Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa
File: 32d4eb15-889c-3c2c-a1e4-482420b45122.roa (raw, json)
Hash identifier: PJTIkACAUHPC30EZBzjGj3Z3VEa5sWvXzLZJynibR6s=
Subject key identifier: 61:92:7D:6A:5B:24:58:E5:DA:98:08:1C:F2:8B:18:4A:0B:C0:0A:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285849631ECE5CA79D6136C1003860
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:ce:5c:a7:9d:61:36:c1:00:38:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=94090b3f-87d4-4b30-99db-ef52a30d561e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:e6:17:dd:a0:4c:70:3d:7b:b5:29:a5:d7:
7f:9d:49:2f:15:08:e5:3a:78:14:92:08:b5:3e:03:
0e:63:9c:5c:77:d6:9c:f0:85:1a:32:16:c1:13:fc:
22:07:4a:6e:94:3b:23:83:7a:77:c5:b3:4e:7e:09:
c8:a8:31:b9:40:c3:16:b3:f3:c2:0a:e9:66:10:9f:
82:ca:20:46:b5:ce:0c:f6:3e:e4:8a:dd:9d:09:fc:
7d:4b:e7:98:d3:82:a5:c9:cf:8e:1c:b1:99:5f:ac:
b8:8a:55:1c:26:6a:80:6e:fb:33:a2:4b:11:b8:ed:
28:f1:c8:1d:5d:82:20:05:f5:8e:21:10:0d:d0:dd:
6c:3f:56:7d:36:6a:a8:c3:d7:13:9c:75:2c:76:fe:
4a:d8:ed:ec:b5:4b:83:22:03:7b:8e:48:c4:60:8b:
0b:ad:56:07:51:e4:a5:4a:e8:c2:67:80:50:85:c7:
1d:38:50:df:ae:98:ef:c4:a0:0d:0e:df:e5:ef:48:
72:8c:e3:db:e0:5a:ae:ab:06:30:48:a0:a7:b2:68:
a8:6f:e5:8f:a4:59:8e:b2:f9:0a:e8:41:fe:13:9e:
99:a1:59:9e:92:bf:f8:34:65:d4:c5:91:40:cc:f2:
df:d5:b9:54:a8:53:c4:9a:52:68:fd:60:3c:5c:55:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:7D:6A:5B:24:58:E5:DA:98:08:1C:F2:8B:18:4A:0B:C0:0A:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a8:82:42:44:b5:d6:29:7e:f3:05:2a:e3:61:70:b1:b8:00:
05:d5:ab:8f:cd:31:d1:d2:8f:0c:18:70:c2:c6:4c:80:2e:a1:
56:9f:98:54:df:0b:6d:31:c7:ac:ed:12:0c:23:3a:ba:51:5e:
fd:c8:8e:00:4a:b0:bc:05:76:3c:ee:f1:c6:5e:51:08:19:4d:
fc:f0:cb:02:ff:e8:76:3e:7a:4e:c3:b0:46:b4:a1:8b:b6:90:
e1:aa:53:bd:3e:f3:bd:6d:af:8b:c4:75:af:ad:5e:f0:ac:49:
77:1b:2b:bc:d7:0b:2f:df:67:26:03:f7:a7:e9:b8:cb:e3:bb:
2b:46:bf:26:d4:80:6b:54:b7:b8:99:be:56:04:f4:88:54:75:
ae:09:b1:c9:6f:f3:d3:c5:59:4f:7d:7a:ff:18:91:5b:7b:73:
4a:ed:c2:a6:6b:fc:70:80:2d:52:49:66:a4:93:32:d4:37:08:
86:00:d7:a8:5b:24:82:e0:23:9e:ed:53:63:94:8c:d3:90:37:
c0:00:72:69:a7:f7:b7:bc:25:02:24:92:b7:46:96:c3:d1:dc:
c7:8e:86:73:e6:c3:05:aa:bd:54:8f:aa:c8:66:d0:b7:e7:0a:
f5:1e:4a:25:84:4e:87:1b:02:11:0c:23:00:cb:60:f2:87:8f:
2a:21:64:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHs5cp51hNsEAOGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk
OTQwOTBiM2YtODdkNC00YjMwLTk5ZGItZWY1MmEzMGQ1NjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR/mF92gTHA9e7Uppdd/nUkvFQjlOngUkgi1
PgMOY5xcd9ac8IUaMhbBE/wiB0pulDsjg3p3xbNOfgnIqDG5QMMWs/PCCulmEJ+C
yiBGtc4M9j7kit2dCfx9S+eY04Klyc+OHLGZX6y4ilUcJmqAbvszoksRuO0o8cgd
XYIgBfWOIRAN0N1sP1Z9Nmqow9cTnHUsdv5K2O3stUuDIgN7jkjEYIsLrVYHUeSl
SujCZ4BQhccdOFDfrpjvxKANDt/l70hyjOPb4FquqwYwSKCnsmiob+WPpFmOsvkK
6EH+E56ZoVmekr/4NGXUxZFAzPLf1blUqFPEmlJo/WA8XFUocQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGSfWpbJFjl2pgIHPKLGEoLwAp7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzJkNGViMTUtODg5Yy0z
YzJjLWExZTQtNDgyNDIwYjQ1MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiogkJEtdYpfvMFKuNhcLG4AAXVq4/NMdHSjwwYcMLGTIAuoVafmFTf
C20xx6ztEgwjOrpRXv3IjgBKsLwFdjzu8cZeUQgZTfzwywL/6HY+ek7DsEa0oYu2
kOGqU70+871tr4vEda+tXvCsSXcbK7zXCy/fZyYD96fpuMvjuytGvybUgGtUt7iZ
vlYE9IhUda4Jsclv89PFWU99ev8YkVt7c0rtwqZr/HCALVJJZqSTMtQ3CIYA16hb
JILgI57tU2OUjNOQN8AAcmmn97e8JQIkkrdGlsPR3MeOhnPmwwWqvVSPqshm0Lfn
CvUeSiWETocbAhEMIwDLYPKHjyohZGQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:03 2025 by rpki-client on console.sobornost.net