Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/544454e1-7b81-3bd5-8608-bb5a53a05170.roa
File: 544454e1-7b81-3bd5-8608-bb5a53a05170.roa (raw, json)
Hash identifier: GQkBYSEqDx8Yy5921qihXO4owdIlr8B3UVUmqWNvxWg=
Subject key identifier: 2C:B0:2F:71:C0:C2:23:C2:F1:A9:C9:F7:D5:89:ED:18:27:FD:D6:3C
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848CB164AD6B92AED688E336460
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/544454e1-7b81-3bd5-8608-bb5a53a05170.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 28920
IP address blocks: 149.143.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4a:d6:b9:2a:ed:68:8e:33:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=5a3318ce-d7a1-406a-bf8f-6703019d68e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:7f:31:d6:48:a9:38:b1:2c:94:09:10:6d:
40:50:2e:df:a0:47:dd:4d:b4:e6:44:32:02:80:63:
72:d7:a9:d3:39:b5:3c:6f:04:5e:a4:71:d7:5a:e7:
e1:fa:81:57:61:71:da:e3:1c:7e:b3:91:7e:cd:5b:
69:04:05:7b:49:aa:6d:76:d2:9b:65:81:53:15:80:
c7:f0:e5:84:0e:86:cd:9a:93:25:3e:e8:b7:d3:1d:
4e:85:0c:0a:c9:0f:e7:c7:50:dd:88:f8:20:7b:f3:
38:89:43:33:74:e6:cd:6c:a5:29:86:a1:25:25:71:
3c:91:73:4e:2e:88:69:14:39:99:b6:c9:29:76:7f:
17:9f:07:c5:85:e7:0c:65:49:04:0b:fd:2a:d7:49:
4c:62:90:da:89:52:36:f0:e6:79:0d:dd:95:e6:db:
b2:1e:d0:92:14:bd:d1:b0:10:f8:60:7d:78:ee:e5:
7d:b7:9f:51:6d:5a:1f:d5:dd:87:ec:ec:f9:94:68:
e5:82:44:0b:1f:46:5b:5b:93:7a:38:e5:0b:70:b3:
78:5e:fb:9f:a0:0b:30:91:a9:d6:a0:1e:b4:0f:06:
de:4a:3e:48:93:ef:92:b2:1e:69:0c:1f:45:f6:31:
78:46:7c:47:a7:21:cb:3e:2d:ba:5c:f3:d5:f7:c8:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:2F:71:C0:C2:23:C2:F1:A9:C9:F7:D5:89:ED:18:27:FD:D6:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/544454e1-7b81-3bd5-8608-bb5a53a05170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f8:cd:75:f8:8a:04:4c:3c:aa:a0:d3:b6:66:6e:61:f0:cb:
c4:bf:d7:47:87:56:26:04:c2:46:f8:59:31:8c:55:e4:93:9b:
aa:4b:87:ab:49:b1:5b:d6:bd:c2:44:c4:41:c9:41:95:56:29:
01:89:ee:a4:93:4c:03:ca:a2:91:d9:ee:e7:e3:5f:5c:82:2b:
06:57:72:7f:0f:9f:8d:82:d9:5c:5e:8e:51:a6:16:f8:2d:93:
0f:4a:a1:f4:bb:04:4c:aa:f3:4a:62:e6:9f:45:f8:ce:7d:55:
b7:bb:cd:48:85:e8:6f:15:44:d7:a9:3c:e8:52:c1:d3:61:dc:
69:76:74:09:59:16:35:40:91:70:af:54:44:d4:00:b4:09:2d:
8b:58:4a:b7:30:47:ef:19:5f:cd:94:ef:42:36:59:92:fd:c3:
85:8f:c0:d7:31:51:b9:31:0c:67:87:5f:64:0f:b5:fd:b9:bc:
0b:01:5d:d5:40:cd:7c:21:cf:85:e4:df:b9:19:06:51:e0:c7:
6e:e9:8d:03:15:3c:87:31:0c:71:15:1e:37:01:a4:d9:e8:6d:
00:18:d5:2d:ea:c4:98:55:4f:c6:cc:1b:7a:3c:3e:a6:bd:44:
b9:03:cc:92:cb:24:4e:39:7e:94:4f:7f:b3:dd:15:50:3a:10:
36:51:f2:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFkrWuSrtaI4zZGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NWEzMzE4Y2UtZDdhMS00MDZhLWJmOGYtNjcwMzAxOWQ2OGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrZ/MdZIqTixLJQJEG1AUC7foEfdTbTmRDIC
gGNy16nTObU8bwRepHHXWufh+oFXYXHa4xx+s5F+zVtpBAV7SaptdtKbZYFTFYDH
8OWEDobNmpMlPui30x1OhQwKyQ/nx1DdiPgge/M4iUMzdObNbKUphqElJXE8kXNO
LohpFDmZtskpdn8XnwfFhecMZUkEC/0q10lMYpDaiVI28OZ5Dd2V5tuyHtCSFL3R
sBD4YH147uV9t59RbVof1d2H7Oz5lGjlgkQLH0ZbW5N6OOULcLN4XvufoAswkanW
oB60DwbeSj5Ik++Ssh5pDB9F9jF4RnxHpyHLPi26XPPV98iPlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCywL3HAwiPC8anJ99WJ7Rgn/dY8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTQ0NDU0ZTEtN2I4MS0z
YmQ1LTg2MDgtYmI1YTUzYTA1MTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlY+WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC74zXX4igRMPKqg07ZmbmHwy8S/10eHViYEwkb4WTGMVeSTm6pLh6tJ
sVvWvcJExEHJQZVWKQGJ7qSTTAPKopHZ7ufjX1yCKwZXcn8Pn42C2VxejlGmFvgt
kw9KofS7BEyq80pi5p9F+M59Vbe7zUiF6G8VRNepPOhSwdNh3Gl2dAlZFjVAkXCv
VETUALQJLYtYSrcwR+8ZX82U70I2WZL9w4WPwNcxUbkxDGeHX2QPtf25vAsBXdVA
zXwhz4Xk37kZBlHgx27pjQMVPIcxDHEVHjcBpNnobQAY1S3qxJhVT8bMG3o8Pqa9
RLkDzJLLJE45fpRPf7PdFVA6EDZR8gc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:43 2025 by rpki-client