Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/02b8ef63-8644-3e90-b454-fda62c683a14.roa
File: 02b8ef63-8644-3e90-b454-fda62c683a14.roa (raw, json)
Hash identifier: UfbssPOVxg0SY2G6LnyFTaQ0Pxsn2D0TjwBjC9j0Myc=
Subject key identifier: 2E:9D:D1:0F:E3:8D:35:1F:C9:1C:99:21:84:4F:8C:E6:5A:D1:1D:D0
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858494733DB46889BE34F4E7F31A0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/02b8ef63-8644-3e90-b454-fda62c683a14.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 23154
IP address blocks: 148.164.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:db:46:88:9b:e3:4f:4e:7f:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=2c8f3135-ae29-46d6-b8fc-57e39d89350d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:0a:ba:b9:d1:ca:47:2f:62:f6:55:f5:cc:
3f:dd:32:7a:98:e9:7c:bd:8b:92:54:f7:39:ff:06:
31:81:1d:54:d7:f5:4e:7c:4d:6e:1d:b8:a0:0b:0f:
38:34:ec:ac:09:4f:d2:13:a8:69:c6:fc:23:99:79:
e7:99:53:f8:56:16:bc:a1:71:10:c5:6a:77:f4:cf:
28:da:fd:b8:e9:7a:1f:00:e2:6e:12:ee:7d:65:07:
ef:05:32:dd:4a:87:5c:85:a0:2c:eb:49:a7:40:c6:
8f:58:70:ef:fd:bf:23:c6:10:7f:f8:08:fb:2d:91:
d2:99:6d:61:53:c1:6e:33:88:89:06:05:7c:f2:2a:
3a:f0:b7:d6:8f:cb:0c:e7:8e:41:29:4e:9f:56:cf:
8a:c3:5d:2e:01:e1:b1:20:44:49:1c:fb:d1:19:50:
3e:bb:e0:a5:bf:c1:65:c2:87:ef:46:20:87:de:2f:
05:8e:01:f8:14:74:59:c4:dd:27:fc:35:e7:36:36:
ae:35:bf:3e:01:14:b7:fa:d9:0e:9b:4f:1c:a7:44:
0b:ca:0e:b5:e0:26:07:06:27:3c:c2:b8:e0:d2:00:
3f:75:56:0c:ad:ee:c3:da:1e:70:df:f1:db:6e:9b:
86:e1:b9:11:fe:7f:fb:95:a3:6a:a5:8a:a3:35:31:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:D1:0F:E3:8D:35:1F:C9:1C:99:21:84:4F:8C:E6:5A:D1:1D:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/02b8ef63-8644-3e90-b454-fda62c683a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:f2:3b:2e:e6:0e:15:ab:b1:89:94:f0:a5:e5:39:d4:e3:8b:
c5:ad:e4:86:92:cb:8e:44:cf:f9:7e:04:b5:df:3a:dd:da:a9:
2d:5c:db:15:b9:42:3d:1e:9c:41:d0:45:f2:04:f5:80:af:0e:
ae:5a:56:25:4f:f3:95:61:77:86:0e:a1:47:8d:5b:46:cf:00:
fe:d2:2c:47:5c:eb:8a:9a:73:58:73:73:64:0d:26:57:d3:19:
1f:27:a9:af:46:9e:08:95:1b:15:01:a0:62:03:be:8a:d3:46:
4d:53:fb:8d:78:f5:54:52:36:c0:70:16:18:d9:77:d9:92:96:
ba:53:40:61:18:1c:36:f1:c5:08:1e:8e:1f:66:b5:c6:30:ce:
29:4b:13:ce:bc:f8:0b:37:33:af:1e:b5:b8:77:8b:69:75:ec:
90:09:e5:54:11:a9:02:1b:be:d0:da:d0:98:a7:b6:eb:12:e6:
b4:c5:45:10:fa:58:10:2a:d9:84:1b:12:ba:07:5e:cf:de:a4:
6c:9a:a1:8a:49:fc:e2:a0:70:f9:f2:6a:cf:1e:b1:8b:66:5d:
ba:1f:cf:33:7f:28:94:d1:9c:7f:59:58:5c:6c:07:8c:a7:6c:
00:2c:ab:47:c9:eb:2d:49:0f:01:96:7c:a5:e1:a7:38:b9:fe:
12:0d:62:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM9tGiJvjT05/MaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MmM4ZjMxMzUtYWUyOS00NmQ2LWI4ZmMtNTdlMzlkODkzNTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTMKurnRykcvYvZV9cw/3TJ6mOl8vYuSVPc5
/wYxgR1U1/VOfE1uHbigCw84NOysCU/SE6hpxvwjmXnnmVP4Vha8oXEQxWp39M8o
2v246XofAOJuEu59ZQfvBTLdSodchaAs60mnQMaPWHDv/b8jxhB/+Aj7LZHSmW1h
U8FuM4iJBgV88io68LfWj8sM545BKU6fVs+Kw10uAeGxIERJHPvRGVA+u+Clv8Fl
wofvRiCH3i8FjgH4FHRZxN0n/DXnNjauNb8+ARS3+tkOm08cp0QLyg614CYHBic8
wrjg0gA/dVYMre7D2h5w3/HbbpuG4bkR/n/7laNqpYqjNTFj7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6d0Q/jjTUfyRyZIYRPjOZa0R3QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMDJiOGVmNjMtODY0NC0z
ZTkwLWI0NTQtZmRhNjJjNjgzYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzyOy7mDhWrsYmU8KXlOdTji8Wt5IaSy45Ez/l+BLXfOt3aqS1c2xW5
Qj0enEHQRfIE9YCvDq5aViVP85Vhd4YOoUeNW0bPAP7SLEdc64qac1hzc2QNJlfT
GR8nqa9GngiVGxUBoGIDvorTRk1T+4149VRSNsBwFhjZd9mSlrpTQGEYHDbxxQge
jh9mtcYwzilLE868+As3M68etbh3i2l17JAJ5VQRqQIbvtDa0JintusS5rTFRRD6
WBAq2YQbEroHXs/epGyaoYpJ/OKgcPnyas8esYtmXbofzzN/KJTRnH9ZWFxsB4yn
bAAsq0fJ6y1JDwGWfKXhpzi5/hINYh8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:18 2025 by rpki-client