Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa
File: 44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa (raw, json)
Hash identifier: 8e13sKLBhPwYIxCIzIJmVfG0rXA2+cs1hEpTEUwROHc=
Subject key identifier: 99:2C:2C:D7:91:05:DD:E5:25:A6:67:B4:A5:28:1E:5C:6A:77:35:B9
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D947C906EFD645D1580E4800
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa
Signing time: Tue 11 Feb 2025 16:01:56 +0000
ROA not before: Tue 11 Feb 2025 16:01:56 +0000
ROA not after: Mon 12 May 2025 15:01:56 +0000
asID: 3360
IP address blocks: 20.149.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:47:c9:06:ef:d6:45:d1:58:0e:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 16:01:56 2025 GMT
Not After : May 12 15:01:56 2025 GMT
Subject: CN=913e6aab-9b42-4d46-b64a-48adf2e3492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:8c:70:4b:1f:10:b4:70:98:95:91:77:de:
67:24:8b:e4:a2:ef:d9:5b:65:4a:1e:c1:fa:e7:b4:
06:f3:00:8b:5a:f7:62:e7:52:1f:ce:18:2e:c7:0d:
c1:e0:f8:ea:0a:cd:96:0f:17:05:f5:d7:cb:fc:80:
c4:67:90:65:00:67:79:2c:79:de:cd:1f:f2:28:1b:
05:99:00:0d:08:a8:fd:47:b1:d3:5c:9b:86:b2:0f:
87:7b:80:35:1f:17:33:50:c5:a0:09:02:1c:f0:2d:
e0:3f:90:b5:5c:45:b8:7a:55:d2:0e:d6:16:7d:f3:
5d:ed:31:0a:5d:de:be:31:93:37:a3:88:7b:ae:77:
0a:86:70:2b:47:c0:cb:fc:4a:7d:85:35:99:e9:1e:
07:fc:60:c6:63:39:02:82:9e:dc:25:14:bd:87:34:
2d:8f:dd:74:79:e9:f5:81:44:5c:e2:b1:79:1a:97:
a5:63:ea:fb:30:16:f7:2a:5a:ac:b4:25:81:d5:4a:
18:07:5a:99:80:b3:d1:d9:a6:20:a2:6c:c4:f3:0c:
5c:2b:1a:34:87:55:db:c9:c8:cb:7c:62:3c:a6:2a:
25:8e:11:76:f5:ef:53:ec:69:04:e2:0c:b8:82:c7:
25:e4:a6:b7:03:97:22:2d:49:4f:b4:e3:8e:46:c5:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:2C:D7:91:05:DD:E5:25:A6:67:B4:A5:28:1E:5C:6A:77:35:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44c10e11-66e7-3cd4-83d9-f068bd15ae76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.149.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:68:6c:1f:5a:49:81:eb:ca:30:03:dc:97:28:9a:27:cd:ab:
1b:5d:a7:57:1f:ab:b7:32:7c:30:15:3e:0e:87:51:cc:26:cf:
a3:a8:93:f2:ea:2d:3a:05:2f:95:53:fd:89:cd:34:3d:66:ea:
aa:79:4c:5d:c7:a8:c0:e8:9b:71:01:ec:09:54:7d:cf:2c:07:
79:29:89:04:e0:09:60:49:3d:65:a2:a5:38:52:6f:84:93:c8:
aa:7a:a1:86:ef:d7:e4:64:cc:88:12:65:30:cd:dc:f2:af:e4:
ba:6e:85:be:a4:fa:e0:3e:81:e5:59:57:de:ee:16:ae:5c:3d:
fe:fc:c1:60:91:5c:01:9f:68:0f:5d:e4:71:1d:78:59:71:a5:
aa:fc:d0:da:25:75:5f:2d:77:66:34:83:05:08:f7:51:f0:76:
a1:f6:ec:06:95:c8:c6:54:f7:b9:6b:31:b0:68:c7:60:ad:84:
f1:f1:1c:8b:9d:5e:68:af:6e:7a:b4:3a:18:31:40:47:c0:51:
44:dc:1c:49:c9:61:96:e6:18:f2:0a:3d:44:28:75:52:02:1f:
4d:9f:97:99:73:ed:c1:43:f6:f4:e7:19:38:f3:32:1d:85:04:
0d:46:b4:1a:22:2f:ce:55:50:7d:61:a4:de:f3:d9:c5:42:9b:
54:97:15:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZR8kG79ZF0VgOSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDIxMTE2MDE1NloXDTI1MDUxMjE1MDE1NlowLzEtMCsGA1UEAxMk
OTEzZTZhYWItOWI0Mi00ZDQ2LWI2NGEtNDhhZGYyZTM0OTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGMcEsfELRwmJWRd95nJIvkou/ZW2VKHsH6
57QG8wCLWvdi51Ifzhguxw3B4PjqCs2WDxcF9dfL/IDEZ5BlAGd5LHnezR/yKBsF
mQANCKj9R7HTXJuGsg+He4A1HxczUMWgCQIc8C3gP5C1XEW4elXSDtYWffNd7TEK
Xd6+MZM3o4h7rncKhnArR8DL/Ep9hTWZ6R4H/GDGYzkCgp7cJRS9hzQtj910een1
gURc4rF5GpelY+r7MBb3KlqstCWB1UoYB1qZgLPR2aYgomzE8wxcKxo0h1XbycjL
fGI8pioljhF29e9T7GkE4gy4gscl5Ka3A5ciLUlPtOOORsWHIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJksLNeRBd3lJaZntKUoHlxqdzW5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDRjMTBlMTEtNjZlNy0z
Y2Q0LTgzZDktZjA2OGJkMTVhZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9obB9aSYHryjAD3JcomifNqxtdp1cfq7cyfDAVPg6HUcwmz6Ook/Lq
LToFL5VT/YnNND1m6qp5TF3HqMDom3EB7AlUfc8sB3kpiQTgCWBJPWWipThSb4ST
yKp6oYbv1+RkzIgSZTDN3PKv5Lpuhb6k+uA+geVZV97uFq5cPf78wWCRXAGfaA9d
5HEdeFlxpar80NoldV8td2Y0gwUI91HwdqH27AaVyMZU97lrMbBox2CthPHxHIud
Xmivbnq0OhgxQEfAUUTcHEnJYZbmGPIKPUQodVICH02fl5lz7cFD9vTnGTjzMh2F
BA1GtBoiL85VUH1hpN7z2cVCm1SXFQc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:02 2025 by rpki-client