Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/5938bb42-9340-3644-8e93-a9b364db3d1b.roa
File: 5938bb42-9340-3644-8e93-a9b364db3d1b.roa (raw, json)
Hash identifier: efGVCaigA71V960xO0E/Cqgure5YOL3kTtK4nCjJj5I=
Subject key identifier: 67:BF:AE:32:48:D6:81:D2:C8:39:48:F2:BA:85:CF:E7:70:79:9F:49
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285847C49FA95DE65968F68A8D0D00
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/5938bb42-9340-3644-8e93-a9b364db3d1b.roa
Signing time: Mon 04 Nov 2024 13:40:05 +0000
ROA not before: Mon 04 Nov 2024 13:40:05 +0000
ROA not after: Sun 02 Feb 2025 13:40:05 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c4:9f:a9:5d:e6:59:68:f6:8a:8d:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Nov 4 13:40:05 2024 GMT
Not After : Feb 2 13:40:05 2025 GMT
Subject: CN=3b5a6633-73ce-4649-983f-7d87f9488876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:6f:ce:1c:53:a7:a1:f1:9d:7b:f1:6f:62:
f0:d5:d8:b6:1f:39:52:cb:09:29:17:eb:02:7c:7f:
be:62:f2:80:7c:8b:44:ee:0f:3a:a1:5e:69:70:e3:
c1:65:a9:58:b5:53:cf:65:fc:3a:77:9f:91:33:ba:
14:0c:78:a9:10:41:e8:28:5c:de:28:3a:41:dd:f2:
aa:e5:ad:57:14:da:b2:c7:a7:82:db:a7:8b:47:63:
63:d5:d1:d4:88:7f:81:d9:2a:d9:31:8e:a5:42:84:
fb:65:b2:ba:96:98:79:f0:40:69:6e:a9:ab:1f:9b:
a5:b6:9c:0e:ce:e0:7c:b0:b0:01:53:ff:bc:21:8d:
97:66:3e:17:16:1a:dc:51:0e:f1:ff:a5:ef:8e:db:
bc:05:2e:56:77:b1:06:38:83:16:1a:3a:9a:6b:74:
cf:fa:a7:89:bd:8c:c4:e2:cf:e6:3b:16:74:77:32:
47:5a:25:0a:67:7d:ed:c3:18:bf:86:28:e6:b1:d6:
36:29:5a:8a:08:4c:fe:c1:3f:4f:01:e9:72:fc:4e:
08:13:05:0d:2b:69:8e:b7:7b:8b:b9:7b:1d:d7:97:
5d:92:45:67:dc:a2:39:de:b9:ad:4b:8c:36:f7:77:
95:af:47:5a:d6:fa:8e:b5:4f:fc:16:4b:7b:f7:45:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:AE:32:48:D6:81:D2:C8:39:48:F2:BA:85:CF:E7:70:79:9F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/5938bb42-9340-3644-8e93-a9b364db3d1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:23:5a:81:b2:b5:be:a6:30:05:e4:c7:86:ee:b7:6f:b6:aa:
ad:a8:90:66:7a:fd:6f:c0:6d:c0:80:0f:66:0c:6f:22:ac:5b:
3b:ba:ad:36:45:a2:ce:a1:31:0a:2a:15:fb:76:b2:1a:ac:87:
87:d9:94:e0:cf:ac:e7:81:cd:78:07:66:94:03:14:22:68:cb:
03:89:2a:07:9d:91:30:db:b0:6d:c5:56:ef:ca:f7:b0:58:41:
26:c0:92:31:f9:29:9b:8e:db:92:27:a8:8e:58:95:89:9c:23:
0e:de:e4:7c:59:35:20:27:7f:fa:d4:f4:0c:4d:42:c8:72:f7:
9e:c6:7b:d5:c1:d6:37:e6:6f:50:bb:b4:81:85:09:c1:db:9e:
70:d7:81:b8:1a:4c:63:3c:48:f3:a2:ce:dd:d8:2b:53:69:62:
ea:9b:e7:b7:ac:10:63:8a:68:7f:29:8b:fa:f5:46:43:93:1d:
93:3b:5d:3d:85:90:ba:8f:85:15:cf:34:bd:6f:19:fe:8e:2c:
d4:0f:9b:18:0d:34:03:d8:6a:a6:69:e0:3d:59:4c:01:cf:6e:
b4:07:49:72:67:a8:09:bb:1a:2b:80:a9:a3:50:d7:c9:1c:e9:
7b:1c:f6:65:1c:b8:b2:02:2b:b7:be:b9:bc:5d:f2:62:bd:d7:
a8:c6:f3:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEn6ld5llo9oqNDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EzMDk1YzUtZmI2YS00NDAwLWJiNzQtYjU1ZWZmMjA3
M2JjMB4XDTI0MTEwNDEzNDAwNVoXDTI1MDIwMjEzNDAwNVowLzEtMCsGA1UEAxMk
M2I1YTY2MzMtNzNjZS00NjQ5LTk4M2YtN2Q4N2Y5NDg4ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ahvzhxTp6HxnXvxb2Lw1di2HzlSywkpF+sC
fH++YvKAfItE7g86oV5pcOPBZalYtVPPZfw6d5+RM7oUDHipEEHoKFzeKDpB3fKq
5a1XFNqyx6eC26eLR2Nj1dHUiH+B2SrZMY6lQoT7ZbK6lph58EBpbqmrH5ultpwO
zuB8sLABU/+8IY2XZj4XFhrcUQ7x/6Xvjtu8BS5Wd7EGOIMWGjqaa3TP+qeJvYzE
4s/mOxZ0dzJHWiUKZ33twxi/hijmsdY2KVqKCEz+wT9PAely/E4IEwUNK2mOt3uL
uXsd15ddkkVn3KI53rmtS4w293eVr0da1vqOtU/8Fkt790XWZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGe/rjJI1oHSyDlI8rqFz+dweZ9JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMw
OTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVlZmYyMDczYmMvNTkzOGJiNDItOTM0MC0z
NjQ0LThlOTMtYTliMzY0ZGIzZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2EzMDk1YzUtZmI2YS00NDAwLWJi
NzQtYjU1ZWZmMjA3M2JjLzNhMzA5NWM1LWZiNmEtNDQwMC1iYjc0LWI1NWVmZjIw
NzNiYy5jcmwwHwYDVR0jBBgwFoAUEKDh9Rb7dXUfndOPAC3OFb53TqIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYTMwOTVjNS1mYjZhLTQ0MDAtYmI3NC1iNTVl
ZmYyMDczYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgjWoGytb6mMAXkx4but2+2qq2okGZ6/W/AbcCAD2YMbyKsWzu6rTZF
os6hMQoqFft2shqsh4fZlODPrOeBzXgHZpQDFCJoywOJKgedkTDbsG3FVu/K97BY
QSbAkjH5KZuO25InqI5YlYmcIw7e5HxZNSAnf/rU9AxNQshy957Ge9XB1jfmb1C7
tIGFCcHbnnDXgbgaTGM8SPOizt3YK1NpYuqb57esEGOKaH8pi/r1RkOTHZM7XT2F
kLqPhRXPNL1vGf6OLNQPmxgNNAPYaqZp4D1ZTAHPbrQHSXJnqAm7GiuAqaNQ18kc
6Xsc9mUcuLICK7e+ubxd8mK916jG8zo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:56 2025 by rpki-client