Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
File: f580b67a-767d-31bd-8089-26fba68e71a7.roa (raw, json)
Hash identifier: uw/W9B/40K3eLxgzAQtrSd15OLXxqQSjpYdtuDyMWeU=
Subject key identifier: 62:A2:6C:D1:75:CB:9D:EC:46:AE:BC:C0:A1:10:C7:72:DC:D2:6E:70
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285848494573D70E4B950103E343A0
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 152.38.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:73:d7:0e:4b:95:01:03:e3:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=bac33ce4-27eb-42d7-9238-a0b2bffaf091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:45:89:08:15:1e:b9:ed:4d:da:c0:e4:90:
34:e6:f4:c5:87:aa:74:30:9a:ec:f0:e2:0b:0d:c1:
97:09:ce:4b:3a:e0:f1:64:22:80:b4:e3:24:36:b0:
84:d7:3e:91:f4:0e:99:d2:5a:5d:4d:99:c6:6d:84:
34:23:a9:0c:03:e3:2f:e7:d9:56:6e:d3:50:36:c9:
86:1f:79:e0:45:76:4f:29:c9:0f:da:3e:5f:12:94:
75:fd:2a:7b:08:24:26:1f:63:57:1b:ff:47:e1:3d:
9d:4d:fa:aa:9f:fb:99:33:cc:f9:8e:a0:b2:1b:ff:
f7:86:84:5b:b5:be:96:b8:41:b6:6c:73:a9:b8:4e:
93:67:f5:7e:77:d4:e9:c1:b5:f9:b6:33:87:26:c5:
3c:71:75:65:52:32:8f:a1:34:1c:b4:29:98:4d:a4:
d1:9d:b2:2a:9c:23:14:99:59:8e:c8:d2:67:eb:ce:
ce:cc:77:60:d9:a0:fb:82:e4:b0:e8:ac:a3:5e:76:
66:4e:7e:e5:7e:1f:b0:fc:93:51:13:25:0a:dc:2e:
61:ab:d1:6a:77:cf:a4:e7:94:11:68:55:0d:4a:61:
90:95:d4:0b:50:6d:7d:b5:58:43:d0:de:38:23:29:
f1:cc:25:74:00:3e:f4:d9:96:0f:81:38:22:4c:af:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:6C:D1:75:CB:9D:EC:46:AE:BC:C0:A1:10:C7:72:DC:D2:6E:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
152.38.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:48:46:80:77:e8:84:12:a5:fa:c0:dc:d0:2b:7c:e2:29:9c:
37:d6:30:49:78:f9:36:d8:55:1f:5b:ae:0f:ad:eb:0e:2c:0a:
e9:7a:83:f2:a2:4d:d0:8e:e0:a8:5a:8e:dd:98:98:2e:69:ad:
06:1f:24:db:f9:94:e0:a7:28:3b:f0:92:ea:85:08:04:89:7b:
41:e4:a3:6f:b6:32:29:bc:22:b4:10:4f:12:f8:10:c6:a5:0e:
69:94:57:c0:bf:73:f3:b8:d4:6d:34:06:b7:06:de:70:49:c5:
40:f9:9c:56:a9:b4:9d:1d:72:01:b1:69:e9:19:57:86:0e:4c:
c0:7d:37:a6:20:fc:fa:91:9e:19:59:1d:b2:91:bc:c5:4a:23:
e6:6a:63:60:78:1c:68:f9:c8:b1:c5:55:7d:44:08:a0:33:57:
fb:cf:e2:6c:90:88:f3:42:b5:89:c2:4b:e3:1f:e2:40:94:ba:
7a:db:5a:98:7a:b3:03:76:c6:43:62:7c:bf:87:59:1f:6f:e3:
f2:ab:17:c0:a8:58:a6:64:06:c6:e8:43:db:74:ac:bb:10:d1:
79:44:03:3f:84:b3:5b:31:82:1e:52:8e:65:7f:eb:9f:20:82:
9a:6c:4c:9b:b3:32:85:f1:75:87:67:91:cf:4a:ee:b9:54:cd:
90:0d:02:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXPXDkuVAQPjQ6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2
ZjIyMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
YmFjMzNjZTQtMjdlYi00MmQ3LTkyMzgtYTBiMmJmZmFmMDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkydFiQgVHrntTdrA5JA05vTFh6p0MJrs8OIL
DcGXCc5LOuDxZCKAtOMkNrCE1z6R9A6Z0lpdTZnGbYQ0I6kMA+Mv59lWbtNQNsmG
H3ngRXZPKckP2j5fEpR1/Sp7CCQmH2NXG/9H4T2dTfqqn/uZM8z5jqCyG//3hoRb
tb6WuEG2bHOpuE6TZ/V+d9TpwbX5tjOHJsU8cXVlUjKPoTQctCmYTaTRnbIqnCMU
mVmOyNJn687OzHdg2aD7guSw6KyjXnZmTn7lfh+w/JNREyUK3C5hq9Fqd8+k55QR
aFUNSmGQldQLUG19tVhD0N44IynxzCV0AD702ZYPgTgiTK/cOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKibNF1y53sRq68wKEQx3Lc0m5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx
NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZjU4MGI2N2EtNzY3ZC0z
MWJkLTgwODktMjZmYmE2OGU3MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk
YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi
NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl
NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhIRoB36IQSpfrA3NArfOIpnDfWMEl4+TbYVR9brg+t6w4sCul6g/Ki
TdCO4Khajt2YmC5prQYfJNv5lOCnKDvwkuqFCASJe0Hko2+2Mim8IrQQTxL4EMal
DmmUV8C/c/O41G00BrcG3nBJxUD5nFaptJ0dcgGxaekZV4YOTMB9N6Yg/PqRnhlZ
HbKRvMVKI+ZqY2B4HGj5yLHFVX1ECKAzV/vP4myQiPNCtYnCS+Mf4kCUunrbWph6
swN2xkNifL+HWR9v4/KrF8CoWKZkBsboQ9t0rLsQ0XlEAz+Es1sxgh5SjmV/658g
gppsTJuzMoXxdYdnkc9K7rlUzZANAj0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:59 2025 by rpki-client