Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa
File: 81bb65a3-069f-3f93-a8c2-2b32b151491a.roa (raw, json)
Hash identifier: lcWYh6+w+6xkB1CyJiLtXdASIqcDx8zx87ZAx2fbSYg=
Subject key identifier: 41:99:8C:4B:9C:15:DC:51:19:45:0A:E0:FD:2D:8D:A0:A1:E6:89:4A
Certificate issuer: /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Certificate serial: 010D0C9F4328584871C077FFDC2110FFAE235500
Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 148.59.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:77:ff:dc:21:10:ff:ae:23:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=8f5e692f-cbc3-40ee-aad6-2eea34dd9527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:97:ef:fd:fd:d1:d7:1a:2e:f0:2e:68:6d:
d4:3e:3c:0a:6a:58:85:04:f0:60:bd:8e:ad:b0:ca:
e6:60:2e:61:ee:93:14:3e:73:6f:5a:d5:e3:e6:41:
df:29:8d:e9:bc:aa:e0:70:ef:e4:9f:71:8c:b0:23:
80:11:93:8f:74:d7:04:0c:1a:29:82:cc:49:6f:0f:
75:f9:8d:15:e6:17:78:01:6e:af:4c:16:99:cb:eb:
0d:ef:f9:a6:d9:3d:76:90:0e:2c:6a:8b:ca:2f:5e:
dc:b6:d7:4e:80:3d:76:ee:bc:3b:49:df:26:04:1b:
cb:b5:31:6e:94:61:38:6d:94:89:eb:36:ea:53:6c:
e4:9f:2b:36:16:5b:99:db:2a:5f:78:4f:95:9e:30:
0b:6b:28:96:6d:1a:45:07:d0:e9:8f:da:59:af:63:
46:ca:a1:f3:8b:71:5f:54:19:30:75:66:c9:52:e3:
62:84:f8:88:e7:52:cd:e1:25:54:76:3c:36:3f:ce:
a1:bb:ec:99:df:59:89:0a:11:d8:28:56:b6:eb:69:
2f:d7:9e:2d:2c:fd:c2:b1:54:e4:c1:e5:36:0f:4d:
eb:83:2b:c4:8e:00:f6:69:58:46:13:41:5f:12:44:
b5:ca:bb:b9:d3:62:9c:43:79:ec:0e:56:17:6c:6f:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:8C:4B:9C:15:DC:51:19:45:0A:E0:FD:2D:8D:A0:A1:E6:89:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl
X509v3 Authority Key Identifier:
keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:3b:3e:32:51:da:66:23:24:75:2f:7a:27:54:37:60:b5:06:
56:e3:9a:de:a2:b1:82:12:0c:58:46:f7:43:77:c0:b5:db:dd:
8f:34:9b:51:af:0c:6d:4e:aa:22:ef:15:72:40:f6:4e:cf:9a:
f6:5e:6f:1c:44:10:03:cc:ca:a1:2b:53:dc:cb:8a:af:38:78:
3d:88:ac:b2:d8:c0:01:9f:e8:db:91:b1:1c:12:8a:1b:7a:42:
63:15:80:f6:31:a6:d9:a7:2e:f0:56:cb:29:3a:a1:8e:99:7a:
c4:3f:b5:80:46:5d:b0:81:09:fe:65:41:e4:19:b4:5f:7e:63:
9c:c7:ad:34:99:3c:d0:60:31:3b:91:fd:59:25:5e:32:c6:fc:
fd:9c:24:20:68:34:0d:ea:34:3a:a0:1f:31:75:57:85:8b:c0:
e3:77:b7:b4:93:78:45:17:ca:f4:24:b7:4f:34:c4:42:4b:99:
fc:69:78:14:a2:7c:0d:6a:94:4c:0b:37:46:4e:f6:54:84:5a:
3d:67:ec:49:9b:c5:e7:5e:6b:09:00:95:ef:3d:a4:c2:5f:0f:
56:79:c1:97:9a:e5:91:de:fc:44:7e:9c:ba:f5:b2:92:ba:2f:
85:bb:4b:56:cd:a7:6a:5a:27:1c:02:f9:22:e4:91:51:c3:01:
dd:fb:6d:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHf/3CEQ/64jVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNlM2MyMmUtMjQ0OS00MzY3LWJjYzktOTZlYzg3N2Yz
ZTIzMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGY1ZTY5MmYtY2JjMy00MGVlLWFhZDYtMmVlYTM0ZGQ5NTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMGX7/390dcaLvAuaG3UPjwKaliFBPBgvY6t
sMrmYC5h7pMUPnNvWtXj5kHfKY3pvKrgcO/kn3GMsCOAEZOPdNcEDBopgsxJbw91
+Y0V5hd4AW6vTBaZy+sN7/mm2T12kA4saovKL17cttdOgD127rw7Sd8mBBvLtTFu
lGE4bZSJ6zbqU2zknys2FluZ2ypfeE+VnjALayiWbRpFB9Dpj9pZr2NGyqHzi3Ff
VBkwdWbJUuNihPiI51LN4SVUdjw2P86hu+yZ31mJChHYKFa262kv154tLP3CsVTk
weU2D03rgyvEjgD2aVhGE0FfEkS1yru502KcQ3nsDlYXbG/eywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGZjEucFdxRGUUK4P0tjaCh5olKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Y2Uz
YzIyZS0yNDQ5LTQzNjctYmNjOS05NmVjODc3ZjNlMjMvODFiYjY1YTMtMDY5Zi0z
ZjkzLWE4YzItMmIzMmIxNTE0OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGNlM2MyMmUtMjQ0OS00MzY3LWJj
YzktOTZlYzg3N2YzZTIzLzRjZTNjMjJlLTI0NDktNDM2Ny1iY2M5LTk2ZWM4Nzdm
M2UyMy5jcmwwHwYDVR0jBBgwFoAU+l+3Lo6Fgc+b3cfdouBMfcQQirowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80Y2UzYzIyZS0yNDQ5LTQzNjctYmNjOS05NmVj
ODc3ZjNlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDurMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEA7PjJR2mYjJHUveidUN2C1Blbjmt6isYISDFhG90N3wLXb3Y80m1Gv
DG1OqiLvFXJA9k7PmvZebxxEEAPMyqErU9zLiq84eD2IrLLYwAGf6NuRsRwSiht6
QmMVgPYxptmnLvBWyyk6oY6ZesQ/tYBGXbCBCf5lQeQZtF9+Y5zHrTSZPNBgMTuR
/VklXjLG/P2cJCBoNA3qNDqgHzF1V4WLwON3t7STeEUXyvQkt080xEJLmfxpeBSi
fA1qlEwLN0ZO9lSEWj1n7EmbxedeawkAle89pMJfD1Z5wZea5ZHe/ER+nLr1spK6
L4W7S1bNp2paJxwC+SLkkVHDAd37bU0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:17 2025 by rpki-client