Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/126dea5b-8d30-3b56-906f-ec0104026eca.roa
File: 126dea5b-8d30-3b56-906f-ec0104026eca.roa (raw, json)
Hash identifier: DSq+6bZIY8+i/JBRUJtjPAayqykkLChaumWiRB2ITKs=
Subject key identifier: 45:D6:5B:52:31:D7:C9:E1:3F:90:C9:21:B3:C1:26:CD:9C:AD:23:2E
Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial: 010D0C9F432858494733E222661940F58584D620
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/126dea5b-8d30-3b56-906f-ec0104026eca.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 23154
IP address blocks: 148.164.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e2:22:66:19:40:f5:85:84:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=3b94d0eb-b787-4428-9948-05d55cf6e50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:d6:d5:38:e6:4e:4a:d9:14:4b:ff:48:54:
7e:06:55:48:d3:bb:de:99:6d:92:05:dd:d3:fa:db:
3a:5d:7f:a6:3d:51:ff:83:4d:f3:d5:8c:7a:e0:b6:
23:90:2e:9c:6c:50:f1:ba:11:7b:c6:21:6b:fc:f5:
47:78:d0:03:78:15:2f:55:6a:47:c3:20:59:f9:65:
a6:f0:a4:be:31:ba:89:95:82:4c:af:83:88:c1:91:
74:26:b8:a2:a7:85:ee:f9:7f:36:6d:00:59:4d:89:
e5:36:a2:cd:b2:5a:da:0b:63:fa:31:e9:28:bc:b0:
be:d2:4e:cf:44:ec:a4:bd:bd:39:ac:6c:63:9a:0e:
1c:71:d3:c0:10:03:22:c5:63:73:fc:00:01:a5:e4:
6f:30:55:3a:a0:2d:ef:b9:cc:0d:92:ba:f5:d9:13:
65:bc:fe:8e:8d:dc:a8:e3:88:8f:ef:d3:ff:69:83:
b7:54:1b:7b:a0:b9:1b:ed:25:5e:18:a5:39:01:ee:
13:84:ab:88:05:0a:ad:19:ac:9d:97:d9:bd:e0:b8:
f5:bf:5e:22:e2:4f:11:78:b8:d1:5a:9c:0a:c2:9f:
35:65:d2:6a:65:ac:e1:86:eb:31:68:30:89:ce:fd:
39:cd:ee:f5:05:7a:90:38:25:ab:2d:2a:01:35:4a:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:5B:52:31:D7:C9:E1:3F:90:C9:21:B3:C1:26:CD:9C:AD:23:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/126dea5b-8d30-3b56-906f-ec0104026eca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
X509v3 Authority Key Identifier:
keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
sbgp-ipAddrBlock: critical
IPv4:
148.164.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:45:c0:7b:f7:11:83:11:9c:66:8b:f3:24:a7:78:a9:6b:f2:
8a:f3:d8:5e:68:25:26:5f:5b:e5:42:7f:d5:fa:c6:56:90:c3:
9a:2c:ba:c4:01:7d:95:0e:e2:d1:05:da:5e:76:b9:c4:44:7a:
60:ac:32:05:00:d2:e9:01:ab:54:e0:57:c9:5d:28:8d:b8:02:
9d:c2:5e:1e:9f:b1:c1:c2:1b:1f:02:b7:24:b4:c5:cb:6d:b3:
b8:6e:b1:31:1c:3b:c2:5d:91:71:2c:38:6b:42:3c:e4:76:2f:
0d:80:eb:7a:1c:0e:be:fe:76:d8:c9:b9:33:bf:59:d1:0e:d9:
1b:90:e5:fe:01:72:3c:cb:93:b2:86:ed:cc:a5:bf:43:6c:dc:
b5:bd:28:a4:bb:bd:af:c8:f3:fa:3e:2d:9e:d7:80:7d:bb:a8:
bf:de:a8:ed:c1:4d:88:34:87:a4:e3:f7:1d:91:28:93:94:c1:
ae:ba:65:43:11:9e:15:c6:55:72:b9:38:b7:b1:99:d4:b7:12:
c1:c7:2d:00:86:d2:c5:6c:bc:36:9e:d3:15:f3:e5:d7:1d:9c:
94:00:76:ec:60:80:46:92:62:4c:e0:ed:de:59:af:3a:5b:cf:
84:a0:b8:e2:4b:f4:27:4f:44:21:ff:29:30:c6:e9:81:e7:6c:
db:72:17:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+IiZhlA9YWE1iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
M2I5NGQwZWItYjc4Ny00NDI4LTk5NDgtMDVkNTVjZjZlNTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA293W1TjmTkrZFEv/SFR+BlVI07vemW2SBd3T
+ts6XX+mPVH/g03z1Yx64LYjkC6cbFDxuhF7xiFr/PVHeNADeBUvVWpHwyBZ+WWm
8KS+MbqJlYJMr4OIwZF0Jriip4Xu+X82bQBZTYnlNqLNslraC2P6MekovLC+0k7P
ROykvb05rGxjmg4ccdPAEAMixWNz/AABpeRvMFU6oC3vucwNkrr12RNlvP6Ojdyo
44iP79P/aYO3VBt7oLkb7SVeGKU5Ae4ThKuIBQqtGaydl9m94Lj1v14i4k8ReLjR
WpwKwp81ZdJqZazhhusxaDCJzv05ze71BXqQOCWrLSoBNUoqswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXWW1Ix18nhP5DJIbPBJs2crSMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMTI2ZGVhNWItOGQzMC0z
YjU2LTkwNmYtZWMwMTA0MDI2ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBFwHv3EYMRnGaL8ySneKlr8orz2F5oJSZfW+VCf9X6xlaQw5osusQB
fZUO4tEF2l52ucREemCsMgUA0ukBq1TgV8ldKI24Ap3CXh6fscHCGx8CtyS0xctt
s7husTEcO8JdkXEsOGtCPOR2Lw2A63ocDr7+dtjJuTO/WdEO2RuQ5f4BcjzLk7KG
7cylv0Ns3LW9KKS7va/I8/o+LZ7XgH27qL/eqO3BTYg0h6Tj9x2RKJOUwa66ZUMR
nhXGVXK5OLexmdS3EsHHLQCG0sVsvDae0xXz5dcdnJQAduxggEaSYkzg7d5Zrzpb
z4SguOJL9CdPRCH/KTDG6YHnbNtyF8U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:29 2025 by rpki-client