Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa
File: fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa (raw, json)
Hash identifier: YxsdlKN7mvU8R3wSPXKkkWKUJtiWLMhiOEFflMh2gd4=
Subject key identifier: 21:65:D8:5E:2A:08:59:92:28:66:E3:AF:5C:80:AB:67:33:EB:9C:EB
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285848D0ABA94D82731DC47D429A40
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 396253
IP address blocks: 149.19.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:a9:4d:82:73:1d:c4:7d:42:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=f087acfe-8505-4574-b972-cca95c6770c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:33:98:61:65:37:73:3d:5b:c4:7e:17:a4:
4e:08:7b:47:a9:61:65:08:1a:bd:72:e4:dd:d8:1b:
a7:cc:cc:7e:8f:2c:43:92:30:31:e7:39:58:e4:75:
fa:0b:20:2d:f2:56:8c:31:7c:16:19:8d:3e:28:41:
6f:ee:1b:38:7a:ed:92:ae:9e:9c:fc:71:09:a1:c4:
55:d9:18:fe:dc:f8:d0:a9:37:ce:72:07:4f:84:ca:
e9:26:9d:e5:f9:ed:28:01:af:a2:a7:42:63:bd:47:
2b:88:e7:63:ba:70:3c:dd:b3:c2:0a:70:22:f0:d1:
0c:57:24:6d:7e:12:a0:fb:0f:e1:02:18:d4:a7:71:
50:0f:64:f1:87:8b:45:43:a5:9a:99:f2:09:4e:f8:
ee:3a:6d:45:17:e1:75:67:dc:ac:f4:ec:23:1e:a7:
b1:f8:eb:ba:9c:f1:77:0c:f2:81:4e:2b:3b:c3:e0:
f0:dc:09:bd:24:39:23:57:8c:a3:54:6a:e3:6a:78:
63:a7:44:34:66:08:2c:03:15:cd:44:3f:31:ea:e7:
01:6e:f6:af:0a:10:5f:27:40:d2:0b:91:91:13:ae:
b9:a9:3c:57:ee:84:f4:34:79:6d:3e:5d:a9:3a:46:
ed:5c:b2:e1:46:15:35:ab:93:54:41:73:df:69:ad:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:D8:5E:2A:08:59:92:28:66:E3:AF:5C:80:AB:67:33:EB:9C:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:96:ca:af:34:82:4f:8e:08:3a:2d:77:7e:66:d8:84:fb:33:
fd:de:c8:b4:96:94:aa:cd:4a:be:7a:2c:7a:50:57:78:92:e1:
8f:1a:da:12:af:98:32:8a:a2:a8:29:87:f3:9c:bf:bd:35:34:
16:1a:2c:40:b2:54:29:09:1e:0a:73:69:61:4b:75:ba:dc:13:
25:a3:4a:af:d7:07:1d:15:c2:6a:b3:35:4e:61:50:bd:3e:90:
36:0e:7d:d2:0b:40:89:a0:92:30:ac:f1:98:77:75:ca:c2:05:
63:7a:5e:fc:b1:01:24:17:e8:de:71:5f:bb:cd:6e:cd:8d:31:
4c:94:cf:8d:7c:43:55:5e:75:8d:f3:2f:0f:78:eb:7d:75:b4:
74:e8:42:b9:f7:76:47:46:06:1f:f2:c3:c5:8c:a5:ae:0a:62:
2d:7f:33:0d:ef:49:2d:43:7c:67:f5:d9:0b:d1:7b:91:2a:34:
06:63:01:13:4f:8f:bb:49:9b:76:c9:6c:3e:6d:85:ea:eb:68:
95:49:b4:e3:33:06:58:84:b8:21:8c:2d:6e:a7:08:d5:77:c4:
87:db:aa:6c:ca:e4:a6:fb:0c:45:e6:9b:cf:6a:d8:e5:dc:92:
a1:cf:e3:16:98:18:c9:32:6c:17:b9:db:97:70:96:20:36:fa:
91:5d:fc:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq6lNgnMdxH1CmkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjA4N2FjZmUtODUwNS00NTc0LWI5NzItY2NhOTVjNjc3MGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5wzmGFlN3M9W8R+F6ROCHtHqWFlCBq9cuTd
2BunzMx+jyxDkjAx5zlY5HX6CyAt8laMMXwWGY0+KEFv7hs4eu2Srp6c/HEJocRV
2Rj+3PjQqTfOcgdPhMrpJp3l+e0oAa+ip0JjvUcriOdjunA83bPCCnAi8NEMVyRt
fhKg+w/hAhjUp3FQD2Txh4tFQ6WamfIJTvjuOm1FF+F1Z9ys9OwjHqex+Ou6nPF3
DPKBTis7w+Dw3Am9JDkjV4yjVGrjanhjp0Q0ZggsAxXNRD8x6ucBbvavChBfJ0DS
C5GRE665qTxX7oT0NHltPl2pOkbtXLLhRhU1q5NUQXPfaa0hLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFl2F4qCFmSKGbjr1yAq2cz65zrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZmUzM2YzZWQtMDE3ZS0z
YmQyLTg0N2UtNDRmMTNjNzk3OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqWyq80gk+OCDotd35m2IT7M/3eyLSWlKrNSr56LHpQV3iS4Y8a2hKv
mDKKoqgph/Ocv701NBYaLECyVCkJHgpzaWFLdbrcEyWjSq/XBx0VwmqzNU5hUL0+
kDYOfdILQImgkjCs8Zh3dcrCBWN6XvyxASQX6N5xX7vNbs2NMUyUz418Q1VedY3z
Lw946311tHToQrn3dkdGBh/yw8WMpa4KYi1/Mw3vSS1DfGf12QvRe5EqNAZjARNP
j7tJm3bJbD5therraJVJtOMzBliEuCGMLW6nCNV3xIfbqmzK5Kb7DEXmm89q2OXc
kqHP4xaYGMkybBe525dwliA2+pFd/Js=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:21:53 2025 by rpki-client