Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d4157838-886e-3597-b792-1cfc97dec062.roa
File: d4157838-886e-3597-b792-1cfc97dec062.roa (raw, json)
Hash identifier: 6wcefEytEeAUVX+PFNfM1LM5I9bkrEgGbF8VIdFgAnk=
Subject key identifier: 06:8F:47:B5:87:29:72:47:02:56:D9:3A:CA:63:F8:EA:27:46:6F:D7
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584834557C29AEE9F1A3C3AF65E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d4157838-886e-3597-b792-1cfc97dec062.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 20115
IP address blocks: 24.240.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7c:29:ae:e9:f1:a3:c3:af:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=3fb3ba58-a2a1-4bb5-9cf3-8d668a0238d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:c0:07:4e:b4:67:e3:00:b2:a6:69:2c:ac:
f8:73:19:f6:29:69:c0:0d:a7:42:c7:56:db:13:a6:
be:50:6f:19:bd:8e:bb:1f:dc:67:85:5f:36:db:e7:
cc:64:df:f2:9d:03:2b:58:7c:ff:34:1d:bb:cc:0f:
2f:40:d5:71:4d:97:94:e7:f7:38:17:07:15:e2:8d:
b1:16:7f:4d:e8:12:cf:54:50:aa:ea:2b:22:e5:8c:
fd:c2:31:18:67:91:82:50:bb:2a:a6:9f:01:cc:a4:
8f:04:57:21:4b:b2:06:db:77:6a:f3:4c:11:b4:8a:
e8:ef:8b:71:fd:72:3b:0e:be:a8:1d:23:c6:df:21:
2b:27:fa:bf:92:d6:2c:ff:89:82:47:ba:dd:69:6b:
ba:69:59:12:e0:1d:b4:40:11:1c:33:f6:7a:c4:1f:
19:64:12:2b:03:ac:2f:13:a5:48:62:e3:22:79:0f:
46:df:5a:47:4e:6b:f7:6f:b1:c3:fe:0c:7d:14:5d:
f8:50:a0:99:27:c5:5d:e5:8c:d8:32:f4:cd:5d:4a:
8f:2f:5d:12:92:c9:ff:ac:e7:97:9d:fe:8a:a1:13:
51:f7:88:f7:34:eb:3c:6a:ff:b2:5c:31:b2:08:2d:
99:ae:24:b5:e1:74:dd:92:fa:c6:4a:b4:13:6f:3e:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:47:B5:87:29:72:47:02:56:D9:3A:CA:63:F8:EA:27:46:6F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d4157838-886e-3597-b792-1cfc97dec062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.240.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:95:21:c0:3d:f8:a7:69:55:de:4d:08:09:d7:56:7b:8f:e4:
cf:be:00:78:ba:14:94:b6:b0:6f:44:b5:e6:27:91:c5:00:29:
2c:7b:18:67:33:c3:2c:e1:ca:a6:b4:c3:32:c5:55:9a:b6:1b:
7e:2c:b1:fb:a9:d6:40:da:73:12:31:ed:72:6d:d0:1c:0c:58:
9e:84:71:90:23:58:03:25:2e:ff:bc:c5:a3:84:b1:62:f9:d8:
4d:f5:63:d6:60:fc:4f:32:93:61:17:af:58:74:68:d7:49:68:
4a:d8:92:90:69:73:43:90:b9:86:48:1a:08:23:4a:3b:3c:2c:
8e:87:42:a2:76:f3:30:41:e7:ea:36:73:4b:62:d8:48:c2:86:
ef:c9:c8:d8:5a:ad:19:76:d1:2c:4c:80:88:df:ec:55:76:b5:
51:47:ba:9f:df:87:74:d5:1e:9d:a3:2d:a0:91:68:11:0c:4b:
d2:33:53:49:6e:44:e7:32:e8:78:1e:93:59:b1:a4:ac:75:9d:
9b:9d:e8:c5:ac:ce:23:2a:96:93:8f:b2:02:2a:32:65:94:b4:
85:5e:10:b7:08:ea:f8:14:91:ca:15:54:9a:87:f5:6c:97:de:
d7:d3:31:db:86:02:a5:a8:f2:63:f4:45:25:94:98:2c:4f:6a:
ce:ec:e2:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VXwprunxo8OvZeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
M2ZiM2JhNTgtYTJhMS00YmI1LTljZjMtOGQ2NjhhMDIzOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4vAB060Z+MAsqZpLKz4cxn2KWnADadCx1bb
E6a+UG8ZvY67H9xnhV822+fMZN/ynQMrWHz/NB27zA8vQNVxTZeU5/c4FwcV4o2x
Fn9N6BLPVFCq6isi5Yz9wjEYZ5GCULsqpp8BzKSPBFchS7IG23dq80wRtIro74tx
/XI7Dr6oHSPG3yErJ/q/ktYs/4mCR7rdaWu6aVkS4B20QBEcM/Z6xB8ZZBIrA6wv
E6VIYuMieQ9G31pHTmv3b7HD/gx9FF34UKCZJ8Vd5YzYMvTNXUqPL10Sksn/rOeX
nf6KoRNR94j3NOs8av+yXDGyCC2ZriS14XTdkvrGSrQTbz6yhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaPR7WHKXJHAlbZOspj+OonRm/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDQxNTc4MzgtODg2ZS0z
NTk3LWI3OTItMWNmYzk3ZGVjMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+VIcA9+KdpVd5NCAnXVnuP5M++AHi6FJS2sG9EteYnkcUAKSx7GGcz
wyzhyqa0wzLFVZq2G34ssfup1kDacxIx7XJt0BwMWJ6EcZAjWAMlLv+8xaOEsWL5
2E31Y9Zg/E8yk2EXr1h0aNdJaErYkpBpc0OQuYZIGggjSjs8LI6HQqJ28zBB5+o2
c0ti2EjChu/JyNharRl20SxMgIjf7FV2tVFHup/fh3TVHp2jLaCRaBEMS9IzU0lu
ROcy6Hgek1mxpKx1nZud6MWsziMqlpOPsgIqMmWUtIVeELcI6vgUkcoVVJqH9WyX
3tfTMduGAqWo8mP0RSWUmCxPas7s4rc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:42 2025 by rpki-client