Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
File: 76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json)
Hash identifier: 2c+ATPjfsYE+rJpbte7LXfNdL4fbj2XF0+iX9rocjFQ=
Subject key identifier: 30:3B:07:9E:B8:3C:5B:36:00:6C:26:20:08:09:34:72:F6:F7:48:01
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB3DAA6D95749CE6BB1D80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3d:aa:6d:95:74:9c:e6:bb:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=ca973a5b-8370-4756-bb7f-1562b6fa1259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:e4:9a:0f:d7:de:72:a7:37:c1:3c:cb:30:
e1:52:2f:a9:e4:a6:a8:e7:c2:4b:43:de:26:45:35:
aa:3b:f3:53:28:8f:00:62:3e:8a:3e:49:46:83:16:
62:82:70:aa:47:53:62:47:0d:9d:3a:41:08:ed:a0:
1d:22:b8:49:d2:e4:00:2d:73:62:a5:bb:e9:1b:90:
99:71:74:03:41:18:8a:6e:24:9a:fe:e7:7c:a0:31:
30:de:cb:62:9e:d1:fb:b7:e2:c1:14:dc:0c:9f:4b:
9d:9f:dc:fc:1c:31:74:30:cd:12:a4:cf:31:94:4c:
46:ac:56:79:b7:0c:98:45:37:c8:0d:e9:30:67:ac:
8c:2a:5b:e5:c1:9d:26:a2:9b:db:a3:9c:82:58:17:
08:98:c6:d8:7e:40:d2:24:e7:45:97:9a:91:d7:fc:
61:cf:9c:3a:8a:37:cc:54:f4:13:ff:3f:11:18:71:
6c:f7:f8:e2:37:0d:b3:7b:94:9c:c8:16:db:a7:ff:
6d:1e:44:2e:96:da:a4:b6:15:35:db:f7:2a:ca:ca:
7c:3d:72:37:e3:3b:c6:32:ae:20:b3:ea:56:ec:c3:
7f:69:14:ec:a8:02:dc:be:34:0d:3b:c3:08:b7:d5:
8c:f4:ff:7b:49:8a:18:97:ce:b8:17:b5:94:79:98:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:07:9E:B8:3C:5B:36:00:6C:26:20:08:09:34:72:F6:F7:48:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:39:38:01:18:6d:aa:d7:51:dc:f4:44:b6:a5:6c:b2:c3:f4:
df:8a:f8:b1:d9:c8:ce:01:3d:da:e6:81:da:6d:c5:47:5f:9b:
73:40:7f:2c:dc:df:b2:db:59:ba:a8:25:48:35:fa:84:c7:1f:
fa:47:49:c4:b7:c9:f8:f4:bb:b0:40:07:af:ac:c7:4a:fa:d7:
d3:34:05:2e:f4:a6:84:48:b4:bd:ed:50:95:eb:dc:04:22:c6:
7b:04:08:f5:11:32:e7:32:6b:98:f2:22:95:0b:6e:f8:7f:0f:
74:e3:ae:c4:c8:eb:33:b5:83:cc:7a:c6:98:f0:6d:7f:30:d1:
37:cc:f1:73:eb:f2:c2:53:a3:f4:0f:34:c8:9c:60:9f:4d:65:
fc:f5:48:d5:65:b1:20:c7:1f:5b:91:90:d4:e1:0a:ce:32:e1:
3a:58:e4:32:2d:87:22:26:9c:69:a2:e9:6d:a7:83:73:14:23:
08:f2:68:f0:b6:44:32:b2:bd:ad:a0:5e:84:90:78:f8:13:f2:
d4:77:6a:82:1c:7c:a8:1e:53:e5:bf:5c:6e:57:85:f0:3c:43:
d4:5d:88:f6:ba:8f:ad:81:19:ae:50:02:b6:87:0b:23:03:34:
da:fc:9f:4d:67:d5:7f:32:09:71:a3:b0:42:82:78:29:31:3d:
d8:ef:e9:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNqz2qbZV0nOa7HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
Y2E5NzNhNWItODM3MC00NzU2LWJiN2YtMTU2MmI2ZmExMjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzjkmg/X3nKnN8E8yzDhUi+p5Kao58JLQ94m
RTWqO/NTKI8AYj6KPklGgxZignCqR1NiRw2dOkEI7aAdIrhJ0uQALXNipbvpG5CZ
cXQDQRiKbiSa/ud8oDEw3stintH7t+LBFNwMn0udn9z8HDF0MM0SpM8xlExGrFZ5
twyYRTfIDekwZ6yMKlvlwZ0mopvbo5yCWBcImMbYfkDSJOdFl5qR1/xhz5w6ijfM
VPQT/z8RGHFs9/jiNw2ze5ScyBbbp/9tHkQultqkthU12/cqysp8PXI34zvGMq4g
s+pW7MN/aRTsqALcvjQNO8MIt9WM9P97SYoYl864F7WUeZhcKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDA7B564PFs2AGwmIAgJNHL290gBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNzZjNDRiMDAtOTg5ZS0z
NmZjLTkwMGMtYmQ3MGQyYmYxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk5OAEYbarXUdz0RLalbLLD9N+K+LHZyM4BPdrmgdptxUdfm3NAfyzc
37LbWbqoJUg1+oTHH/pHScS3yfj0u7BAB6+sx0r619M0BS70poRItL3tUJXr3AQi
xnsECPURMucya5jyIpULbvh/D3TjrsTI6zO1g8x6xpjwbX8w0TfM8XPr8sJTo/QP
NMicYJ9NZfz1SNVlsSDHH1uRkNThCs4y4TpY5DIthyImnGmi6W2ng3MUIwjyaPC2
RDKyva2gXoSQePgT8tR3aoIcfKgeU+W/XG5XhfA8Q9RdiPa6j62BGa5QAraHCyMD
NNr8n01n1X8yCXGjsEKCeCkxPdjv6TU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:34 2025 by rpki-client