Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/4a509c65-019a-32dc-98ff-83abb09bc6a2.roa
File: 4a509c65-019a-32dc-98ff-83abb09bc6a2.roa (raw, json)
Hash identifier: l1T9D0PnmrzWxf6HpO8vSFALixAaJNQ6jRuYtHUdG9g=
Subject key identifier: 0A:97:4C:D5:1F:00:90:CF:C8:7B:CA:AE:A2:15:1A:BF:58:DF:03:16
Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial: 010D0C9F4328584858A059E9C7EB7AE1F3E89480
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/4a509c65-019a-32dc-98ff-83abb09bc6a2.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 149.112.4.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:59:e9:c7:eb:7a:e1:f3:e8:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=1dd16bc2-44ef-488f-891a-e58225e3a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:e7:72:cf:0e:85:d0:38:49:63:9c:ac:f6:
af:e9:32:a1:1b:c5:c3:02:b9:4e:60:19:84:ea:85:
0d:51:67:39:f4:4b:0d:9e:2b:6d:02:0c:d4:88:8d:
d1:16:43:1f:75:6e:c6:9e:f8:c1:f3:7c:6d:41:47:
d8:d9:27:a3:11:e9:1b:30:5e:43:c3:90:4e:60:e1:
5b:10:aa:3c:6c:ce:5f:e9:f3:85:bd:e5:fb:dd:9e:
63:9c:21:29:cc:38:44:d0:33:ed:7d:b2:77:86:40:
a6:4f:89:72:0a:4e:8a:b3:c9:ba:11:19:c9:fe:54:
bd:a4:6e:54:5f:83:ee:ea:cd:8f:04:85:78:e5:44:
e7:a5:f6:19:5a:d1:ec:e2:45:cf:f8:14:12:d5:8a:
66:50:7d:4d:f1:62:4a:a8:f3:e6:b6:29:78:40:3f:
63:10:ca:d7:83:03:3c:4e:3a:1b:f1:79:0c:ba:4b:
ba:0b:dd:0c:28:5c:d9:fe:90:0f:0e:ef:c7:b8:2d:
60:78:20:83:a1:b4:d7:60:05:35:49:5e:f4:e3:94:
10:e4:92:46:23:b4:50:d9:30:36:ad:c9:10:84:12:
a1:96:46:83:3d:4e:82:28:6d:99:2a:cc:61:99:ff:
a8:8e:f3:29:42:d6:9f:cc:57:8f:46:e5:19:bb:80:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:4C:D5:1F:00:90:CF:C8:7B:CA:AE:A2:15:1A:BF:58:DF:03:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/4a509c65-019a-32dc-98ff-83abb09bc6a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
X509v3 Authority Key Identifier:
keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c0:4a:24:d6:64:d7:a7:b0:9c:97:00:26:9f:6a:59:02:f5:
b0:c1:50:40:52:34:2c:c0:75:db:3a:be:bb:cd:16:7f:1f:85:
27:f1:76:4c:5c:85:ef:eb:23:0c:2e:cc:21:98:fa:0b:e9:95:
60:48:27:c0:58:0c:23:66:14:4f:61:74:50:c1:a0:cb:83:c1:
e7:05:63:e2:1b:f6:64:68:5d:65:e4:6a:85:b3:40:c3:88:51:
f0:e1:f7:6e:c0:f8:2a:79:34:03:97:36:3f:7f:ea:ab:05:21:
66:2e:8c:00:98:35:d4:51:64:c5:8b:de:86:6b:98:94:39:a0:
70:0f:0a:ad:37:87:6a:a2:f3:b2:22:39:5c:28:73:8a:cc:15:
92:2f:5e:eb:3f:67:b1:4e:0d:cc:44:f0:85:30:b4:a3:a0:04:
7c:96:fe:d1:d6:68:0d:78:ea:40:13:95:e7:2d:9f:f5:4a:26:
ec:54:97:ab:7b:ee:1d:9b:29:b9:b6:90:88:68:dd:aa:1f:34:
94:9b:b9:80:2d:e5:93:75:8b:99:76:2a:17:81:34:f5:f3:8a:
14:e0:a2:cd:36:93:7c:3f:ad:65:c9:74:69:af:f0:dd:97:e6:
ee:c5:d0:ec:4d:ea:53:4c:9f:ab:3e:2b:e0:ff:45:38:9c:4a:
d8:d4:a9:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFnpx+t64fPolIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4
YzhmMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MWRkMTZiYzItNDRlZi00ODhmLTg5MWEtZTU4MjI1ZTNhNzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT3ncs8OhdA4SWOcrPav6TKhG8XDArlOYBmE
6oUNUWc59EsNnittAgzUiI3RFkMfdW7GnvjB83xtQUfY2SejEekbMF5Dw5BOYOFb
EKo8bM5f6fOFveX73Z5jnCEpzDhE0DPtfbJ3hkCmT4lyCk6Ks8m6ERnJ/lS9pG5U
X4Pu6s2PBIV45UTnpfYZWtHs4kXP+BQS1YpmUH1N8WJKqPPmtil4QD9jEMrXgwM8
Tjob8XkMuku6C90MKFzZ/pAPDu/HuC1geCCDobTXYAU1SV7045QQ5JJGI7RQ2TA2
rckQhBKhlkaDPU6CKG2ZKsxhmf+ojvMpQtafzFePRuUZu4D1XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqXTNUfAJDPyHvKrqIVGr9Y3wMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx
MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvNGE1MDljNjUtMDE5YS0z
MmRjLTk4ZmYtODNhYmIwOWJjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2
YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk
OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx
ZDJjZDhjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTASiTWZNensJyXACafalkC9bDBUEBSNCzAdds6vrvNFn8fhSfxdkxc
he/rIwwuzCGY+gvplWBIJ8BYDCNmFE9hdFDBoMuDwecFY+Ib9mRoXWXkaoWzQMOI
UfDh927A+Cp5NAOXNj9/6qsFIWYujACYNdRRZMWL3oZrmJQ5oHAPCq03h2qi87Ii
OVwoc4rMFZIvXus/Z7FODcxE8IUwtKOgBHyW/tHWaA146kATlectn/VKJuxUl6t7
7h2bKbm2kIho3aofNJSbuYAt5ZN1i5l2KheBNPXzihTgos02k3w/rWXJdGmv8N2X
5u7F0OxN6lNMn6s+K+D/RTicStjUqVg=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:08 2025 by rpki-client