Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa
File: 5ec3dafb-0c5c-33db-868e-2f679742f920.roa (raw, json)
Hash identifier: lLiicpgkGEmBoY3r//Wi1fDnWuvTAAXw20KF4S10jh0=
Subject key identifier: 92:E5:22:68:7D:67:C5:41:9E:11:0F:57:1B:DD:62:AB:FB:DF:EC:0E
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584827C53942573712FC43591200
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 14340
IP address blocks: 136.147.164.0/22 maxlen: 24
136.147.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:39:42:57:37:12:fc:43:59:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=48aa1049-546f-4974-88d3-81ac2787889e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:05:f0:3a:97:0c:74:c3:80:ce:c7:6b:42:
19:61:87:31:3b:4f:0e:4c:08:6f:e4:dd:72:c1:17:
d9:71:8e:11:a4:89:f2:73:6e:91:9a:13:08:64:57:
0e:d9:eb:15:4b:93:16:16:c8:1e:b4:21:b0:e0:6e:
f8:ff:ae:b3:f6:38:76:49:37:b0:fe:7c:8b:f7:f7:
6f:32:29:4e:c0:ea:87:99:9a:45:88:9e:ea:73:8b:
07:88:a4:d2:32:c2:34:2a:4f:82:4c:1e:c8:ce:e3:
b4:13:d7:b1:bf:66:e2:df:a4:db:47:27:7a:cb:7b:
4d:00:80:88:f6:f6:c6:bf:53:bd:b2:a9:63:31:be:
e1:f6:de:e2:6e:01:38:9a:7b:87:38:06:3b:8a:19:
77:d5:4b:78:8e:13:07:f9:e9:35:20:4a:1c:eb:df:
cc:2d:20:66:86:b8:7d:7d:ab:da:33:60:23:ca:a5:
45:f6:e0:c0:1c:86:3d:f5:91:c9:ed:f8:80:b9:a6:
c8:8c:bd:61:65:80:f2:47:a9:4c:94:a5:af:d4:26:
10:03:75:10:cf:04:6c:1f:98:60:ba:e2:15:73:e2:
64:60:9c:63:10:89:76:21:0f:47:61:29:94:a6:a7:
83:1f:08:f3:15:3d:22:b0:f0:c0:6a:8b:3b:6a:cd:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:22:68:7D:67:C5:41:9E:11:0F:57:1B:DD:62:AB:FB:DF:EC:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
136.147.164.0/22
136.147.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:be:b1:57:8e:ee:cb:41:3e:06:66:7a:96:20:63:79:ee:fc:
58:b3:0a:57:11:bf:db:d5:1f:fc:1d:d3:5a:86:f6:76:d6:15:
da:e9:fa:f2:37:5b:d8:3c:71:01:49:d5:35:33:64:c9:fe:84:
54:4d:de:20:4b:63:06:a9:24:7f:7f:f8:12:22:a1:8f:d5:5b:
5c:ed:ab:f1:a5:24:8e:d5:5b:68:68:d1:c5:c2:f3:06:ed:b4:
2c:66:49:3c:ed:74:28:92:87:a9:81:ff:e2:31:90:64:03:4c:
54:29:3a:af:e6:e5:01:04:df:46:00:88:02:a9:00:1c:29:1d:
c4:cf:94:bf:ee:7b:c6:0f:90:8d:d9:7f:47:90:ea:38:45:7a:
af:a0:cb:29:cc:0b:10:bd:d5:91:64:d5:53:26:4d:de:92:3c:
00:38:99:42:d9:88:fc:de:e4:6e:e8:e8:69:98:dc:62:7e:78:
22:31:e5:98:24:89:01:b6:bb:7f:61:6b:b6:c1:70:da:d7:2b:
4c:4b:22:22:84:7b:27:17:3a:86:52:7e:bc:74:02:9a:d8:3e:
5f:9c:00:43:0e:9c:e3:ec:e7:5b:c8:d4:94:91:9c:99:78:41:
9c:09:05:3a:93:1c:f0:8d:58:ee:d9:50:95:b9:f3:b7:25:39:
25:f9:36:99
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgnxTlCVzcS/ENZEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
NDhhYTEwNDktNTQ2Zi00OTc0LTg4ZDMtODFhYzI3ODc4ODllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+QF8DqXDHTDgM7Ha0IZYYcxO08OTAhv5N1y
wRfZcY4RpInyc26RmhMIZFcO2esVS5MWFsgetCGw4G74/66z9jh2STew/nyL9/dv
MilOwOqHmZpFiJ7qc4sHiKTSMsI0Kk+CTB7IzuO0E9exv2bi36TbRyd6y3tNAICI
9vbGv1O9sqljMb7h9t7ibgE4mnuHOAY7ihl31Ut4jhMH+ek1IEoc69/MLSBmhrh9
favaM2AjyqVF9uDAHIY99ZHJ7fiAuabIjL1hZYDyR6lMlKWv1CYQA3UQzwRsH5hg
uuIVc+JkYJxjEIl2IQ9HYSmUpqeDHwjzFT0isPDAaos7as021QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJLlImh9Z8VBnhEPVxvdYqv73+wOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWVjM2RhZmItMGM1Yy0z
M2RiLTg2OGUtMmY2Nzk3NDJmOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB
iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHy+sVeO7stBPgZmepYgY3nu/FizClcRv9vVH/wd01qG9nbW
Fdrp+vI3W9g8cQFJ1TUzZMn+hFRN3iBLYwapJH9/+BIioY/VW1ztq/GlJI7VW2ho
0cXC8wbttCxmSTztdCiSh6mB/+IxkGQDTFQpOq/m5QEE30YAiAKpABwpHcTPlL/u
e8YPkI3Zf0eQ6jhFeq+gyynMCxC91ZFk1VMmTd6SPAA4mULZiPze5G7o6GmY3GJ+
eCIx5ZgkiQG2u39ha7bBcNrXK0xLIiKEeycXOoZSfrx0AprYPl+cAEMOnOPs51vI
1JSRnJl4QZwJBTqTHPCNWO7ZUJW587clOSX5Npk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:42 2025 by rpki-client