Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/dc8e7f41-3208-35c2-bf20-33105c0c8b35.roa
File: dc8e7f41-3208-35c2-bf20-33105c0c8b35.roa (raw, json)
Hash identifier: TyHHJU3GH6JbsEzA1VXKx3FgSsI3gFMBJ47gtxdX1zg=
Subject key identifier: F3:3A:8D:F1:B8:40:E3:CC:0E:13:9A:C1:FE:C5:1F:41:75:5D:69:51
Certificate issuer: /CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
Certificate serial: 010D0C9F432858482BF558AC7BAB9226BD50FC40
Authority key identifier: 86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/dc8e7f41-3208-35c2-bf20-33105c0c8b35.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 609
IP address blocks: 199.52.148.0/23 maxlen: 24
199.52.150.0/24 maxlen: 24
199.52.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:58:ac:7b:ab:92:26:bd:50:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=4736f25e-4b57-4648-8cf2-c4fc93020b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:c4:f9:d9:fb:b7:ad:a8:3a:2e:cd:63:ed:
65:30:76:90:09:a6:44:71:d8:0f:e6:e2:63:3b:0a:
47:39:80:8f:08:7a:7c:8e:ff:e5:58:5b:02:57:11:
df:5b:77:7b:3d:08:da:22:c7:27:ab:2b:cb:a9:73:
de:87:40:41:1b:1b:29:42:52:a4:07:66:b6:5f:82:
3e:e6:38:a8:e7:ac:37:c2:8e:58:a6:5c:86:04:4e:
39:94:64:41:ab:55:37:d2:0d:4e:01:16:e6:52:30:
98:79:d6:11:2f:49:ac:06:ee:83:cf:f7:1a:c2:7a:
0c:df:20:56:c4:7d:e9:33:97:13:34:a0:39:8e:ac:
27:47:29:ae:91:c4:44:fc:86:16:47:7e:1a:63:0c:
51:cd:52:22:8e:a8:78:d9:63:71:2d:bf:2f:9a:07:
47:63:a8:86:5c:d2:a9:e9:e6:b2:f6:a5:df:bb:6b:
da:10:18:2f:19:bb:af:84:47:90:c4:3d:99:1f:e6:
4d:e1:c4:e7:40:04:28:20:83:98:23:dd:2b:a6:41:
93:17:bc:f8:93:96:f2:13:6a:c7:75:4d:e9:8d:da:
8a:21:53:6d:27:a4:81:99:ee:d6:5f:a0:e7:51:bd:
ef:ed:ad:16:17:3e:0d:b1:33:8e:bd:f7:f3:23:70:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:8D:F1:B8:40:E3:CC:0E:13:9A:C1:FE:C5:1F:41:75:5D:69:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/dc8e7f41-3208-35c2-bf20-33105c0c8b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl
X509v3 Authority Key Identifier:
keyid:86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.52.148.0-199.52.150.255
199.52.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c1:cb:51:7f:ae:88:4f:e4:b2:2f:f2:44:dc:b7:a5:a3:55:
c0:42:b8:30:38:b9:b4:21:51:14:34:c3:73:eb:70:34:e9:96:
e5:f7:f7:fd:c1:e0:d0:73:98:79:7e:46:6b:b5:f0:3b:29:a1:
f6:cf:88:a2:86:82:48:51:0c:24:d1:1d:06:49:b3:cb:da:94:
1b:14:5e:f3:90:bb:5f:96:7f:ec:07:61:d0:7f:08:05:4f:61:
bf:e2:98:bd:76:6e:e5:af:62:1c:ba:d2:1a:6f:a0:33:d7:58:
8d:fe:e8:b2:9c:45:dd:b5:bb:ce:e6:bc:b2:77:ea:d5:ce:b2:
d5:a9:f4:26:ab:22:34:4b:65:9f:d9:4d:2c:29:27:cf:3f:1c:
ed:62:cd:58:17:82:06:be:73:9f:06:45:70:70:10:f5:8c:b2:
ac:b4:de:5e:04:81:98:0e:4b:dd:1d:18:dd:7d:a7:ef:67:14:
cf:ed:6a:23:d2:a0:f1:98:9a:c5:6b:78:4a:06:5e:7c:bc:54:
dd:84:8f:14:18:93:91:38:ec:5d:14:b9:13:82:bc:b6:09:5d:
52:97:20:c0:a4:4c:84:38:cb:21:c8:5a:f8:79:cd:bc:d7:6f:
38:d3:76:20:fe:8a:ce:81:d5:2a:f2:a1:78:cd:78:b5:43:d8:
f6:80:92:60
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEgr9Vise6uSJr1Q/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE4Njk3NjMtMzdkNi00M2ZlLWIxNmYtYmQyMmJlMDhh
N2M1MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDczNmYyNWUtNGI1Ny00NjQ4LThjZjItYzRmYzkzMDIwYjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7vE+dn7t62oOi7NY+1lMHaQCaZEcdgP5uJj
OwpHOYCPCHp8jv/lWFsCVxHfW3d7PQjaIscnqyvLqXPeh0BBGxspQlKkB2a2X4I+
5jio56w3wo5YplyGBE45lGRBq1U30g1OARbmUjCYedYRL0msBu6Dz/cawnoM3yBW
xH3pM5cTNKA5jqwnRymukcRE/IYWR34aYwxRzVIijqh42WNxLb8vmgdHY6iGXNKp
6eay9qXfu2vaEBgvGbuvhEeQxD2ZH+ZN4cTnQAQoIIOYI90rpkGTF7z4k5byE2rH
dU3pjdqKIVNtJ6SBme7WX6DnUb3v7a0WFz4NsTOOvffzI3B4HQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFPM6jfG4QOPMDhOawf7FH0F1XWlRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTg2
OTc2My0zN2Q2LTQzZmUtYjE2Zi1iZDIyYmUwOGE3YzUvZGM4ZTdmNDEtMzIwOC0z
NWMyLWJmMjAtMzMxMDVjMGM4YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWE4Njk3NjMtMzdkNi00M2ZlLWIx
NmYtYmQyMmJlMDhhN2M1L2VhODY5NzYzLTM3ZDYtNDNmZS1iMTZmLWJkMjJiZTA4
YTdjNS5jcmwwHwYDVR0jBBgwFoAUhuujHlg09SqVHJ9NEYq0oYAqLrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTg2OTc2My0zN2Q2LTQzZmUtYjE2Zi1iZDIy
YmUwOGE3YzUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALHNJQD
BADHNJYDBADHNKAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAGsHLUX+uiE/ksi/yRNy3paNVwEK4MDi5tCFR
FDTDc+twNOmW5ff3/cHg0HOYeX5Ga7XwOymh9s+IooaCSFEMJNEdBkmzy9qUGxRe
85C7X5Z/7Adh0H8IBU9hv+KYvXZu5a9iHLrSGm+gM9dYjf7ospxF3bW7zua8snfq
1c6y1an0JqsiNEtln9lNLCknzz8c7WLNWBeCBr5znwZFcHAQ9YyyrLTeXgSBmA5L
3R0Y3X2n72cUz+1qI9Kg8ZiaxWt4SgZefLxU3YSPFBiTkTjsXRS5E4K8tgldUpcg
wKRMhDjLIcha+HnNvNdvONN2IP6KzoHVKvKheM14tUPY9oCSYA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:31 2025 by rpki-client