Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa
File: 0cb111af-a543-3309-ae6c-921150fde1ac.roa (raw, json)
Hash identifier: TWYaIfdUmXq7F5r7QyoVPZzcLVxQb3pn/DTz5+zQ78k=
Subject key identifier: ED:82:E5:E2:56:CA:7F:C8:5D:FD:93:B5:0B:1C:77:5D:AE:A9:45:BB
Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial: 010D0C9F432858489A3B4D57484605137AB03540
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 14618
IP address blocks: 216.147.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4d:57:48:46:05:13:7a:b0:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=b2a00f0f-fc13-477b-8fd1-57ff210709f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:77:0d:30:02:6d:68:71:bd:a5:41:85:7f:
5d:bc:b0:8e:3a:7d:92:f2:c8:5c:c3:9f:c2:09:0f:
11:32:1a:72:47:4d:f4:20:f5:a7:b9:3f:73:53:6f:
ea:da:fe:ba:80:a0:5e:50:ee:38:cd:6a:9f:6a:f2:
ac:46:7e:ca:68:6e:0b:5e:f6:a1:e3:a1:6f:4c:9a:
1d:97:ea:76:56:d2:e4:39:46:84:5b:fb:47:af:73:
57:e8:0f:35:5d:4b:58:0e:b8:73:f4:c5:97:88:f6:
fd:1f:94:61:a8:3e:27:41:ce:be:9a:ae:09:52:31:
5f:88:fa:22:cb:8e:4f:38:32:a5:fa:ff:23:b1:1d:
87:3e:5a:db:d6:3e:04:55:93:2d:ae:ea:7c:bf:e5:
4d:00:f9:dd:52:44:e7:88:e2:14:76:04:87:e0:3b:
c4:d8:b4:51:6f:99:2b:3e:a7:46:6d:cf:cd:4e:d8:
d3:fd:d9:03:9b:db:9b:6c:9d:76:f0:2d:63:1f:1d:
eb:cc:36:c8:71:e5:26:2f:2c:00:90:50:14:b7:15:
30:12:e4:4c:9b:8c:e3:ca:59:b0:3a:31:37:8d:6b:
c9:be:a1:9d:57:af:97:07:0f:f9:82:45:bc:14:1c:
7f:9b:ca:32:48:eb:1e:7f:29:8d:a9:bd:2f:3f:f0:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:E5:E2:56:CA:7F:C8:5D:FD:93:B5:0B:1C:77:5D:AE:A9:45:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl
X509v3 Authority Key Identifier:
keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.147.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:75:7c:60:f8:94:b6:24:a4:1f:0a:06:4c:95:f3:dc:40:22:
dc:7f:25:16:e7:d0:76:9b:38:04:fc:e8:e7:2d:93:1f:25:9c:
fa:94:57:c3:f5:24:b0:70:95:04:bf:34:23:6e:fb:a9:5e:cf:
e5:9f:ca:c0:57:31:36:5b:b1:40:40:c9:1c:70:31:36:1c:db:
78:0e:2d:e9:2d:3f:78:10:bb:7d:69:e2:52:68:0c:29:70:29:
6e:68:b5:0e:82:1e:55:96:27:96:f3:bc:a7:45:1c:47:24:d6:
55:30:49:fd:a4:d7:da:b3:f2:59:e0:ba:af:cb:7f:d6:0a:0b:
28:6f:ff:35:69:58:d6:f0:44:68:1a:32:e1:b7:3d:7a:a0:d7:
21:7a:16:84:ee:11:a1:4d:78:65:2f:40:43:c9:57:78:a4:6f:
ff:75:a2:01:38:6f:08:8d:fa:c7:7c:4b:e2:49:da:a0:98:33:
a3:24:61:fb:f5:92:89:da:b8:cb:af:96:c0:e4:78:ad:68:33:
47:67:b4:75:3a:70:20:35:a1:df:71:f0:de:2d:63:40:fa:9b:
a4:79:54:f4:30:57:45:c4:35:6a:5f:0d:e2:f8:88:1e:18:ff:
6e:ac:ba:85:d0:d9:fd:60:06:03:4b:5d:61:d7:ae:3c:1c:93:
db:e2:28:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO01XSEYFE3qwNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk
ZWJiMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YjJhMDBmMGYtZmMxMy00NzdiLThmZDEtNTdmZjIxMDcwOWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl53DTACbWhxvaVBhX9dvLCOOn2S8shcw5/C
CQ8RMhpyR030IPWnuT9zU2/q2v66gKBeUO44zWqfavKsRn7KaG4LXvah46FvTJod
l+p2VtLkOUaEW/tHr3NX6A81XUtYDrhz9MWXiPb9H5RhqD4nQc6+mq4JUjFfiPoi
y45PODKl+v8jsR2HPlrb1j4EVZMtrup8v+VNAPndUkTniOIUdgSH4DvE2LRRb5kr
PqdGbc/NTtjT/dkDm9ubbJ128C1jHx3rzDbIceUmLywAkFAUtxUwEuRMm4zjylmw
OjE3jWvJvqGdV6+XBw/5gkW8FBx/m8oySOsefymNqb0vP/BZbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2C5eJWyn/IXf2TtQscd12uqUW7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm
MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMGNiMTExYWYtYTU0My0z
MzA5LWFlNmMtOTIxMTUwZmRlMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj
NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3
ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl
NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACV1fGD4lLYkpB8KBkyV89xAItx/JRbn0HabOAT86Octkx8lnPqUV8P1
JLBwlQS/NCNu+6lez+WfysBXMTZbsUBAyRxwMTYc23gOLektP3gQu31p4lJoDClw
KW5otQ6CHlWWJ5bzvKdFHEck1lUwSf2k19qz8lnguq/Lf9YKCyhv/zVpWNbwRGga
MuG3PXqg1yF6FoTuEaFNeGUvQEPJV3ikb/91ogE4bwiN+sd8S+JJ2qCYM6MkYfv1
konauMuvlsDkeK1oM0dntHU6cCA1od9x8N4tY0D6m6R5VPQwV0XENWpfDeL4iB4Y
/26suoXQ2f1gBgNLXWHXrjwck9viKIA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:16 2025 by rpki-client