Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/890ec431-29dc-35e2-9185-a90e23d3b05e.roa
File: 890ec431-29dc-35e2-9185-a90e23d3b05e.roa (raw, json)
Hash identifier: a6eP4hedyORpevLpAO0ATtmNW5yLU3JCkErwb73souo=
Subject key identifier: FD:6A:C7:10:1E:8F:91:FF:B2:5F:16:86:78:E0:BC:BD:EB:DA:DB:D1
Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial: 010D0C9F432858485B6AFA041CC97F486722C700
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/890ec431-29dc-35e2-9185-a90e23d3b05e.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 394161
IP address blocks: 149.106.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:fa:04:1c:c9:7f:48:67:22:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=849c642f-d050-4246-a846-3f4b3bf185d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:c5:52:e3:52:e8:bc:d4:3c:58:0b:5b:cf:
6b:4a:ff:b2:c0:15:0a:7e:33:c9:b1:51:b8:ba:0d:
84:f0:66:24:e3:f7:c6:14:02:70:3d:96:aa:7e:12:
5f:31:32:5b:02:e3:51:b1:07:31:db:2b:2f:d0:9e:
96:77:42:af:1e:dc:26:68:3b:59:c8:67:5c:60:bf:
db:04:e4:b6:5c:27:d3:80:6f:9d:d6:85:ea:96:12:
99:1f:be:4b:f5:7d:1c:ea:78:3f:61:69:3d:ac:54:
0e:a3:9b:de:e3:0d:9b:70:fa:16:05:90:b9:5a:28:
dc:46:2d:fb:f0:26:8c:27:11:8f:f7:12:72:9b:e0:
26:db:65:ac:ad:42:4d:ce:14:82:11:b6:cc:34:7d:
9f:b6:28:72:d1:51:1f:5a:5d:ce:0c:d5:93:f8:0d:
c4:75:3f:30:b2:d6:f5:f0:db:1f:27:52:9d:26:4d:
6a:d1:dc:76:65:b1:57:7a:d1:85:84:83:1c:86:6f:
53:55:d3:7c:4d:04:10:d3:12:fd:10:ef:15:f6:04:
7d:31:77:36:90:26:a2:1c:6a:4a:b8:68:74:22:f2:
3e:5c:7f:91:8a:84:b6:e5:b2:b4:56:71:e4:f5:53:
da:00:3c:b1:20:2a:a2:9f:27:89:a7:19:46:55:ee:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:C7:10:1E:8F:91:FF:B2:5F:16:86:78:E0:BC:BD:EB:DA:DB:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/890ec431-29dc-35e2-9185-a90e23d3b05e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
X509v3 Authority Key Identifier:
keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
149.106.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:f9:c5:23:20:99:9b:de:96:ad:e8:b4:80:31:38:cb:57:1d:
19:7a:cf:95:bc:92:4d:72:d5:05:c3:47:ad:f4:fd:6d:0d:a3:
49:30:9e:06:92:97:69:ef:b8:09:68:9a:82:7a:9e:05:4c:9e:
02:71:a8:d2:2e:13:5f:f2:2f:1d:8d:f8:3c:5a:27:89:e6:05:
94:e8:29:6c:92:b2:01:d3:f5:49:37:4f:b4:7c:73:20:81:d7:
ea:d5:95:d2:68:0b:ba:4d:09:f8:47:d1:cd:64:56:4d:99:3e:
7d:2f:d0:12:1c:a3:6e:90:3a:8d:27:ee:d8:72:1e:24:2d:4b:
00:0f:7d:20:f7:49:31:cc:a4:57:3d:e2:86:f5:62:63:3d:b8:
45:ed:22:5a:a3:97:e0:5c:fb:a3:f1:29:f5:f1:d6:c3:3d:92:
04:c9:e6:59:51:ca:93:b2:b9:6e:9c:8d:75:be:95:cf:0a:1d:
49:67:62:e5:6c:e0:1f:d3:f4:65:8b:46:f7:ac:39:dc:72:f7:
f6:be:93:73:25:2a:e1:1c:2c:6b:78:c2:68:c8:96:9f:8a:95:
14:e9:67:c8:20:08:c6:6c:e0:94:13:a8:b8:0f:6b:32:9e:ac:
5d:ca:85:cb:e2:c4:00:3c:41:5c:d1:26:11:50:80:d9:df:65:
29:b8:71:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavoEHMl/SGcixwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm
MmY5MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
ODQ5YzY0MmYtZDA1MC00MjQ2LWE4NDYtM2Y0YjNiZjE4NWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNjFUuNS6LzUPFgLW89rSv+ywBUKfjPJsVG4
ug2E8GYk4/fGFAJwPZaqfhJfMTJbAuNRsQcx2ysv0J6Wd0KvHtwmaDtZyGdcYL/b
BOS2XCfTgG+d1oXqlhKZH75L9X0c6ng/YWk9rFQOo5ve4w2bcPoWBZC5WijcRi37
8CaMJxGP9xJym+Am22WsrUJNzhSCEbbMNH2ftihy0VEfWl3ODNWT+A3EdT8wstb1
8NsfJ1KdJk1q0dx2ZbFXetGFhIMchm9TVdN8TQQQ0xL9EO8V9gR9MXc2kCaiHGpK
uGh0IvI+XH+RioS25bK0VnHk9VPaADyxICqinyeJpxlGVe55gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1qxxAej5H/sl8WhnjgvL3r2tvRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3
ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvODkwZWM0MzEtMjlkYy0z
NWUyLTkxODUtYTkwZTIzZDNiMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy
ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0
ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3
MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlWrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI35xSMgmZvelq3otIAxOMtXHRl6z5W8kk1y1QXDR630/W0No0kwngaS
l2nvuAlomoJ6ngVMngJxqNIuE1/yLx2N+DxaJ4nmBZToKWySsgHT9Uk3T7R8cyCB
1+rVldJoC7pNCfhH0c1kVk2ZPn0v0BIco26QOo0n7thyHiQtSwAPfSD3STHMpFc9
4ob1YmM9uEXtIlqjl+Bc+6PxKfXx1sM9kgTJ5llRypOyuW6cjXW+lc8KHUlnYuVs
4B/T9GWLRvesOdxy9/a+k3MlKuEcLGt4wmjIlp+KlRTpZ8ggCMZs4JQTqLgPazKe
rF3KhcvixAA8QVzRJhFQgNnfZSm4cWg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:46:45 2025 by rpki-client