Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa
File: b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa (raw, json)
Hash identifier: lWyxVaw9h/UYjsCvmXyd1sLOjcbATem326ior6kEEsg=
Subject key identifier: 33:80:6F:21:11:D4:CD:FE:F3:19:18:B3:D4:1E:31:53:6B:B5:C3:BE
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B53EC4BDE395B93155D00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398823
IP address blocks: 107.148.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:53:ec:4b:de:39:5b:93:15:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=d943566a-8280-4266-a0c4-3bb5f193d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:11:38:7e:da:da:51:4a:7d:82:a6:27:ec:
59:f6:79:a5:86:a2:16:9f:79:53:71:c2:74:b2:16:
21:94:6d:55:de:b5:4e:da:8a:2b:88:62:d0:f7:85:
73:c4:1e:ae:58:1f:4e:54:58:ad:5e:4e:31:97:f1:
fb:b3:86:7d:d3:40:0e:15:77:9d:4e:94:b5:1b:9a:
50:66:e2:89:d0:34:82:66:34:1b:41:00:f5:e5:f8:
24:37:0f:24:f3:66:1f:56:15:f9:d1:29:61:bd:12:
73:f7:5d:72:7f:7d:da:6b:93:64:64:3e:bc:cd:94:
66:96:98:a5:94:c4:fd:be:35:d1:c6:e8:8c:8a:e5:
0c:90:5a:63:0d:a9:1c:cc:d9:80:92:45:1e:b3:bf:
7f:67:a4:8a:9d:df:66:55:1e:77:82:22:64:4c:ee:
09:10:ef:eb:e0:2c:56:ae:da:08:34:d5:3e:de:95:
25:77:b2:7c:d9:41:79:7c:c8:fa:42:43:ef:76:63:
61:0c:5d:f3:d7:6d:09:c7:41:49:c8:ee:b9:fe:ac:
1b:85:ba:c9:fa:b1:51:ec:c1:2c:e8:47:1f:7c:53:
a2:4d:d5:b9:a6:01:f8:c2:e1:b1:47:e9:05:3d:90:
3f:0c:ae:2d:67:49:91:63:6d:15:1e:14:9b:c9:1c:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:6F:21:11:D4:CD:FE:F3:19:18:B3:D4:1E:31:53:6B:B5:C3:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:8f:3c:e3:94:d2:54:71:3a:38:13:be:50:36:2f:85:95:20:
eb:cc:da:4e:62:20:b2:35:d9:41:f3:fc:a1:aa:a0:e4:7d:1a:
74:ec:26:c2:e7:c5:9a:aa:ec:5a:87:00:6e:a5:2c:17:75:ff:
b0:ed:e2:27:4a:10:1d:7f:d0:42:16:14:25:35:6f:8a:ab:ac:
9f:e2:3d:82:14:78:db:cf:ac:e3:48:5f:fd:2e:1d:b5:f5:15:
90:cf:d1:38:f3:5c:36:69:5d:2b:73:3d:48:4e:94:94:b1:c6:
b9:f3:5c:57:59:b5:25:1a:74:87:d4:47:a0:0b:52:ed:76:1a:
fb:89:49:7b:fe:0e:9c:a9:8f:6c:f3:d6:9a:a9:76:ac:37:ad:
42:35:95:42:22:97:8d:a3:6e:dd:ac:4b:4e:74:fc:d3:bd:88:
bb:f9:28:e2:24:d9:49:64:c6:c3:37:c7:f2:d1:e5:6f:f1:92:
d2:51:61:07:4a:34:a5:4e:15:08:74:1b:0b:9b:45:1d:be:33:
4d:17:f4:61:f0:49:b4:db:63:28:dd:49:04:58:65:aa:52:97:
65:65:2c:38:9c:21:b7:b3:8b:f3:db:16:83:c5:4e:9c:be:f3:
05:a8:d8:30:18:31:ac:95:06:e3:f5:ed:bf:77:d5:7d:5c:ef:
85:a7:95:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1PsS945W5MVXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDk0MzU2NmEtODI4MC00MjY2LWEwYzQtM2JiNWYxOTNkNWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbIROH7a2lFKfYKmJ+xZ9nmlhqIWn3lTccJ0
shYhlG1V3rVO2ooriGLQ94VzxB6uWB9OVFitXk4xl/H7s4Z900AOFXedTpS1G5pQ
ZuKJ0DSCZjQbQQD15fgkNw8k82YfVhX50SlhvRJz911yf33aa5NkZD68zZRmlpil
lMT9vjXRxuiMiuUMkFpjDakczNmAkkUes79/Z6SKnd9mVR53giJkTO4JEO/r4CxW
rtoINNU+3pUld7J82UF5fMj6QkPvdmNhDF3z120Jx0FJyO65/qwbhbrJ+rFR7MEs
6EcffFOiTdW5pgH4wuGxR+kFPZA/DK4tZ0mRY20VHhSbyRwBVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOAbyER1M3+8xkYs9QeMVNrtcO+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYjJkNGJkYzctYjY3OC0z
ZTg0LWFiMGItMmJjMzQzOWI1NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5SWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSPPOOU0lRxOjgTvlA2L4WVIOvM2k5iILI12UHz/KGqoOR9GnTsJsLn
xZqq7FqHAG6lLBd1/7Dt4idKEB1/0EIWFCU1b4qrrJ/iPYIUeNvPrONIX/0uHbX1
FZDP0TjzXDZpXStzPUhOlJSxxrnzXFdZtSUadIfUR6ALUu12GvuJSXv+Dpypj2zz
1pqpdqw3rUI1lUIil42jbt2sS050/NO9iLv5KOIk2UlkxsM3x/LR5W/xktJRYQdK
NKVOFQh0GwubRR2+M00X9GHwSbTbYyjdSQRYZapSl2VlLDicIbezi/PbFoPFTpy+
8wWo2DAYMayVBuP17b931X1c74WnlWA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:52 2025 by rpki-client