Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
File: 844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa (raw, json)
Hash identifier: WU3pePK6hJgWaUjmXRuGtxqNtAsA77hczbdf1gEN8zQ=
Subject key identifier: D7:14:98:C8:04:63:84:6D:FA:BA:B6:88:77:94:19:C6:36:BB:94:98
Certificate issuer: /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Certificate serial: 010D0C9F4328584838854B6C3BD6789D00088F00
Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 10453
IP address blocks: 205.149.128.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4b:6c:3b:d6:78:9d:00:08:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=283559e2-2b4f-428e-9236-c3b69b9533c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3b:39:7c:f7:8c:ae:e0:e6:2f:3f:b0:f7:dc:
56:c4:e9:77:14:31:72:22:e8:19:c0:27:d9:55:5f:
ed:f5:4d:0a:d1:57:71:e4:e0:78:db:ff:b4:c2:b1:
87:61:97:d1:98:49:98:29:5a:ff:2e:c1:94:f8:7a:
01:f5:cd:ef:5c:d3:54:e1:d0:fc:57:1f:c4:d4:6f:
26:4b:eb:d8:75:2f:75:87:c4:4b:c8:78:0e:18:40:
04:13:32:80:8a:b6:1b:df:eb:62:c7:a9:df:87:1b:
dc:9f:4b:60:f2:07:ab:3c:df:52:ef:9a:70:27:a9:
15:1d:85:59:91:4b:3f:26:8d:02:d5:8e:0c:01:c8:
07:a9:82:bf:76:ba:4a:38:5b:16:44:57:d6:cf:68:
ac:db:2e:b2:75:14:18:fa:63:93:31:2d:ea:8a:1d:
d5:08:e2:de:71:4e:b1:25:0e:27:f4:74:20:37:be:
67:3b:b0:a2:a1:65:db:f2:28:5e:5a:50:ef:a2:99:
8e:15:d9:90:db:2b:07:b2:ff:b0:f5:ae:93:2f:15:
c7:c5:3d:ba:1b:21:2b:17:e9:f8:ad:e4:6f:90:d6:
88:08:03:7d:1f:83:02:91:57:55:b7:ad:3a:e0:33:
51:ae:ba:42:27:0a:c9:5e:6d:b0:7a:85:79:d1:a8:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:98:C8:04:63:84:6D:FA:BA:B6:88:77:94:19:C6:36:BB:94:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl
X509v3 Authority Key Identifier:
keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
sbgp-ipAddrBlock: critical
IPv4:
205.149.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ae:90:4d:88:e6:ea:16:d2:44:98:90:c9:e5:cf:3d:9c:1e:
f3:fe:9f:fc:33:c6:02:b0:fc:60:0f:18:48:00:30:89:26:61:
35:35:79:53:ee:35:26:fb:6b:46:f8:c0:b0:f0:6c:bf:64:31:
60:15:eb:83:63:68:62:36:66:be:4e:65:ed:a5:11:ea:22:6b:
17:49:92:90:d8:e3:a5:c2:78:3f:ec:03:56:ae:22:07:27:29:
a5:0b:93:6c:2c:b9:c5:b0:7b:fd:8d:14:b1:35:09:58:4c:d2:
ce:17:e5:fc:24:16:e0:ed:c1:ac:d9:62:a9:26:61:25:d1:6b:
14:7d:b8:32:45:74:bc:2f:5a:51:e2:39:c7:81:a9:33:b8:9d:
f1:ce:95:bf:a1:63:e0:78:87:60:2e:86:eb:cd:61:4e:cf:f1:
a0:e0:ba:b1:92:31:96:bd:70:c7:cd:0f:cb:37:84:1f:57:a0:
8c:d4:19:05:2c:e6:b9:9f:a0:26:ee:8d:96:a1:bf:c0:df:80:
33:e3:58:b7:49:63:c1:db:b1:e9:0f:ef:e2:a0:1a:d5:a0:7b:
84:23:ba:7f:b6:80:4b:b6:c5:6c:d3:9e:ec:61:fe:26:0a:27:
be:2c:64:a4:52:40:82:b7:51:c1:2a:1f:f0:b3:cb:74:90:6c:
b2:cd:0e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUtsO9Z4nQAIjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M0OGQ1ZmItMDU5Yi00ZmQyLTkyYTgtMzFmMTQzZjVm
NzE5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MjgzNTU5ZTItMmI0Zi00MjhlLTkyMzYtYzNiNjliOTUzM2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zs5fPeMruDmLz+w99xWxOl3FDFyIugZwCfZ
VV/t9U0K0Vdx5OB42/+0wrGHYZfRmEmYKVr/LsGU+HoB9c3vXNNU4dD8Vx/E1G8m
S+vYdS91h8RLyHgOGEAEEzKAirYb3+tix6nfhxvcn0tg8gerPN9S75pwJ6kVHYVZ
kUs/Jo0C1Y4MAcgHqYK/drpKOFsWRFfWz2is2y6ydRQY+mOTMS3qih3VCOLecU6x
JQ4n9HQgN75nO7CioWXb8iheWlDvopmOFdmQ2ysHsv+w9a6TLxXHxT26GyErF+n4
reRvkNaICAN9H4MCkVdVt6064DNRrrpCJwrJXm2weoV50ajc3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcUmMgEY4Rt+rq2iHeUGcY2u5SYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4
ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYxNDNmNWY3MTkvODQ0YTc5YWItMzI5MS0z
NTk2LWEzZmEtMGIyYjFmZGM3ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M0OGQ1ZmItMDU5Yi00ZmQyLTky
YTgtMzFmMTQzZjVmNzE5LzdjNDhkNWZiLTA1OWItNGZkMi05MmE4LTMxZjE0M2Y1
ZjcxOS5jcmwwHwYDVR0jBBgwFoAUsNZ6EZWdK+SlsteNAwZ2bkyD94IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYx
NDNmNWY3MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzZWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyukE2I5uoW0kSYkMnlzz2cHvP+n/wzxgKw/GAPGEgAMIkmYTU1eVPu
NSb7a0b4wLDwbL9kMWAV64NjaGI2Zr5OZe2lEeoiaxdJkpDY46XCeD/sA1auIgcn
KaULk2wsucWwe/2NFLE1CVhM0s4X5fwkFuDtwazZYqkmYSXRaxR9uDJFdLwvWlHi
OceBqTO4nfHOlb+hY+B4h2AuhuvNYU7P8aDgurGSMZa9cMfND8s3hB9XoIzUGQUs
5rmfoCbujZahv8DfgDPjWLdJY8HbsekP7+KgGtWge4Qjun+2gEu2xWzTnuxh/iYK
J74sZKRSQIK3UcEqH/Czy3SQbLLNDvo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:44 2025 by rpki-client