Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa
File: 23d19562-52d9-3fab-90df-dd0af2be83d4.roa (raw, json)
Hash identifier: 28JHXRiresnZ40hacPp4HqW7iktzhpc9R1ZrA7edVqc=
Subject key identifier: 23:EA:27:0A:5A:3E:C7:5D:6F:B5:90:38:0A:92:09:6B:6B:DD:10:94
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285848A1361D36FBFB18B94AC19400
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 18434
IP address blocks: 147.249.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1d:36:fb:fb:18:b9:4a:c1:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=c3c76d90-f7cc-4294-8bfe-3828deea99e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:50:69:07:1b:91:00:78:4c:14:ea:91:32:
64:43:1f:76:1d:17:23:7e:90:bf:41:5b:4a:33:1b:
e4:8c:1d:df:61:6e:68:c4:42:4d:92:0c:88:42:71:
19:f7:15:3f:15:d4:14:a7:93:30:e0:99:62:e6:c0:
28:52:7c:42:92:25:c6:6f:d0:ab:6e:ff:a9:89:f8:
b4:53:53:23:9e:4a:c5:ef:f3:44:60:8f:4f:0b:45:
d4:86:b8:f3:00:84:3c:c1:a6:fe:26:89:bf:c1:07:
ea:f4:40:e0:f9:9d:50:6f:1d:1c:de:b6:47:9f:32:
26:0f:ae:91:74:6b:ec:71:21:a3:9e:b9:f2:89:a5:
d9:b7:77:fc:a7:7c:09:7e:cd:7d:4b:a0:f1:27:0c:
5b:ab:c9:73:fc:1c:cf:78:ef:92:4c:5f:fc:96:b6:
f4:99:65:d6:2b:56:cd:69:e3:11:6e:72:8e:b6:98:
7a:6e:5e:4f:ea:0d:bb:35:65:65:12:ee:af:82:b2:
fc:a3:5d:2e:50:6e:49:cd:b2:57:a7:8c:cd:09:54:
16:f7:c2:1a:07:61:c5:b6:e6:6c:cd:a1:b1:06:e0:
1d:e2:b9:6e:88:27:37:0f:03:3b:3a:38:7b:79:fe:
36:ca:53:ee:7f:68:7a:54:cb:b5:d8:0f:09:be:89:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:27:0A:5A:3E:C7:5D:6F:B5:90:38:0A:92:09:6B:6B:DD:10:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
147.249.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c9:2c:ea:f5:48:d7:c5:b6:97:41:0d:f1:c1:a8:42:4e:1e:
91:69:b2:d6:6d:97:da:5f:00:ca:96:96:ef:9b:87:0a:66:17:
54:6c:c1:f1:e1:4b:74:be:31:67:37:83:f3:b9:10:65:87:ff:
69:d8:f8:d4:09:92:ab:8f:b1:0c:b4:93:75:00:63:0c:c5:ae:
4d:c9:b8:94:f2:07:64:3e:ad:df:45:4e:5c:e1:40:50:44:6e:
6e:2f:13:dc:8f:30:10:76:61:27:72:e6:0c:92:cf:ed:f5:ec:
3d:9b:10:22:ff:66:61:ad:f4:2a:ce:4f:87:8a:4a:b1:a8:44:
f9:5a:38:86:46:22:a9:76:c0:d7:c7:1e:a0:7f:9e:eb:65:e4:
fc:aa:76:2c:01:c6:ee:71:7e:d4:39:f2:49:c9:b1:a9:42:53:
a5:b8:fa:1a:c5:f8:e4:a1:93:bf:ff:53:c3:c6:b8:a3:94:29:
38:cb:28:8c:c9:87:0f:c4:e2:24:07:fa:24:e1:29:9d:8a:92:
67:33:36:70:51:6c:11:38:2a:e0:2a:20:23:57:3d:ab:23:57:
c2:e6:e6:b3:4d:99:97:af:d9:64:0f:79:70:aa:93:42:1b:4f:
13:28:ca:b2:50:98:4a:4c:92:54:a3:d4:f5:39:5c:df:18:95:
2f:70:23:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh02+/sYuUrBlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
YzNjNzZkOTAtZjdjYy00Mjk0LThiZmUtMzgyOGRlZWE5OWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtORQaQcbkQB4TBTqkTJkQx92HRcjfpC/QVtK
MxvkjB3fYW5oxEJNkgyIQnEZ9xU/FdQUp5Mw4Jli5sAoUnxCkiXGb9Crbv+pifi0
U1MjnkrF7/NEYI9PC0XUhrjzAIQ8wab+Jom/wQfq9EDg+Z1Qbx0c3rZHnzImD66R
dGvscSGjnrnyiaXZt3f8p3wJfs19S6DxJwxbq8lz/BzPeO+STF/8lrb0mWXWK1bN
aeMRbnKOtph6bl5P6g27NWVlEu6vgrL8o10uUG5JzbJXp4zNCVQW98IaB2HFtuZs
zaGxBuAd4rluiCc3DwM7Ojh7ef42ylPuf2h6VMu12A8JvomX8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPqJwpaPsddb7WQOAqSCWtr3RCUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvMjNkMTk1NjItNTJkOS0z
ZmFiLTkwZGYtZGQwYWYyYmU4M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/k0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELJLOr1SNfFtpdBDfHBqEJOHpFpstZtl9pfAMqWlu+bhwpmF1RswfHh
S3S+MWc3g/O5EGWH/2nY+NQJkquPsQy0k3UAYwzFrk3JuJTyB2Q+rd9FTlzhQFBE
bm4vE9yPMBB2YSdy5gySz+317D2bECL/ZmGt9CrOT4eKSrGoRPlaOIZGIql2wNfH
HqB/nutl5PyqdiwBxu5xftQ58knJsalCU6W4+hrF+OShk7//U8PGuKOUKTjLKIzJ
hw/E4iQH+iThKZ2KkmczNnBRbBE4KuAqICNXPasjV8Lm5rNNmZev2WQPeXCqk0Ib
TxMoyrJQmEpMklSj1PU5XN8YlS9wI28=
-----END CERTIFICATE-----
Generated at Mon May 12 17:20:36 2025 by rpki-client