Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1ac39c5-abf1-36ce-8521-e3687729fc7c.roa
File: f1ac39c5-abf1-36ce-8521-e3687729fc7c.roa (raw, json)
Hash identifier: hl83nMAXIE96dkJGe7LD/Zk6gicVaDW+etFN5UsBmT0=
Subject key identifier: 98:A4:07:95:C7:34:0C:AA:59:03:E9:DC:B9:3E:B2:37:43:75:E0:6F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B736AC85E59666CCBEC01D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1ac39c5-abf1-36ce-8521-e3687729fc7c.roa
Signing time: Thu 30 Jan 2025 11:09:59 +0000
ROA not before: Thu 30 Jan 2025 11:09:59 +0000
ROA not after: Wed 30 Apr 2025 10:09:59 +0000
asID: 30036
IP address blocks: 150.195.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:ac:85:e5:96:66:cc:be:c0:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:09:59 2025 GMT
Not After : Apr 30 10:09:59 2025 GMT
Subject: CN=4d6fb652-d942-4260-a1e6-9c8d731b7b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:47:f4:38:49:21:33:2d:76:5c:67:f4:94:
e6:79:10:94:78:0d:48:fa:ca:1e:fb:e0:2e:6f:48:
c0:84:b5:29:67:bc:c9:73:46:62:db:57:e1:9c:87:
ff:6d:50:82:e3:bb:e0:9a:f4:9d:2e:29:60:b4:37:
b8:d3:8d:34:95:71:5d:d8:9c:ba:41:19:b3:56:eb:
4c:e5:1f:a3:c5:62:6a:b1:c0:d3:88:01:6b:af:e7:
36:fb:cf:88:81:e7:10:ca:74:6c:08:c6:53:77:95:
23:bc:a2:fb:02:80:c8:10:f9:70:ef:a5:cc:a1:e5:
ab:65:bd:38:d0:42:20:3d:11:7c:d4:65:44:f7:85:
39:ad:70:da:72:0f:58:cd:3c:91:6d:6f:a8:d2:90:
43:1a:b5:a1:56:6b:ff:0c:ef:95:56:8c:09:94:61:
ce:8c:77:db:03:36:c9:1f:64:12:e6:f8:a6:a6:b4:
9f:a2:8b:a3:9c:03:4b:1e:bc:93:0f:6a:56:25:98:
3d:af:82:82:ae:e4:a8:ed:a1:06:78:f7:51:4d:f3:
26:bb:23:ca:61:d7:cb:fa:8f:8c:d1:57:12:07:d8:
31:12:1b:1a:34:eb:83:40:d6:0b:28:8f:76:01:d8:
8d:c4:0f:fd:7b:96:a5:32:91:13:b3:62:ed:1b:8c:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:07:95:C7:34:0C:AA:59:03:E9:DC:B9:3E:B2:37:43:75:E0:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1ac39c5-abf1-36ce-8521-e3687729fc7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:7e:af:5b:9e:c9:9b:9c:d8:05:0e:8d:b5:a7:d2:29:22:9e:
de:a7:56:ed:05:1f:6b:d1:72:ae:70:0d:cf:18:cb:a3:06:cc:
51:01:17:fb:04:ee:fe:1e:58:c2:9b:34:b1:d1:00:35:a9:05:
0e:b3:73:0f:f4:95:1e:09:b4:f4:12:0d:57:74:41:ca:e7:ef:
fd:a4:c2:ee:95:fe:f2:1c:c4:3d:35:92:4a:9e:da:52:0e:34:
80:d5:96:92:59:9e:0d:2a:b4:54:74:e6:1c:e8:7f:52:df:e9:
40:1f:ad:d3:c5:06:60:8b:9d:ad:f3:e5:75:60:de:c2:06:11:
6c:e7:a3:38:c9:92:c8:36:53:78:45:62:e1:8d:c0:fc:bf:eb:
2e:95:19:dd:74:ba:0f:76:55:34:8d:5d:b6:15:b1:c2:40:32:
f9:6f:54:d8:c4:a3:5b:14:69:5a:06:8a:79:d9:a3:2f:96:39:
f2:0d:a2:57:c6:33:45:e2:62:9a:92:5d:c3:f0:25:93:7d:86:
8a:96:8c:81:ff:7f:05:c4:88:b7:96:5a:76:da:53:9a:bd:f6:
4b:7f:b4:95:9a:55:7d:dd:e2:a1:b0:9e:fd:64:37:f2:40:d6:
7a:a7:a3:44:3b:4d:9a:67:65:f2:9f:d7:43:a1:09:af:dd:04:
33:1e:2f:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NqyF5ZZmzL7AHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMDk1OVoXDTI1MDQzMDEwMDk1OVowLzEtMCsGA1UEAxMk
NGQ2ZmI2NTItZDk0Mi00MjYwLWExZTYtOWM4ZDczMWI3YjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZlH9DhJITMtdlxn9JTmeRCUeA1I+soe++Au
b0jAhLUpZ7zJc0Zi21fhnIf/bVCC47vgmvSdLilgtDe40400lXFd2Jy6QRmzVutM
5R+jxWJqscDTiAFrr+c2+8+IgecQynRsCMZTd5UjvKL7AoDIEPlw76XMoeWrZb04
0EIgPRF81GVE94U5rXDacg9YzTyRbW+o0pBDGrWhVmv/DO+VVowJlGHOjHfbAzbJ
H2QS5vimprSfooujnANLHryTD2pWJZg9r4KCruSo7aEGePdRTfMmuyPKYdfL+o+M
0VcSB9gxEhsaNOuDQNYLKI92AdiNxA/9e5alMpETs2LtG4wElQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJikB5XHNAyqWQPp3Lk+sjdDdeBvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjFhYzM5YzUtYWJmMS0z
NmNlLTg1MjEtZTM2ODc3MjlmYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsM1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGB+r1ueyZuc2AUOjbWn0ikint6nVu0FH2vRcq5wDc8Yy6MGzFEBF/sE
7v4eWMKbNLHRADWpBQ6zcw/0lR4JtPQSDVd0Qcrn7/2kwu6V/vIcxD01kkqe2lIO
NIDVlpJZng0qtFR05hzof1Lf6UAfrdPFBmCLna3z5XVg3sIGEWznozjJksg2U3hF
YuGNwPy/6y6VGd10ug92VTSNXbYVscJAMvlvVNjEo1sUaVoGinnZoy+WOfINolfG
M0XiYpqSXcPwJZN9hoqWjIH/fwXEiLeWWnbaU5q99kt/tJWaVX3d4qGwnv1kN/JA
1nqno0Q7TZpnZfKf10OhCa/dBDMeL1Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:11 2025 by rpki-client