Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa
File: 3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa (raw, json)
Hash identifier: Owv1r13boyrFzH9TrxuPmCigcVs1TQCUtzAWMCYZ/1w=
Subject key identifier: 28:6D:0B:B9:7E:0E:B3:A1:EA:8B:E1:58:1E:90:66:88:B0:D8:23:77
Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial: 010D0C9F432858489340AA9FEBDF2FF1DC824200
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 21527
IP address blocks: 148.59.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:aa:9f:eb:df:2f:f1:dc:82:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=e0b5ebfb-d41e-45b0-b603-463e59eaa2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:5a:bb:87:7d:fb:36:36:08:67:dc:30:8e:
68:ae:89:f0:67:05:04:55:a0:8e:80:92:91:19:bd:
25:6a:99:93:84:23:bc:16:58:23:6e:d0:ea:5a:4c:
88:4b:5d:32:18:c1:ef:35:60:e9:c7:15:1f:a0:8f:
18:9d:1d:01:bb:02:fe:af:97:46:5d:2b:e9:fb:e7:
05:f9:1c:7e:14:f7:db:b0:5f:25:25:c4:4b:bb:84:
1b:e0:30:db:33:8d:c8:fa:81:a4:f4:c9:fa:69:fa:
70:33:e0:9f:42:88:b9:17:84:6d:c7:e9:fb:55:78:
a7:d9:c6:36:56:70:b0:ce:c3:7c:cd:8a:dd:a5:9a:
bc:41:3a:68:20:91:7f:7a:bc:11:9f:ad:7f:20:56:
87:cf:08:a9:da:66:50:8d:35:bd:00:b6:d6:30:e1:
40:05:81:7c:5f:31:04:46:7f:37:87:59:e1:a3:bb:
5d:df:09:cb:49:0a:b0:de:ad:64:04:5c:f9:f2:80:
4f:69:9b:f4:4a:c8:59:db:cb:a1:d9:58:82:c8:a3:
81:88:01:86:d6:b6:a7:6d:22:e3:08:bd:f1:b8:45:
34:3e:cd:23:d8:bb:9c:de:54:85:1f:a7:f8:c1:cc:
84:18:71:82:08:16:04:49:38:55:5e:59:1c:f3:af:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:0B:B9:7E:0E:B3:A1:EA:8B:E1:58:1E:90:66:88:B0:D8:23:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/3cc847b9-4797-32f2-9e8a-55b4b5fdfc20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl
X509v3 Authority Key Identifier:
keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:75:a5:59:62:0f:4f:27:d6:fd:e8:b9:e6:a5:55:f4:99:8d:
04:23:02:82:ff:de:6b:ee:02:28:b5:be:59:a8:1e:6f:02:f2:
1e:2c:54:23:f9:1c:60:ef:7d:b5:3c:c0:6e:9c:f6:2a:14:0b:
6d:03:4a:42:18:f3:d9:b0:74:d1:fe:6a:5f:d7:b5:9b:6b:fd:
89:9b:99:ee:dd:32:90:ff:44:ac:a4:46:1a:da:a0:59:93:37:
3a:15:7b:8a:e6:d0:2d:b9:c1:5a:f4:91:8c:68:f7:67:04:c6:
c4:e7:e2:96:a2:5f:44:b5:b6:01:91:8b:6c:68:b4:9e:ba:fb:
9f:8b:39:14:be:47:fd:e0:ec:2c:07:8f:85:fb:13:29:a7:1e:
04:15:5f:29:b8:6e:f0:7c:6b:aa:47:ea:36:5f:c0:25:b4:2c:
64:b3:2a:55:71:22:80:dc:f9:ee:e1:13:c5:29:2f:20:2d:cc:
5c:69:83:80:16:3b:50:33:2f:ed:08:55:62:d3:3e:70:df:98:
e7:f1:6f:95:f5:4c:dd:b7:86:b3:4d:bf:c3:08:cb:08:c9:98:
6b:7f:fc:65:e5:2c:b6:27:21:9a:80:bf:ab:b3:42:0c:8d:c4:
77:5f:bd:7c:e6:47:58:dd:b8:d1:de:eb:aa:3d:5b:2e:80:64:
a9:cd:18:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKqf698v8dyCQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4
YTNlMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
ZTBiNWViZmItZDQxZS00NWIwLWI2MDMtNDYzZTU5ZWFhMmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5dau4d9+zY2CGfcMI5oronwZwUEVaCOgJKR
Gb0lapmThCO8FlgjbtDqWkyIS10yGMHvNWDpxxUfoI8YnR0BuwL+r5dGXSvp++cF
+Rx+FPfbsF8lJcRLu4Qb4DDbM43I+oGk9Mn6afpwM+CfQoi5F4Rtx+n7VXin2cY2
VnCwzsN8zYrdpZq8QTpoIJF/erwRn61/IFaHzwip2mZQjTW9ALbWMOFABYF8XzEE
Rn83h1nho7td3wnLSQqw3q1kBFz58oBPaZv0SshZ28uh2ViCyKOBiAGG1ranbSLj
CL3xuEU0Ps0j2Luc3lSFH6f4wcyEGHGCCBYESThVXlkc86+vUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChtC7l+DrOh6ovhWB6QZoiw2CN3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl
NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvM2NjODQ3YjktNDc5Ny0z
MmYyLTllOGEtNTViNGI1ZmRmYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1
NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4
OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj
NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE11pVliD08n1v3ouealVfSZjQQjAoL/3mvuAii1vlmoHm8C8h4sVCP5
HGDvfbU8wG6c9ioUC20DSkIY89mwdNH+al/XtZtr/Ymbme7dMpD/RKykRhraoFmT
NzoVe4rm0C25wVr0kYxo92cExsTn4paiX0S1tgGRi2xotJ66+5+LORS+R/3g7CwH
j4X7EymnHgQVXym4bvB8a6pH6jZfwCW0LGSzKlVxIoDc+e7hE8UpLyAtzFxpg4AW
O1AzL+0IVWLTPnDfmOfxb5X1TN23hrNNv8MIywjJmGt//GXlLLYnIZqAv6uzQgyN
xHdfvXzmR1jduNHe66o9Wy6AZKnNGKE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:06 2025 by rpki-client