a3:7e:fd:a9:20:b4:d8:
5c:3d:f8:b9:98:fc:7e:37:d9:f9:9f:29:ed:62:a9:3d:dd:fe:
42:14:7b:83:1d:f4:7f:58:a0:9e:3b:32:c1:1a:19:0d:90:4c:
7b:96:33:bf:21:89:a3:59:19:68:09:3d:34:ca:db:7a:65:ba:
5f:98:8c:1c:f6:2c:d6:8a:c8:00:54:9c:ed:10:26:48:a2:13:
00:c4:34:d2:a8:b8:4f:59:1f:41:c7:cb:9c:ba:6a:fd:d7:2e:
10:96:28:37:a9:ab:22:c8:4f:4d:a4:c0:8c:e4:cd:33:aa:0c:
8d:65:10:a7:3a:9f:fe:0b:64:fc:07:66:5f:db:30:b1:a1:5b:
9d:6b:99:da:1e:3f:6f:2d:53:8e:53:a7:65:c0:85:c9:3a:7d:
bb:76:5d:d5:2b:12:d6:7e:8f:ff:9b:28:26:23:f7:67:03:47:
a8:50:70:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXVEkrE5sl7DNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
ZGE5NDI5NDUtZDhjMi00Mzg1LThmNWUtYzdkNjM4ZDlkYzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2hZr5SUQqlYIwWJwSs5KoLX3g7WZiuKyrQX
1u659W7JmFz/WHgAAwiC9fzkdg8thptD1EccDljRYxjrallyNmlaRQszumXyNEW7
gR2q480T6iYA+PRXMqF2bDbo0fwTGZ7KYqKwF9AsgG4bUM6epfjNI69pZKfOsA3u
5CZygv5NZX7ggTtlj8BcuJIdF3vBLN7JtdxbvUVUsKOLguDhtWDbKVQxRJDngik/
aZEBHu+HZmE89HR+ITQuN6ZdPUZ5lkxtCdSc76V/MfyoFqpfQ5JNrm9j8kS44aB4
yz3EY1AREawCu9/kxzXBgEToKV1A3t0O4oFW/Sw12lIDfzIdzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrGS6hO0vpWLjSafDJGyK+hc06BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjNkYWFhODItZGYzOC0z
MzA4LThmNzQtNTM4YzFiMTUwMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkxKP63px7QtgC2gLOSDkTZP4F8u66tD8PQxb7pGDSIIcpBtXxZZCZ9
MUx52koR7Cfarw5VwQo4aJGbj+lZA5r8YxbHg5mM/vhfgSLqQxyGJfsJo379qSC0
2Fw9+LmY/H432fmfKe1iqT3d/kIUe4Md9H9YoJ47MsEaGQ2QTHuWM78hiaNZGWgJ
PTTK23plul+YjBz2LNaKyABUnO0QJkiiEwDENNKouE9ZH0HHy5y6av3XLhCWKDep
qyLIT02kwIzkzTOqDI1lEKc6n/4LZPwHZl/bMLGhW51rmdoeP28tU45Tp2XAhck6
fbt2XdUrEtZ+j/+bKCYj92cDR6hQcGA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:57 2025 by rpki-client