Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa
File: 5fd740b0-36b5-3924-ab89-baf72be4370e.roa (raw, json)
Hash identifier: sMXT1F3bNPiUc4KNoK5UUsCNAgeAPXCp3oI6qx/XBqA=
Subject key identifier: 9C:0E:E2:CD:1C:23:0F:B9:8B:C9:5D:FC:22:86:76:12:A2:47:3B:54
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848960B5C94B550D8B98508A2C0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 63199
IP address blocks: 148.153.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5c:94:b5:50:d8:b9:85:08:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=3e7d7021-b550-4bc4-8600-150cd75a3584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:ac:35:d6:aa:d1:de:ca:d1:93:68:be:ee:
6c:88:00:a8:16:5a:8a:71:f6:e4:4f:fb:bf:8a:35:
16:32:37:f7:72:80:33:28:a4:85:10:8d:bb:f7:d0:
ef:83:92:c1:01:76:ec:d3:23:2e:64:0e:0e:5f:d3:
35:6b:d5:bb:71:77:2e:bb:45:69:d6:03:82:e4:b6:
11:f5:61:6d:d1:ce:19:b8:cd:bf:ad:ac:92:60:fb:
fe:86:58:65:65:89:6d:17:67:03:42:1e:f3:eb:63:
8e:74:05:1a:10:32:f6:53:58:6d:4d:e3:3f:2f:2a:
f2:05:8f:d3:58:87:ab:2b:eb:b5:a6:da:66:cc:e6:
e4:d6:dc:86:01:4a:f8:30:39:d2:28:9d:da:e6:ea:
a3:61:52:94:e2:28:8f:37:52:38:cd:1c:e6:b9:5b:
ea:ac:6c:5a:d9:fa:42:53:6b:0b:51:64:ff:57:9d:
c3:4f:0a:2a:b2:ab:82:e4:ed:d2:a9:a5:1f:b1:ef:
1d:26:95:bf:6f:51:8f:2d:7d:f2:ae:62:cb:31:5f:
7f:57:8b:fa:87:29:21:4a:82:74:7c:6f:ed:19:8f:
7d:f9:81:17:ac:38:c2:87:df:0a:74:f7:4c:d8:a6:
5e:9c:4f:fb:c1:6e:51:5c:91:b6:9c:b9:5d:eb:d7:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0E:E2:CD:1C:23:0F:B9:8B:C9:5D:FC:22:86:76:12:A2:47:3B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:30:5c:4a:49:01:d8:7f:5c:84:e4:64:0a:cf:3d:c5:ad:f9:
23:33:dc:9e:ae:ee:2f:e9:8b:62:68:fd:b3:7d:3e:f9:7c:8d:
d3:b4:d4:6e:bc:de:75:f6:d9:2a:be:62:1d:40:44:d6:22:0e:
47:24:8d:f8:77:7d:6a:eb:20:09:1d:7e:64:f6:fa:4a:9d:a2:
23:75:0e:cf:f6:f8:43:dc:c1:02:da:72:5b:fa:12:f1:be:ff:
a4:dd:41:cd:4b:93:c2:84:08:59:5a:35:99:9b:73:78:9f:b6:
b1:7c:d3:ba:cc:4e:bf:d5:cc:8d:f7:ad:51:12:64:f4:9c:81:
89:75:73:54:bb:4d:51:d0:cf:37:81:5f:bf:f7:20:c2:02:0b:
5a:38:9a:b5:34:f8:bb:45:b8:fc:70:85:a5:1d:b2:d5:c9:f9:
a0:4d:b6:ce:75:ff:66:c2:5f:7b:7a:1e:dd:52:ca:ed:e7:7a:
92:f4:b7:9d:88:8f:27:76:9c:7a:8b:8d:3b:3d:8a:52:ab:bc:
00:53:60:2e:5c:5e:5e:0f:9d:82:35:0e:8d:e9:21:d9:4d:75:
1c:df:8c:5c:f5:66:e3:b3:78:a7:03:15:82:ed:26:e5:b7:f5:
04:7e:8a:2c:e5:db:16:b3:42:ff:93:db:27:79:c8:a1:21:75:
03:25:e0:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1yUtVDYuYUIosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
M2U3ZDcwMjEtYjU1MC00YmM0LTg2MDAtMTUwY2Q3NWEzNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoCsNdaq0d7K0ZNovu5siACoFlqKcfbkT/u/
ijUWMjf3coAzKKSFEI2799Dvg5LBAXbs0yMuZA4OX9M1a9W7cXcuu0Vp1gOC5LYR
9WFt0c4ZuM2/raySYPv+hlhlZYltF2cDQh7z62OOdAUaEDL2U1htTeM/LyryBY/T
WIerK+u1ptpmzObk1tyGAUr4MDnSKJ3a5uqjYVKU4iiPN1I4zRzmuVvqrGxa2fpC
U2sLUWT/V53DTwoqsquC5O3SqaUfse8dJpW/b1GPLX3yrmLLMV9/V4v6hykhSoJ0
fG/tGY99+YEXrDjCh98KdPdM2KZenE/7wW5RXJG2nLld69ehLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwO4s0cIw+5i8ld/CKGdhKiRztUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNWZkNzQwYjAtMzZiNS0z
OTI0LWFiODktYmFmNzJiZTQzNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEowXEpJAdh/XITkZArPPcWt+SMz3J6u7i/pi2Jo/bN9Pvl8jdO01G68
3nX22Sq+Yh1ARNYiDkckjfh3fWrrIAkdfmT2+kqdoiN1Ds/2+EPcwQLaclv6EvG+
/6TdQc1Lk8KECFlaNZmbc3iftrF807rMTr/VzI33rVESZPScgYl1c1S7TVHQzzeB
X7/3IMICC1o4mrU0+LtFuPxwhaUdstXJ+aBNts51/2bCX3t6Ht1Syu3nepL0t52I
jyd2nHqLjTs9ilKrvABTYC5cXl4PnYI1Do3pIdlNdRzfjFz1ZuOzeKcDFYLtJuW3
9QR+iizl2xazQv+T2yd5yKEhdQMl4CQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:19 2025 by rpki-client