Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd609b9e-0b37-3ed2-96d9-60ee067a362c.roa
File: bd609b9e-0b37-3ed2-96d9-60ee067a362c.roa (raw, json)
Hash identifier: 0nkLa1d7cLIe2i8JAcDmDY/QFS1iwZMegPd4q/X91AM=
Subject key identifier: 37:73:7D:DD:22:43:84:E4:D3:7D:85:F8:16:58:6D:2B:60:82:76:0E
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848FD56BBCB4E794EC861A6D300
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd609b9e-0b37-3ed2-96d9-60ee067a362c.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 147.185.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bb:cb:4e:79:4e:c8:61:a6:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=4b832b44-9e74-412f-b0d0-30c203d76f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:a0:5c:f8:a6:c2:be:ce:3b:02:ee:71:89:
60:14:4d:21:bd:73:25:29:81:f2:c8:47:41:c8:b9:
70:6f:30:0f:b2:52:2e:48:d8:47:cf:24:2f:2e:21:
03:97:8e:74:44:25:3f:80:be:97:ad:b5:bb:59:e6:
f0:0a:6e:30:c7:50:63:e3:55:17:bb:bc:e8:7e:41:
cb:b1:53:fe:2b:28:e2:ad:fc:eb:28:ca:d7:65:23:
a5:20:31:5d:c6:65:6f:cd:45:f1:93:f2:9e:03:fe:
9d:97:82:54:d6:99:8a:e6:78:73:7f:82:89:82:96:
80:8c:68:75:7e:0d:33:cb:98:92:87:7e:de:8e:59:
b3:63:55:a2:69:10:9c:57:50:c0:1c:28:7e:63:a7:
fc:7e:78:01:72:56:77:b7:26:e7:8e:1a:94:b6:8c:
7c:99:f6:73:20:53:28:27:fe:c6:df:ea:28:be:b7:
4e:d9:4c:5b:bf:76:00:e3:4d:a9:13:86:c1:3c:a2:
01:38:22:b3:ae:03:4e:da:8b:42:a7:28:4a:64:f3:
24:e6:32:35:50:a9:d7:d1:82:92:50:e4:94:16:32:
6c:9f:68:0c:a6:38:7b:94:48:dc:77:ef:7a:38:1a:
b1:4a:a7:1d:7a:a4:ae:8d:9c:3a:cb:ff:1c:b6:ed:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:7D:DD:22:43:84:E4:D3:7D:85:F8:16:58:6D:2B:60:82:76:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd609b9e-0b37-3ed2-96d9-60ee067a362c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
147.185.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:0a:e4:c2:ba:52:91:44:94:1b:a4:b9:a3:01:e4:50:7a:c2:
8f:89:f0:31:89:21:f4:b5:93:ce:a1:c1:06:c4:6e:20:e5:51:
9c:11:3e:97:96:f1:2e:08:3d:51:b6:03:2b:72:c4:dd:f5:b5:
57:a2:64:f8:9e:fd:e6:fc:2e:a0:86:93:1f:8e:64:d4:81:b2:
8d:5c:f1:b8:3d:81:cc:a6:35:a0:95:28:29:6b:cb:50:b0:25:
a9:51:ef:53:13:90:7a:31:34:33:31:1f:20:30:61:a7:b8:41:
d9:13:9c:a3:00:5e:29:0d:e1:ac:ca:a1:de:4c:b1:6b:29:f7:
a3:d0:1c:ac:8d:53:50:0e:23:85:65:c7:ff:ac:49:e1:00:16:
13:db:a3:ae:18:70:74:f5:d2:45:53:65:da:a6:83:3c:c0:ff:
e1:e4:b5:ca:a5:75:83:5a:44:d2:9f:71:74:99:37:11:2d:6d:
d9:10:5e:36:44:96:41:00:06:fa:b7:0e:dc:92:d4:83:ba:43:
73:14:79:43:94:15:42:9f:18:8b:ea:98:ff:76:b6:ad:46:e2:
fe:f2:2c:85:2c:18:a9:c3:6b:f7:81:01:12:6a:a6:05:79:bb:
b5:14:5a:be:ab:03:2e:1e:0a:76:f6:c8:6b:bb:3f:df:fe:23:
22:03:61:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrvLTnlOyGGm0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGI4MzJiNDQtOWU3NC00MTJmLWIwZDAtMzBjMjAzZDc2ZjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92gXPimwr7OOwLucYlgFE0hvXMlKYHyyEdB
yLlwbzAPslIuSNhHzyQvLiEDl450RCU/gL6XrbW7WebwCm4wx1Bj41UXu7zofkHL
sVP+KyjirfzrKMrXZSOlIDFdxmVvzUXxk/KeA/6dl4JU1pmK5nhzf4KJgpaAjGh1
fg0zy5iSh37ejlmzY1WiaRCcV1DAHCh+Y6f8fngBclZ3tybnjhqUtox8mfZzIFMo
J/7G3+oovrdO2Uxbv3YA402pE4bBPKIBOCKzrgNO2otCpyhKZPMk5jI1UKnX0YKS
UOSUFjJsn2gMpjh7lEjcd+96OBqxSqcdeqSujZw6y/8ctu01zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdzfd0iQ4Tk032F+BZYbStggnYOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmQ2MDliOWUtMGIzNy0z
ZWQyLTk2ZDktNjBlZTA2N2EzNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMK5MK6UpFElBukuaMB5FB6wo+J8DGJIfS1k86hwQbEbiDlUZwRPpeW
8S4IPVG2AytyxN31tVeiZPie/eb8LqCGkx+OZNSBso1c8bg9gcymNaCVKClry1Cw
JalR71MTkHoxNDMxHyAwYae4QdkTnKMAXikN4azKod5MsWsp96PQHKyNU1AOI4Vl
x/+sSeEAFhPbo64YcHT10kVTZdqmgzzA/+HktcqldYNaRNKfcXSZNxEtbdkQXjZE
lkEABvq3DtyS1IO6Q3MUeUOUFUKfGIvqmP92tq1G4v7yLIUsGKnDa/eBARJqpgV5
u7UUWr6rAy4eCnb2yGu7P9/+IyIDYVk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:34 2025 by rpki-client