Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
File: 725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa (raw, json)
Hash identifier: ekP2RPEUX2K4u09VQ1Ex9tRgPD0U2WViUo4VHY6ey9Q=
Subject key identifier: 0B:7D:4E:41:B1:2B:F4:58:FD:F0:72:C1:F2:0B:CF:D8:F7:86:CB:F8
Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial: 010D0C9F432858487325A80A98D7C26546580E60
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 46165
IP address blocks: 148.59.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a8:0a:98:d7:c2:65:46:58:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=fdf7f249-276f-42b6-9b96-62aa3ca53a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:d5:a1:69:95:11:02:b5:51:08:36:3f:60:
c1:94:7f:1a:4e:b5:0c:8e:b9:32:4b:42:f0:d9:f1:
bf:de:8e:b9:25:0a:05:e1:29:66:37:23:94:6f:6a:
dc:ec:5b:78:ee:02:44:14:97:28:1f:50:2d:c3:a9:
2b:6a:18:2c:4f:b1:81:39:da:bb:8a:44:90:2e:a5:
37:10:7f:73:40:36:46:b3:09:76:7d:fa:dd:25:e3:
2a:e2:15:62:91:38:85:bc:76:c6:56:40:fe:f3:51:
5c:64:01:e9:7c:1e:ee:1a:2d:e8:c7:84:3d:72:ef:
8c:cb:b4:33:f9:3b:46:1c:20:1a:96:69:6d:1e:a3:
fc:c0:1e:12:20:5f:e0:60:c7:98:ca:d3:64:25:d8:
26:cb:64:e5:4c:50:b1:fc:1c:1f:61:a9:5a:7f:5d:
a9:ba:13:58:7a:ce:09:22:a0:ef:38:69:67:f2:01:
ce:21:9f:6c:d6:62:22:58:a3:1e:e6:e5:45:81:0c:
ad:49:a8:bb:a3:48:ca:30:af:7e:1d:b5:85:3c:3b:
89:70:8d:54:11:e8:ed:fc:d3:71:3d:8e:10:3d:b3:
a4:0e:a4:f0:74:92:51:94:ab:cd:c3:30:5e:15:96:
68:a5:b4:66:3a:11:f5:a6:48:47:b2:06:4f:75:59:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:4E:41:B1:2B:F4:58:FD:F0:72:C1:F2:0B:CF:D8:F7:86:CB:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
X509v3 Authority Key Identifier:
keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:4b:48:ee:c8:c9:ab:23:49:0d:c0:1d:94:e9:cf:f1:b0:73:
22:e4:05:ca:c2:4b:4d:6e:dd:c8:1b:0c:75:0c:12:50:c5:15:
bd:0e:4b:b1:c3:a3:6f:0c:84:e8:55:7f:a7:fd:fd:79:cf:c8:
f8:d9:4d:40:a7:93:f1:75:c0:18:eb:4a:a1:70:75:3a:65:ea:
d4:a2:7c:52:3a:8a:99:7d:d7:9b:f4:a8:85:cd:7a:ce:2e:63:
4d:ef:15:96:2d:86:f7:c4:5d:0d:70:37:b7:2b:2b:74:73:b0:
b2:78:fe:f4:ed:8d:88:17:e8:10:57:ef:3a:f1:6f:c8:ce:79:
43:9b:1e:d0:a0:63:30:dc:e5:39:af:33:62:a2:67:cf:69:98:
d7:9d:99:9f:fd:b3:eb:9c:9a:05:f6:d6:a2:a4:bb:9d:96:5d:
5c:d7:2c:76:fb:3b:48:71:1b:b3:9e:ac:1f:53:55:17:d7:b6:
7b:71:7d:87:ab:37:26:6f:c5:0c:98:2a:a8:eb:e2:27:16:c9:
9e:18:01:a8:de:0d:8e:b6:cf:e1:5b:13:eb:b1:4e:6e:f1:51:
ad:cc:0c:65:1c:0a:c5:1d:1a:35:d2:3d:8d:2c:16:70:61:c6:
67:01:fa:55:f6:6e:ec:94:a6:c4:ce:94:4c:e0:75:de:e8:24:
46:8e:4d:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJagKmNfCZUZYDmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
ZmRmN2YyNDktMjc2Zi00MmI2LTliOTYtNjJhYTNjYTUzYTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5fVoWmVEQK1UQg2P2DBlH8aTrUMjrkyS0Lw
2fG/3o65JQoF4SlmNyOUb2rc7Ft47gJEFJcoH1Atw6krahgsT7GBOdq7ikSQLqU3
EH9zQDZGswl2ffrdJeMq4hVikTiFvHbGVkD+81FcZAHpfB7uGi3ox4Q9cu+My7Qz
+TtGHCAalmltHqP8wB4SIF/gYMeYytNkJdgmy2TlTFCx/BwfYalaf12puhNYes4J
IqDvOGln8gHOIZ9s1mIiWKMe5uVFgQytSai7o0jKMK9+HbWFPDuJcI1UEejt/NNx
PY4QPbOkDqTwdJJRlKvNwzBeFZZopbRmOhH1pkhHsgZPdVlV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAt9TkGxK/RY/fBywfILz9j3hsv4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvNzI1ZTQ1ZmUtZjAwYi0z
OWIyLWE5ZGYtMmEzNGU5YjBhMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpLSO7IyasjSQ3AHZTpz/GwcyLkBcrCS01u3cgbDHUMElDFFb0OS7HD
o28MhOhVf6f9/XnPyPjZTUCnk/F1wBjrSqFwdTpl6tSifFI6ipl915v0qIXNes4u
Y03vFZYthvfEXQ1wN7crK3RzsLJ4/vTtjYgX6BBX7zrxb8jOeUObHtCgYzDc5Tmv
M2KiZ89pmNedmZ/9s+ucmgX21qKku52WXVzXLHb7O0hxG7OerB9TVRfXtntxfYer
NyZvxQyYKqjr4icWyZ4YAajeDY62z+FbE+uxTm7xUa3MDGUcCsUdGjXSPY0sFnBh
xmcB+lX2buyUpsTOlEzgdd7oJEaOTYE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:01 2025 by rpki-client