Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
File: 7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa (raw, json)
Hash identifier: pkXmnVqXGKduWqVG/aP1ZX9bKYoTp9/81e2TG1a43kU=
Subject key identifier: 54:02:A6:58:C1:53:CE:FA:AA:83:33:58:98:05:FE:99:C9:C1:F7:24
Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial: 010D0C9F432858485E35B6D811B7006A17D38880
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 399629
IP address blocks: 149.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b6:d8:11:b7:00:6a:17:d3:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=ec6bd441-0744-4f00-8364-cb418dce9450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:02:21:41:08:5e:d5:fe:85:b4:d7:a6:ec:
b4:ef:65:35:c5:25:e1:f0:7b:0d:2e:9f:c6:2c:0b:
b2:0a:2f:53:09:95:ee:07:71:a3:81:11:c2:d9:08:
11:15:d7:e5:38:0b:fa:ba:17:58:d1:49:12:72:03:
72:3c:ca:6f:e8:54:2c:70:04:53:b4:8a:f9:11:58:
91:a8:91:ef:ce:d2:1b:02:59:5a:8a:f3:c9:ce:02:
b5:04:98:47:1d:72:57:02:1f:92:2d:3a:f8:48:1e:
6f:0c:1b:7e:8b:e8:26:4d:32:77:89:b4:14:cd:68:
38:a4:5c:d4:61:d0:4a:26:ee:a8:2f:2e:ab:94:c8:
18:8f:39:05:b8:ce:28:88:ca:b8:09:d2:4c:26:5e:
a1:b0:3d:36:98:58:65:a7:b5:11:2e:44:f9:4c:95:
fc:5b:4e:99:d9:77:53:8d:3f:90:72:86:86:6a:3d:
88:e1:8c:74:59:c0:c4:8c:41:23:1d:f2:9b:0e:a5:
2f:c7:e9:86:1e:40:27:b1:c9:96:e8:7e:b8:9a:cb:
7b:4a:5e:8c:29:aa:53:d3:bb:4b:36:1e:bd:d3:17:
2a:60:27:f8:10:96:46:b1:cd:e4:0f:37:76:78:0f:
5b:29:f0:cc:15:40:48:6f:f6:5a:0e:27:8a:ba:99:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:A6:58:C1:53:CE:FA:AA:83:33:58:98:05:FE:99:C9:C1:F7:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
X509v3 Authority Key Identifier:
keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
sbgp-ipAddrBlock: critical
IPv4:
149.248.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a5:fd:2d:81:53:d0:5f:e9:89:9c:ff:59:fa:6e:96:dc:34:
12:e0:99:dc:c3:59:1a:8c:21:00:27:a9:a2:78:e1:43:93:18:
e4:35:67:7b:20:c4:f3:9d:0e:ec:6b:5e:2c:04:97:6e:7c:41:
b2:16:54:1b:c1:82:43:06:6c:b0:f3:2c:01:b4:cb:16:75:7d:
aa:d6:52:d8:62:07:d4:4f:12:99:11:4f:b2:03:0f:ba:81:cf:
3f:d7:c8:1a:ed:eb:93:20:d1:5c:b1:d7:e8:40:e4:32:59:5c:
0d:dc:a2:9b:be:bf:a6:a3:0a:33:05:eb:c8:e5:80:a1:1a:a1:
65:e9:c6:31:1f:01:fb:30:80:bb:c2:ec:99:e4:63:d7:30:fe:
06:42:fb:cc:30:66:78:51:1c:8b:82:d1:14:03:e2:f5:f3:aa:
69:26:14:7c:51:bd:8d:02:af:60:ef:48:fb:8f:d2:7b:83:29:
30:24:bf:f9:96:e2:f3:ea:70:85:01:03:2d:97:63:ed:9c:00:
89:07:fe:28:29:28:a6:88:9d:b8:ae:a6:8f:e4:fa:c4:a8:5f:
4e:a8:5d:12:00:eb:6c:3a:a0:1f:60:43:12:ae:f7:83:91:d9:
26:14:8d:e7:56:4c:3d:e3:f4:39:74:11:37:61:0a:a8:dd:79:
5c:6d:38:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbbYEbcAahfTiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWM2YmQ0NDEtMDc0NC00ZjAwLTgzNjQtY2I0MThkY2U5NDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzkCIUEIXtX+hbTXpuy072U1xSXh8HsNLp/G
LAuyCi9TCZXuB3GjgRHC2QgRFdflOAv6uhdY0UkScgNyPMpv6FQscARTtIr5EViR
qJHvztIbAllaivPJzgK1BJhHHXJXAh+SLTr4SB5vDBt+i+gmTTJ3ibQUzWg4pFzU
YdBKJu6oLy6rlMgYjzkFuM4oiMq4CdJMJl6hsD02mFhlp7URLkT5TJX8W06Z2XdT
jT+QcoaGaj2I4Yx0WcDEjEEjHfKbDqUvx+mGHkAnscmW6H64mst7Sl6MKapT07tL
Nh690xcqYCf4EJZGsc3kDzd2eA9bKfDMFUBIb/ZaDieKupnILwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQCpljBU876qoMzWJgF/pnJwfckMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvN2RmYjU5ZjgtYWI0NS0z
MDk0LTg5MzgtYTU0MzNiY2RjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOl/S2BU9Bf6Ymc/1n6bpbcNBLgmdzDWRqMIQAnqaJ44UOTGOQ1Z3sg
xPOdDuxrXiwEl258QbIWVBvBgkMGbLDzLAG0yxZ1farWUthiB9RPEpkRT7IDD7qB
zz/XyBrt65Mg0Vyx1+hA5DJZXA3copu+v6ajCjMF68jlgKEaoWXpxjEfAfswgLvC
7JnkY9cw/gZC+8wwZnhRHIuC0RQD4vXzqmkmFHxRvY0Cr2DvSPuP0nuDKTAkv/mW
4vPqcIUBAy2XY+2cAIkH/igpKKaInbiupo/k+sSoX06oXRIA62w6oB9gQxKu94OR
2SYUjedWTD3j9Dl0ETdhCqjdeVxtOOY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:51 2025 by rpki-client