Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa
File: b8400ae4-c32e-32eb-863d-6abffbace522.roa (raw, json)
Hash identifier: tOk9hVvluldoe2RObT0hNY65X3YiO8ci25AZk+k4S/8=
Subject key identifier: 77:04:60:45:4E:FD:E0:D6:07:C2:77:73:FC:01:07:80:F2:B2:D4:05
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848100A735D4980876389067A00
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 15404
IP address blocks: 148.188.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:73:5d:49:80:87:63:89:06:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f9fdab71-6307-4a52-81b3-a4b00f02af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:33:48:40:3b:b5:7b:53:13:00:44:f9:80:
84:be:a1:9f:47:98:be:58:2a:56:ed:9a:74:fe:b9:
40:b9:e8:b6:19:65:8d:9d:7a:51:71:78:fd:68:23:
5b:21:9b:3d:15:21:68:25:42:48:4a:3a:69:e1:38:
f7:ca:35:ff:36:14:87:a3:9c:fb:73:7a:d2:8c:17:
7f:5e:bd:0b:2b:1f:76:d6:f6:05:a2:89:75:26:34:
5b:f5:a4:0b:42:41:72:7d:49:7b:f5:23:1c:88:a5:
c1:cb:aa:0f:00:cd:11:bc:11:05:f4:97:58:6c:9e:
de:1f:a7:d1:96:93:9e:5f:cf:86:e0:1f:6d:e7:51:
6e:5e:09:f4:72:e6:49:c5:0c:c3:9d:41:14:79:d6:
aa:85:a8:fa:83:b2:0c:72:32:b5:c5:9f:42:c8:c1:
03:0f:a7:66:90:e3:58:57:30:ae:89:09:db:45:e5:
cf:c3:2f:5a:2e:3a:3d:aa:f1:fb:a6:84:6e:73:61:
28:a2:7d:19:2c:07:81:5b:fc:86:85:e8:c2:b8:f9:
54:ad:3d:7a:74:56:05:f2:fb:23:49:ba:bf:cf:db:
7f:d5:04:ad:86:27:d4:23:1c:37:a3:8f:b2:3b:e9:
82:09:95:0e:b6:52:0c:8c:26:2d:92:69:0b:2d:68:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:60:45:4E:FD:E0:D6:07:C2:77:73:FC:01:07:80:F2:B2:D4:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:14:90:8c:e6:3c:33:88:6b:54:26:7e:2d:50:fa:5d:12:b4:
ed:fe:a5:2d:45:4c:69:2f:97:f7:fe:10:ee:98:60:e3:bc:a4:
56:e2:d7:48:62:f5:ad:3e:87:49:f2:39:18:05:22:e8:4f:63:
8d:81:0a:81:5b:55:ba:8b:94:ed:3e:64:b1:bc:dc:54:24:95:
20:8d:64:9e:bb:34:71:f6:eb:22:c4:5e:bd:44:a0:80:14:ae:
ef:da:3e:42:8f:e2:6a:29:0c:3a:06:1c:43:43:67:b3:af:41:
af:43:58:bb:6d:f5:38:52:19:80:7b:a3:e2:3f:df:6b:46:32:
a9:45:c2:cf:7b:82:e0:f3:8a:6a:f6:05:bf:ef:0c:50:bf:16:
10:b1:97:61:95:3e:46:1d:31:41:42:50:9d:19:5c:b1:de:6a:
7b:2e:a6:fa:e1:a5:72:71:cf:a2:e1:17:e3:16:22:0d:04:e5:
03:d5:31:9c:24:36:68:c5:5e:16:a5:63:bd:05:65:60:83:38:
59:c7:fe:28:67:cd:40:2b:32:31:40:d5:50:d2:78:7d:e5:5c:
b8:85:b3:a5:c7:a0:4b:16:93:09:d6:b1:1d:ba:37:29:75:df:
45:ad:00:2a:13:22:93:4a:b3:98:1e:5b:42:ab:a7:93:e2:a6:
c6:79:53:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCnNdSYCHY4kGegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw
OTQ4MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
ZjlmZGFiNzEtNjMwNy00YTUyLTgxYjMtYTRiMDBmMDJhZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytUzSEA7tXtTEwBE+YCEvqGfR5i+WCpW7Zp0
/rlAuei2GWWNnXpRcXj9aCNbIZs9FSFoJUJISjpp4Tj3yjX/NhSHo5z7c3rSjBd/
Xr0LKx921vYFool1JjRb9aQLQkFyfUl79SMciKXBy6oPAM0RvBEF9JdYbJ7eH6fR
lpOeX8+G4B9t51FuXgn0cuZJxQzDnUEUedaqhaj6g7IMcjK1xZ9CyMEDD6dmkONY
VzCuiQnbReXPwy9aLjo9qvH7poRuc2Eoon0ZLAeBW/yGhejCuPlUrT16dFYF8vsj
Sbq/z9t/1QSthifUIxw3o4+yO+mCCZUOtlIMjCYtkmkLLWiSvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcEYEVO/eDWB8J3c/wBB4DystQFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl
M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvYjg0MDBhZTQtYzMyZS0z
MmViLTg2M2QtNmFiZmZiYWNlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1
ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl
MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2
MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoUkIzmPDOIa1Qmfi1Q+l0StO3+pS1FTGkvl/f+EO6YYOO8pFbi10hi
9a0+h0nyORgFIuhPY42BCoFbVbqLlO0+ZLG83FQklSCNZJ67NHH26yLEXr1EoIAU
ru/aPkKP4mopDDoGHENDZ7OvQa9DWLtt9ThSGYB7o+I/32tGMqlFws97guDzimr2
Bb/vDFC/FhCxl2GVPkYdMUFCUJ0ZXLHeansupvrhpXJxz6LhF+MWIg0E5QPVMZwk
NmjFXhalY70FZWCDOFnH/ihnzUArMjFA1VDSeH3lXLiFs6XHoEsWkwnWsR26Nyl1
30WtACoTIpNKs5geW0Krp5PipsZ5U/Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:54 2025 by rpki-client