Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/e6928b91-ec45-395d-bbfe-e24a6348592f.roa
File: e6928b91-ec45-395d-bbfe-e24a6348592f.roa (raw, json)
Hash identifier: rYhxtCUD0ypMmlu83OcaWwBSwuBcKQcWKBqtJ8tthRg=
Subject key identifier: DD:FA:F8:A5:96:8A:79:C3:F1:F6:8E:7A:5E:6C:A2:96:48:E3:0C:40
Certificate issuer: /CN=be7d7ab4-136a-4b57-94de-4d26121783f3
Certificate serial: 010D0C9F432858488DAB51733F30159182CE5F00
Authority key identifier: AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/e6928b91-ec45-395d-bbfe-e24a6348592f.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 14041
IP address blocks: 147.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:51:73:3f:30:15:91:82:ce:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7d7ab4-136a-4b57-94de-4d26121783f3
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=381daf0a-bfe0-410f-adc6-8fe2979d8970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:49:0d:df:ce:d2:c6:2b:59:35:89:ca:bd:
41:d1:63:74:88:01:71:2a:94:aa:bd:c7:1d:95:e8:
5c:c8:b3:00:46:d0:c8:cb:96:b5:25:c0:38:6d:8c:
88:c6:9d:da:5e:8c:e6:b4:ab:b0:50:f7:dc:d5:27:
1c:66:83:b9:14:13:0e:9c:0e:25:4f:8f:17:24:22:
d8:37:47:2f:20:5b:ed:ce:b4:95:2b:8f:04:51:54:
67:8a:4b:60:f7:9e:95:da:3c:0f:06:13:b8:fd:e5:
cd:3b:f1:44:a5:04:c6:c9:85:27:34:f1:73:8b:b3:
52:d0:e9:2f:3c:0c:0d:56:75:8f:24:3d:7b:d2:e5:
ad:b3:49:cb:8c:cd:37:da:4c:0d:3d:9b:22:cd:d6:
ec:e5:c3:58:d3:bf:af:7b:ba:75:93:ab:1d:57:bc:
44:ae:11:51:07:3f:57:ea:da:df:32:35:26:b1:84:
e9:1f:fe:75:17:51:dd:ed:a9:bf:eb:98:ca:6e:f8:
5c:62:fb:37:35:b9:5d:63:fc:69:87:5b:3d:66:35:
bb:23:e2:a4:64:ed:a9:c3:f4:1f:7a:9e:f9:90:c6:
f4:cf:16:0c:f9:6a:cc:21:86:84:88:a4:0b:3d:4e:
d0:54:8d:b4:ca:8b:4e:9a:6d:26:a2:45:d2:f9:63:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:F8:A5:96:8A:79:C3:F1:F6:8E:7A:5E:6C:A2:96:48:E3:0C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/e6928b91-ec45-395d-bbfe-e24a6348592f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer
sbgp-ipAddrBlock: critical
IPv4:
147.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:33:97:95:ce:98:01:75:a8:71:56:fe:23:61:48:1c:46:18:
7e:3f:ed:ff:91:04:00:4b:ce:c6:97:c9:e1:d3:2a:42:19:a7:
e5:96:5c:c6:d3:1a:c3:33:26:78:87:79:d3:c9:2c:ee:74:d0:
8f:bf:08:72:65:f4:bb:0e:c7:c4:f7:37:0f:9d:09:bf:58:a2:
c2:bb:df:89:71:36:3d:00:ee:ef:5b:56:91:a2:dd:ac:87:1f:
a9:1e:a4:7f:f4:d1:9d:36:93:26:49:e0:22:ea:53:e2:d7:be:
71:4f:c3:21:c7:d0:df:3c:dd:7f:a7:af:f7:94:70:c3:85:7b:
5a:2e:38:e0:38:db:28:9b:77:d7:29:d7:c8:5d:2d:12:5c:18:
12:cd:f0:c6:37:d9:95:2b:4c:14:aa:3e:02:5e:b9:b1:97:fe:
3a:f2:92:eb:3b:38:6a:8e:7b:1c:7f:a0:07:6c:87:15:17:2c:
37:04:29:1c:6c:fd:60:28:a8:c0:02:8b:d5:ba:8b:55:ee:94:
a7:26:12:b2:f8:d3:45:02:36:92:6b:57:12:f1:ff:6e:48:04:
43:db:c5:94:0b:4f:85:5d:17:4f:cb:bf:10:26:2c:fa:ea:0d:
82:a2:4f:0b:3e:e5:37:3e:e0:b7:7b:4d:c1:fe:78:38:1f:a2:
72:72:9d:24
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiNq1FzPzAVkYLOXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU3ZDdhYjQtMTM2YS00YjU3LTk0ZGUtNGQyNjEyMTc4
M2YzMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
MzgxZGFmMGEtYmZlMC00MTBmLWFkYzYtOGZlMjk3OWQ4OTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUdJDd/O0sYrWTWJyr1B0WN0iAFxKpSqvccd
lehcyLMARtDIy5a1JcA4bYyIxp3aXozmtKuwUPfc1SccZoO5FBMOnA4lT48XJCLY
N0cvIFvtzrSVK48EUVRniktg956V2jwPBhO4/eXNO/FEpQTGyYUnNPFzi7NS0Okv
PAwNVnWPJD170uWts0nLjM032kwNPZsizdbs5cNY07+ve7p1k6sdV7xErhFRBz9X
6trfMjUmsYTpH/51F1Hd7am/65jKbvhcYvs3NbldY/xph1s9ZjW7I+KkZO2pw/Qf
ep75kMb0zxYM+WrMIYaEiKQLPU7QVI20yotOmm0mokXS+WMiKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN36+KWWinnD8faOel5sopZI4wxAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTdk
N2FiNC0xMzZhLTRiNTctOTRkZS00ZDI2MTIxNzgzZjMvZTY5MjhiOTEtZWM0NS0z
OTVkLWJiZmUtZTI0YTYzNDg1OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU3ZDdhYjQtMTM2YS00YjU3LTk0
ZGUtNGQyNjEyMTc4M2YzL2JlN2Q3YWI0LTEzNmEtNGI1Ny05NGRlLTRkMjYxMjE3
ODNmMy5jcmwwHwYDVR0jBBgwFoAUrp+qm2jzAGumg1rTkwfVJaqEbGUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTdkN2FiNC0xMzZhLTRiNTctOTRkZS00ZDI2
MTIxNzgzZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk5kwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdjOXlc6YAXWocVb+I2FIHEYYfj/t/5EEAEvOxpfJ4dMqQhmn5ZZcxtMa
wzMmeId508ks7nTQj78IcmX0uw7HxPc3D50Jv1iiwrvfiXE2PQDu71tWkaLdrIcf
qR6kf/TRnTaTJkngIupT4te+cU/DIcfQ3zzdf6ev95Rww4V7Wi444DjbKJt31ynX
yF0tElwYEs3wxjfZlStMFKo+Al65sZf+OvKS6zs4ao57HH+gB2yHFRcsNwQpHGz9
YCiowAKL1bqLVe6UpyYSsvjTRQI2kmtXEvH/bkgEQ9vFlAtPhV0XT8u/ECYs+uoN
gqJPCz7lNz7gt3tNwf54OB+icnKdJA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:44 2025 by rpki-client