Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
File: da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa (raw, json)
Hash identifier: JzIKOUwxVxOAk6+NpiQzVbpz0dZqo6f+f7MM+un/zBs=
Subject key identifier: 73:FC:3E:BA:DF:53:4F:83:53:2F:1C:C8:B4:D5:57:DD:A1:BB:1B:D0
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285848D3765A4B217F282913890940
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 63199
IP address blocks: 148.153.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:5a:4b:21:7f:28:29:13:89:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=4b272ac5-6537-4656-9a58-f62c8b8da90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:c5:b0:53:78:43:8d:12:8b:15:1b:50:9d:
73:b8:f7:58:81:ba:91:b2:c3:40:25:30:7f:75:7f:
05:d2:ef:d9:50:af:0a:29:05:ce:c4:42:3c:3f:0f:
6d:9e:e8:a0:30:6a:6c:45:45:9e:a7:c3:b5:56:a3:
39:22:35:f8:b3:ca:78:20:bb:38:cc:05:db:27:dc:
0a:8c:2e:78:83:90:fc:ac:af:9a:83:0d:5a:f4:69:
a4:29:a4:a8:09:95:d8:1d:a5:23:e1:12:a7:59:d5:
2b:ff:d2:dc:2f:fa:9d:90:c9:5f:46:a9:6f:96:03:
f3:17:ca:2a:10:18:09:d1:d2:80:a7:cd:92:c8:85:
ca:e4:71:60:8f:8c:64:21:f3:d3:d2:43:71:2a:6e:
eb:9a:dc:57:d2:a2:3b:81:24:3d:4b:3b:ac:62:e2:
fd:07:5e:9d:78:93:cb:78:ca:6e:f2:de:71:61:cc:
fa:6a:8c:7b:36:5e:4a:f4:5d:2f:79:50:fc:4c:2a:
07:e6:b4:18:d6:45:a8:43:6c:93:69:a3:7f:62:19:
19:80:b4:fb:d5:c4:03:ba:a1:d9:8f:9c:4b:3f:1d:
9e:f8:a1:b3:10:27:17:d1:1d:02:27:1e:7a:84:86:
4f:68:bb:c4:45:ba:91:66:12:b4:90:9d:5f:65:eb:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:3E:BA:DF:53:4F:83:53:2F:1C:C8:B4:D5:57:DD:A1:BB:1B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:b5:ba:23:65:23:b4:be:df:25:08:88:f7:55:7d:8c:10:7a:
15:ec:62:27:30:2d:c2:00:46:30:cf:a9:95:2d:d2:30:b1:a1:
83:0a:60:c0:af:92:27:c4:31:3d:da:1e:08:0c:da:c6:4c:d7:
50:48:7a:8d:b2:37:10:a6:e2:42:b7:ee:8b:a2:b5:fe:64:ec:
da:13:ba:a1:a0:8f:e2:32:ac:fb:d6:bc:5f:ab:48:a7:71:ab:
ab:69:fc:00:8e:5b:7f:db:76:29:f8:cf:35:65:7e:25:5a:27:
c6:f0:a7:bc:71:7e:9d:26:69:63:ff:dd:54:a1:5f:a6:ce:aa:
b9:4a:c4:93:91:f8:32:a7:00:37:35:85:fa:10:31:d4:a7:4d:
77:fa:35:39:43:5e:62:7f:48:1f:98:c9:d4:11:a4:fa:55:d5:
16:c5:94:ef:e6:1c:af:be:6f:1d:06:ff:8f:0c:70:3a:d7:75:
2a:2d:95:c8:81:35:a7:b2:e9:8e:78:92:3f:fc:89:a3:f2:ea:
67:73:6a:a3:a8:30:ed:f1:d0:8c:19:79:8b:09:73:d2:d0:ba:
02:a5:55:96:a3:2d:af:ba:1d:e4:c0:22:f4:be:56:e0:89:f5:
55:9a:cc:5a:80:df:4e:29:66:58:f0:4b:66:5b:88:1d:0e:e3:
4f:d5:22:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlpLIX8oKROJCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk
NGIyNzJhYzUtNjUzNy00NjU2LTlhNTgtZjYyYzhiOGRhOTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge/FsFN4Q40SixUbUJ1zuPdYgbqRssNAJTB/
dX8F0u/ZUK8KKQXOxEI8Pw9tnuigMGpsRUWep8O1VqM5IjX4s8p4ILs4zAXbJ9wK
jC54g5D8rK+agw1a9GmkKaSoCZXYHaUj4RKnWdUr/9LcL/qdkMlfRqlvlgPzF8oq
EBgJ0dKAp82SyIXK5HFgj4xkIfPT0kNxKm7rmtxX0qI7gSQ9SzusYuL9B16deJPL
eMpu8t5xYcz6aox7Nl5K9F0veVD8TCoH5rQY1kWoQ2yTaaN/YhkZgLT71cQDuqHZ
j5xLPx2e+KGzECcX0R0CJx56hIZPaLvERbqRZhK0kJ1fZeuM5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHP8PrrfU0+DUy8cyLTVV92huxvQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGE2MjliZGItYzY0Yy0z
Y2JlLWFlOWMtMjgyNGJhNThiYmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHS1uiNlI7S+3yUIiPdVfYwQehXsYicwLcIARjDPqZUt0jCxoYMKYMCv
kifEMT3aHggM2sZM11BIeo2yNxCm4kK37ouitf5k7NoTuqGgj+IyrPvWvF+rSKdx
q6tp/ACOW3/bdin4zzVlfiVaJ8bwp7xxfp0maWP/3VShX6bOqrlKxJOR+DKnADc1
hfoQMdSnTXf6NTlDXmJ/SB+YydQRpPpV1RbFlO/mHK++bx0G/48McDrXdSotlciB
Naey6Y54kj/8iaPy6mdzaqOoMO3x0IwZeYsJc9LQugKlVZajLa+6HeTAIvS+VuCJ
9VWazFqA304pZljwS2ZbiB0O40/VInA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:45 2025 by rpki-client