Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa
File: c6786d24-a67a-351b-a186-9ef602225e4d.roa (raw, json)
Hash identifier: fEwzURM9YLJzR69SVhkMRfThWU+7fQKptcahLRBGLHc=
Subject key identifier: 44:FE:69:8A:86:29:33:C1:20:C8:A8:9B:4F:59:1E:D2:C8:DF:04:2A
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858488DAB4797CA0D355B39D76F00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 33442
IP address blocks: 149.23.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:47:97:ca:0d:35:5b:39:d7:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=de24554c-ccc7-4dfe-a85e-650622fc5f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:98:13:26:75:3f:7f:3e:cb:f8:18:ac:3b:
fe:51:7f:34:38:86:ea:63:9e:84:af:12:22:c0:b2:
c4:c7:e1:bb:7e:79:6b:17:04:06:22:54:f5:b5:43:
24:65:65:cf:56:cd:65:34:27:8f:15:79:c1:c7:80:
b0:1a:6a:7c:af:0a:bd:e4:d0:ad:00:68:16:9a:99:
f4:29:66:b7:1f:90:f8:05:a9:ab:d2:2b:f6:d8:69:
b4:5b:8e:00:d7:2e:ae:83:d4:ee:b2:69:a0:09:a8:
e3:0d:df:fb:e5:95:eb:b6:3f:d6:33:50:49:78:44:
01:27:35:aa:d9:c4:c1:3c:5e:55:e8:89:18:5e:73:
7d:65:b5:d0:fa:84:38:d4:14:41:6b:aa:e1:2b:d2:
e6:ab:66:8d:9b:53:ad:91:55:89:6f:44:a5:ed:b5:
25:2b:5a:58:32:d8:25:01:d8:d8:cc:46:76:e3:7c:
56:df:55:d0:53:f2:84:5c:45:09:0e:37:c7:35:0f:
c2:dc:58:75:28:52:d4:6e:d3:0d:ad:94:35:86:3f:
51:11:37:c1:ee:ab:0a:f9:99:2d:2a:55:8b:ba:4e:
bb:c0:f4:f7:fc:4a:9b:87:1c:02:d9:88:f7:1a:0e:
a3:d2:a2:8d:25:c9:aa:38:cd:57:dd:45:02:6c:0d:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:69:8A:86:29:33:C1:20:C8:A8:9B:4F:59:1E:D2:C8:DF:04:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ab:8e:36:44:97:7a:1b:be:62:33:7a:49:b1:09:2d:df:d8:
18:74:23:02:00:20:50:04:8b:6e:b1:b3:96:da:91:4a:95:fa:
7c:76:15:e9:c1:8f:02:8e:12:1a:c5:46:d0:5b:2f:5e:74:5a:
27:ee:d7:ae:b9:8b:a3:b0:b2:29:a5:1b:03:f1:29:22:fa:58:
fb:c6:90:2e:8e:0a:ca:29:b9:e9:75:94:38:ba:44:55:42:d7:
c2:84:58:8b:e0:65:7d:7e:12:c5:f9:fb:74:98:3f:9d:34:4b:
72:0f:af:ae:f7:96:9d:43:27:5a:a5:96:34:a8:6f:89:bd:ae:
59:ad:47:22:f0:48:91:9d:71:4f:5a:ea:0f:6f:53:17:80:79:
dd:92:97:7b:22:56:a0:62:74:b1:d6:d6:c3:cb:cc:35:69:b7:
d0:37:68:0e:f3:dc:43:50:9d:66:ec:fe:8b:53:c2:ff:74:e5:
55:3b:82:2b:10:9e:c2:05:fc:25:6c:4d:b9:88:17:a0:ff:03:
32:d2:4f:e9:eb:cf:33:77:58:94:2c:7b:e4:ec:72:47:cc:2b:
65:df:f6:b8:66:6f:9d:87:26:52:b6:4f:75:58:1e:4f:5a:b7:
b5:38:0d:1e:ad:99:7f:6d:8e:5a:3e:56:3d:95:5f:74:a7:98:
e5:87:0d:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0eXyg01WznXbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZGUyNDU1NGMtY2NjNy00ZGZlLWE4NWUtNjUwNjIyZmM1ZjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmWYEyZ1P38+y/gYrDv+UX80OIbqY56ErxIi
wLLEx+G7fnlrFwQGIlT1tUMkZWXPVs1lNCePFXnBx4CwGmp8rwq95NCtAGgWmpn0
KWa3H5D4Bamr0iv22Gm0W44A1y6ug9TusmmgCajjDd/75ZXrtj/WM1BJeEQBJzWq
2cTBPF5V6IkYXnN9ZbXQ+oQ41BRBa6rhK9Lmq2aNm1OtkVWJb0Sl7bUlK1pYMtgl
AdjYzEZ243xW31XQU/KEXEUJDjfHNQ/C3Fh1KFLUbtMNrZQ1hj9RETfB7qsK+Zkt
KlWLuk67wPT3/EqbhxwC2Yj3Gg6j0qKNJcmqOM1X3UUCbA2yzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFET+aYqGKTPBIMiom09ZHtLI3wQqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYzY3ODZkMjQtYTY3YS0z
NTFiLWExODYtOWVmNjAyMjI1ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyrjjZEl3obvmIzekmxCS3f2Bh0IwIAIFAEi26xs5bakUqV+nx2FenB
jwKOEhrFRtBbL150Wifu1665i6OwsimlGwPxKSL6WPvGkC6OCsopuel1lDi6RFVC
18KEWIvgZX1+EsX5+3SYP500S3IPr673lp1DJ1qlljSob4m9rlmtRyLwSJGdcU9a
6g9vUxeAed2Sl3siVqBidLHW1sPLzDVpt9A3aA7z3ENQnWbs/otTwv905VU7gisQ
nsIF/CVsTbmIF6D/AzLST+nrzzN3WJQse+TsckfMK2Xf9rhmb52HJlK2T3VYHk9a
t7U4DR6tmX9tjlo+Vj2VX3SnmOWHDUs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:52 2025 by rpki-client