Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
File: 7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa (raw, json)
Hash identifier: kDhBeEjfIsHOcqnbx9THbqfUjc71vmlvWLeJZHjtkxY=
Subject key identifier: 9F:7B:34:F2:B0:BE:22:8B:4E:D3:5A:19:3F:33:51:80:E7:03:A0:C3
Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial: 010D0C9F432858493ED3D834EABE4721AC921980
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 399629
IP address blocks: 149.248.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d8:34:ea:be:47:21:ac:92:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=e39ab01c-5cc5-4fc8-975f-494096785b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:3f:80:e3:ca:9e:b4:f5:8b:04:33:19:ac:
05:1f:e8:c2:df:1e:d9:aa:8f:d1:fb:fc:ec:80:d1:
38:e0:7e:27:63:f9:b6:a6:22:9c:51:eb:ff:e9:68:
e0:5a:28:20:0e:87:26:8e:36:61:b1:90:99:23:6b:
a4:42:36:22:4b:39:88:ae:d8:25:60:5b:d7:fc:3f:
fd:a3:c0:10:9e:ee:09:6e:64:9d:26:b8:f4:be:33:
9f:4a:48:ba:8c:b2:8f:61:06:ed:f0:c2:15:5c:53:
ee:44:b9:7e:48:e3:ba:78:bf:51:49:97:d7:f1:4f:
04:50:4e:85:07:7a:7e:71:79:e5:ab:4e:9e:48:12:
81:4f:34:7e:e8:89:7d:74:8d:a2:c8:d8:21:bd:b8:
90:af:56:14:0d:e4:f9:7b:08:46:48:dd:7f:b5:bf:
0f:aa:c7:84:99:98:af:2c:01:0c:c8:56:03:f2:a5:
05:28:5a:26:11:ca:3f:f3:71:94:3f:dd:0c:c8:c1:
a9:ec:34:e8:d0:95:ea:83:02:d8:7f:ed:d0:92:43:
3d:ce:09:b2:80:77:21:e1:86:c1:33:e4:a3:6f:00:
de:55:35:cf:1b:0d:a7:13:4d:63:ad:dc:5f:b1:3c:
ba:86:5a:75:56:55:b5:fc:1a:dc:47:3e:58:18:b8:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:34:F2:B0:BE:22:8B:4E:D3:5A:19:3F:33:51:80:E7:03:A0:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
X509v3 Authority Key Identifier:
keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
sbgp-ipAddrBlock: critical
IPv4:
149.248.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:35:fe:75:61:85:b6:d0:93:8c:bd:8b:a3:13:79:07:0c:db:
e5:3d:73:bd:23:3d:7d:ef:dc:c8:77:a9:83:3b:ed:2a:03:b7:
d5:0a:ad:ca:d0:42:48:ac:19:84:08:23:f9:94:ca:6c:8a:ea:
51:ca:58:aa:fb:65:31:04:cc:63:a1:1b:c9:f1:85:b1:e0:78:
34:10:de:bd:f3:76:b0:01:a7:60:a1:65:2b:82:69:72:e9:3b:
7a:c3:11:84:49:cd:47:86:91:f4:4b:57:76:f7:78:3b:8d:38:
7e:74:6f:df:e4:9f:13:a0:6c:eb:51:a9:de:91:98:cb:d0:86:
13:c4:cf:d8:6a:46:8d:76:18:f5:37:51:18:d0:a4:0f:3e:90:
b2:d5:15:2c:2c:77:e1:68:87:e6:ed:ee:bf:c6:bf:72:a1:35:
c0:62:cf:4d:97:51:78:14:22:57:cf:34:50:ed:94:e7:8d:36:
66:d7:67:4b:83:08:de:f5:25:36:03:44:ac:54:e5:a7:91:7a:
79:8f:9c:8e:0b:60:ec:48:9e:a9:b5:f9:25:9f:4c:76:ba:25:
d3:f3:14:38:d9:93:b5:f1:38:90:ff:4c:d6:2d:93:cf:d8:51:
6f:94:46:da:04:23:27:c8:45:14:86:56:b9:eb:70:7f:a1:44:
3f:fa:15:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09g06r5HIaySGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZTM5YWIwMWMtNWNjNS00ZmM4LTk3NWYtNDk0MDk2Nzg1YjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppU/gOPKnrT1iwQzGawFH+jC3x7Zqo/R+/zs
gNE44H4nY/m2piKcUev/6WjgWiggDocmjjZhsZCZI2ukQjYiSzmIrtglYFvX/D/9
o8AQnu4JbmSdJrj0vjOfSki6jLKPYQbt8MIVXFPuRLl+SOO6eL9RSZfX8U8EUE6F
B3p+cXnlq06eSBKBTzR+6Il9dI2iyNghvbiQr1YUDeT5ewhGSN1/tb8PqseEmZiv
LAEMyFYD8qUFKFomEco/83GUP90MyMGp7DTo0JXqgwLYf+3QkkM9zgmygHch4YbB
M+SjbwDeVTXPGw2nE01jrdxfsTy6hlp1VlW1/BrcRz5YGLjeIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ97NPKwviKLTtNaGT8zUYDnA6DDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvN2RmYjU5ZjgtYWI0NS0z
MDk0LTg5MzgtYTU0MzNiY2RjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADU1/nVhhbbQk4y9i6MTeQcM2+U9c70jPX3v3Mh3qYM77SoDt9UKrcrQ
QkisGYQII/mUymyK6lHKWKr7ZTEEzGOhG8nxhbHgeDQQ3r3zdrABp2ChZSuCaXLp
O3rDEYRJzUeGkfRLV3b3eDuNOH50b9/knxOgbOtRqd6RmMvQhhPEz9hqRo12GPU3
URjQpA8+kLLVFSwsd+Foh+bt7r/Gv3KhNcBiz02XUXgUIlfPNFDtlOeNNmbXZ0uD
CN71JTYDRKxU5aeRenmPnI4LYOxInqm1+SWfTHa6JdPzFDjZk7XxOJD/TNYtk8/Y
UW+URtoEIyfIRRSGVrnrcH+hRD/6FeQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:44:26 2025 by rpki-client