Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa
File: bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa (raw, json)
Hash identifier: M8Q5Bfo+xu3QtN88QGSDwdq5wO563yQ7v8gMe93XdrU=
Subject key identifier: 48:26:E2:05:BE:77:19:EB:5B:B9:64:DE:73:A4:A0:F9:EB:7E:F9:18
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584940397F790C5179BFFC2B6580
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 2152
IP address blocks: 198.188.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7f:79:0c:51:79:bf:fc:2b:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=535e834b-8912-439e-9908-68ddaa2432ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:41:69:5d:cf:8b:40:b0:e7:b0:be:db:9b:
07:1c:44:70:69:3b:64:01:97:e7:71:f4:ab:0c:94:
ab:ec:1f:3e:e0:e3:10:dc:98:6f:94:b1:a4:ea:c7:
91:b7:a3:ce:5b:51:6c:62:c3:4d:8b:a9:46:53:29:
f6:3e:d7:c5:61:91:31:dc:dd:68:5a:5b:00:c6:66:
85:ca:32:fc:b6:f2:19:e8:52:56:a5:34:e0:7b:59:
82:11:63:17:2f:e2:78:be:9a:ca:be:0d:8d:fb:dd:
86:06:bc:77:73:aa:ed:de:85:bd:83:68:17:c1:56:
2a:6d:ed:9d:b2:63:7b:98:d0:80:4e:cc:e8:37:70:
6b:39:37:ba:d0:31:e9:e2:57:08:f5:ae:f8:3c:76:
42:38:a1:46:4e:9c:fd:59:fa:ed:94:71:2e:80:54:
5f:c6:29:4e:06:e0:b0:07:66:dd:32:5f:c2:58:68:
0c:df:40:f5:ae:69:22:3b:a5:8b:01:83:a1:e3:86:
ce:75:28:a1:fb:2c:cf:c1:00:56:c9:1d:1d:51:c2:
6e:e7:01:43:7b:4c:a0:4f:82:41:84:b8:96:56:ca:
bf:15:60:27:ac:fc:46:73:8a:47:99:a1:8f:e4:8b:
1a:34:38:bd:ab:cf:4d:1b:13:6e:2d:e3:0e:08:ee:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:E2:05:BE:77:19:EB:5B:B9:64:DE:73:A4:A0:F9:EB:7E:F9:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bf3e9344-6dc3-32d2-b7f3-75e2e7512ac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
198.188.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:80:5f:0a:4c:66:03:e1:cc:da:44:e4:a7:b4:fc:37:a0:17:
68:b5:be:a9:ca:13:d3:9b:19:fe:28:f7:e9:f0:dc:9c:2d:94:
e7:87:b9:31:30:96:40:2d:df:7a:25:0a:66:64:6f:e7:bd:11:
46:f4:a9:ad:3a:77:b2:44:ab:61:6e:f3:45:24:aa:5d:56:06:
b6:07:e0:66:c2:e1:08:57:02:5f:64:c6:9d:ed:87:fc:cf:39:
ed:70:0d:13:8c:2d:8a:b5:f3:f4:40:8c:bf:9a:0a:29:68:ba:
08:f4:04:c6:c2:0f:22:37:f9:00:ea:d1:8e:3a:64:40:58:6e:
22:17:b8:bf:0a:f7:8f:dc:5a:41:0c:14:a0:18:3c:c3:97:72:
29:02:0e:7a:3c:c3:e8:9f:77:ff:4a:a2:45:e4:ab:04:06:34:
21:fc:64:6e:4c:c4:f8:3d:9e:f5:a5:69:5c:30:c8:09:61:14:
5a:65:0a:73:e6:12:52:ee:27:c5:29:19:a6:5b:a6:87:98:6a:
22:7c:39:51:da:da:b2:0a:12:04:11:b3:22:a4:45:e0:cc:3e:
a5:b8:16:2d:23:48:f4:43:e5:eb:1c:cf:b2:44:f2:4f:18:a0:
b1:0b:54:4c:c3:51:ef:72:ae:b3:86:41:a6:6c:82:7e:fb:ab:
cf:dd:66:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX95DFF5v/wrZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NTM1ZTgzNGItODkxMi00MzllLTk5MDgtNjhkZGFhMjQzMmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGxBaV3Pi0Cw57C+25sHHERwaTtkAZfncfSr
DJSr7B8+4OMQ3JhvlLGk6seRt6POW1FsYsNNi6lGUyn2PtfFYZEx3N1oWlsAxmaF
yjL8tvIZ6FJWpTTge1mCEWMXL+J4vprKvg2N+92GBrx3c6rt3oW9g2gXwVYqbe2d
smN7mNCATszoN3BrOTe60DHp4lcI9a74PHZCOKFGTpz9WfrtlHEugFRfxilOBuCw
B2bdMl/CWGgM30D1rmkiO6WLAYOh44bOdSih+yzPwQBWyR0dUcJu5wFDe0ygT4JB
hLiWVsq/FWAnrPxGc4pHmaGP5IsaNDi9q89NGxNuLeMOCO55owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgm4gW+dxnrW7lk3nOkoPnrfvkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmYzZTkzNDQtNmRjMy0z
MmQyLWI3ZjMtNzVlMmU3NTEyYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxryRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqAXwpMZgPhzNpE5Ke0/DegF2i1vqnKE9ObGf4o9+nw3JwtlOeHuTEw
lkAt33olCmZkb+e9EUb0qa06d7JEq2Fu80Ukql1WBrYH4GbC4QhXAl9kxp3th/zP
Oe1wDROMLYq18/RAjL+aCilougj0BMbCDyI3+QDq0Y46ZEBYbiIXuL8K94/cWkEM
FKAYPMOXcikCDno8w+ifd/9KokXkqwQGNCH8ZG5MxPg9nvWlaVwwyAlhFFplCnPm
ElLuJ8UpGaZbpoeYaiJ8OVHa2rIKEgQRsyKkReDMPqW4Fi0jSPRD5escz7JE8k8Y
oLELVEzDUe9yrrOGQaZsgn77q8/dZlQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:05 2025 by rpki-client on console.sobornost.net