Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
File: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json)
Hash identifier: f9bCxpQNZtHYqFxvBYr8ElMfQyAM4k6oFVvBQZ0un5U=
Subject key identifier: 29:85:C9:85:ED:DA:6B:6F:D0:E9:4A:EA:F9:E3:D9:80:02:4A:B5:54
Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Certificate serial: 010D0C9F43285848451583F9CF6DE88133BEE880
Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 148.59.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:83:f9:cf:6d:e8:81:33:be:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=46e458d2-cf34-4e07-bceb-de37ae8dcea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:5d:4b:53:e8:bd:c2:82:53:a5:4d:9b:04:
c0:fc:d1:c4:50:6a:e3:5e:7e:2b:ed:35:0d:96:ae:
a9:52:20:56:35:be:6f:b0:1b:a0:ba:a3:52:7f:c9:
b0:09:05:e8:8f:77:b7:f6:7b:64:0d:0d:e8:1d:2e:
96:6d:3d:2e:41:f2:c9:33:0b:20:8b:97:29:1f:0d:
9b:47:b8:e8:1a:0d:4f:c4:75:93:f1:f8:96:19:ed:
2b:9a:5c:b3:7c:b3:47:d0:14:da:82:82:9a:18:0d:
0f:d9:78:05:53:89:e2:08:d9:c9:dc:28:6c:aa:32:
87:c7:84:8a:b5:67:04:cd:1a:11:f2:44:63:53:24:
bb:0f:08:4a:95:04:c2:d7:36:07:dc:21:05:a7:3c:
90:93:7e:7f:89:78:57:ff:c7:56:35:a6:b4:c7:9d:
72:0e:3f:e9:ab:f5:0d:bb:98:fb:c1:5d:14:03:7e:
e9:e1:ce:48:57:fc:9d:e5:2c:35:a0:e8:98:3d:f7:
01:66:83:d8:ed:d3:ed:7a:39:08:3d:9a:6a:6f:b5:
73:ab:2e:8b:7b:db:cb:e0:8f:dc:d4:96:68:04:71:
73:89:7a:0e:0c:68:31:1e:ad:0e:20:66:22:01:d3:
e8:e6:e8:27:f6:03:d8:56:22:02:e7:23:ba:41:5d:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:85:C9:85:ED:DA:6B:6F:D0:E9:4A:EA:F9:E3:D9:80:02:4A:B5:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl
X509v3 Authority Key Identifier:
keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:3e:25:fe:40:7c:7d:69:d0:39:c8:c2:69:34:e1:2a:06:9a:
5a:90:ac:e7:1f:1a:99:42:fb:d5:ab:aa:84:e0:5b:2c:5d:4b:
6a:f8:64:93:4d:f9:eb:9c:b3:97:b1:b9:ef:ce:3e:3a:35:be:
84:f0:62:3b:8d:cd:1d:23:23:b3:09:5c:c9:0e:e1:e9:dd:a3:
8d:e3:99:1d:86:36:16:5f:82:e7:aa:f0:37:c7:32:32:e3:62:
e3:46:15:eb:97:2a:59:e0:af:d9:ee:b0:60:a2:bf:b2:67:ef:
b2:99:34:eb:9a:b6:54:ea:b8:17:5c:f3:df:2d:44:0f:6e:64:
d9:5a:49:6f:d6:e5:90:1a:40:e8:e9:b2:a3:90:52:e3:19:36:
87:a8:72:ee:da:f4:a4:16:b8:4e:25:7d:6a:4f:c4:80:4d:6c:
4c:21:49:7e:65:be:b0:68:32:9d:63:e3:25:fe:e7:cb:5b:7b:
07:16:e3:c4:8f:47:34:4a:a7:07:96:fc:34:29:39:00:86:36:
0e:27:ce:3b:1f:e7:df:3b:40:b9:d4:f0:0f:0e:df:53:ee:ea:
a8:5d:cd:80:ed:c7:13:67:d7:90:ca:a5:60:66:b0:79:9a:4f:
fb:f3:a0:46:25:8b:1e:d7:25:90:b9:85:eb:13:27:6a:62:7e:
be:f2:32:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYP5z23ogTO+6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4
MTI0MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
NDZlNDU4ZDItY2YzNC00ZTA3LWJjZWItZGUzN2FlOGRjZWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmopdS1PovcKCU6VNmwTA/NHEUGrjXn4r7TUN
lq6pUiBWNb5vsBuguqNSf8mwCQXoj3e39ntkDQ3oHS6WbT0uQfLJMwsgi5cpHw2b
R7joGg1PxHWT8fiWGe0rmlyzfLNH0BTagoKaGA0P2XgFU4niCNnJ3ChsqjKHx4SK
tWcEzRoR8kRjUyS7DwhKlQTC1zYH3CEFpzyQk35/iXhX/8dWNaa0x51yDj/pq/UN
u5j7wV0UA37p4c5IV/yd5Sw1oOiYPfcBZoPY7dPtejkIPZpqb7Vzqy6Le9vL4I/c
1JZoBHFziXoODGgxHq0OIGYiAdPo5ugn9gPYViIC5yO6QV1ijQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmFyYXt2mtv0OlK6vnj2YACSrVUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz
NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMmVkMDRlNjAtMWU5Ny0z
NjQ3LWIzOWEtOWE5M2JlOWUzY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1
NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw
ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl
MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8+Jf5AfH1p0DnIwmk04SoGmlqQrOcfGplC+9WrqoTgWyxdS2r4ZJNN
+eucs5exue/OPjo1voTwYjuNzR0jI7MJXMkO4endo43jmR2GNhZfgueq8DfHMjLj
YuNGFeuXKlngr9nusGCiv7Jn77KZNOuatlTquBdc898tRA9uZNlaSW/W5ZAaQOjp
sqOQUuMZNoeocu7a9KQWuE4lfWpPxIBNbEwhSX5lvrBoMp1j4yX+58tbewcW48SP
RzRKpweW/DQpOQCGNg4nzjsf5987QLnU8A8O31Pu6qhdzYDtxxNn15DKpWBmsHma
T/vzoEYlix7XJZC5hesTJ2pifr7yMn4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:15 2025 by rpki-client