Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json)
Hash identifier: 0QlnXFvCeih9Zip6rKiKu1VMS2pJywyOUFjDq7GLF50=
Subject key identifier: 4E:0A:F6:CE:99:8E:D0:13:6A:81:91:4A:D0:73:AD:FA:D1:F5:D5:49
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848FA8BE9FE63B5185EC9B50700
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
Signing time: Sun 23 Feb 2025 14:00:51 +0000
ROA not before: Sun 23 Feb 2025 14:00:51 +0000
ROA not after: Sat 24 May 2025 13:00:51 +0000
asID: 15404
IP address blocks: 148.188.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fa:8b:e9:fe:63:b5:18:5e:c9:b5:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Feb 23 14:00:51 2025 GMT
Not After : May 24 13:00:51 2025 GMT
Subject: CN=ea9519ce-085c-4e2f-9e2a-a90459dc3a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:2a:22:5a:8b:b3:db:3d:9b:0b:c8:bb:07:
6b:12:b8:86:23:95:73:05:9b:a3:e5:c2:f1:29:0e:
24:ca:34:16:18:2e:89:bc:c4:6f:e8:ee:0d:29:92:
f9:54:79:0e:65:c5:02:74:ab:23:85:23:4e:7a:da:
57:33:5c:a2:00:9d:9b:f9:b6:4e:9b:fd:0b:d5:19:
85:e0:20:22:3e:e1:53:17:6f:40:ee:a7:84:26:5e:
56:9a:4c:40:82:bf:75:d4:c2:7c:42:71:0d:c7:5e:
02:50:9c:ee:57:f4:6a:f8:5d:eb:8a:ff:03:3c:fc:
7d:3d:83:a5:d1:27:50:45:9a:85:b7:9c:31:b9:76:
78:3a:5d:cc:45:d3:a9:06:95:69:da:64:93:40:f6:
f0:a4:7b:8f:2b:5d:8d:b4:0d:97:68:94:19:15:23:
aa:e0:49:10:63:32:6d:2e:17:17:cb:fc:6f:df:c7:
86:01:76:a9:02:20:e5:fe:33:ed:e6:5c:73:f8:15:
bc:28:a3:33:61:38:c5:9e:4c:b8:bc:55:d6:4e:97:
65:f6:62:b6:94:3b:30:42:51:db:b7:b1:39:15:50:
a3:2b:a4:49:7f:83:f4:26:9e:78:92:4e:2f:23:e5:
c8:64:c3:21:71:cb:eb:db:e9:88:3b:73:99:f9:a6:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:F6:CE:99:8E:D0:13:6A:81:91:4A:D0:73:AD:FA:D1:F5:D5:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:63:7d:51:7b:38:fb:1f:de:3c:dd:a7:99:16:09:13:ba:82:
6c:48:59:3f:46:04:e7:1e:d9:c5:81:b4:db:14:0d:dc:46:5b:
6d:1d:50:23:c8:76:02:2f:d3:87:e7:b4:e0:6a:9b:96:3e:14:
f0:1f:b7:8a:fc:e6:35:4a:a1:1c:91:2e:67:60:2f:3c:b3:12:
4c:23:62:ae:76:15:5f:93:9f:5f:68:83:e9:af:54:9f:88:f3:
75:e4:89:97:23:3a:3e:db:c1:12:b1:4f:7c:5a:c3:bc:02:5c:
68:e2:db:03:39:76:e3:88:d7:0a:b4:01:6a:6d:78:52:52:46:
1b:5f:86:2d:cf:1a:32:3a:ff:7a:3d:12:b9:4a:e0:7c:e6:06:
3b:4a:1d:0b:3e:21:b4:65:9e:77:22:25:4d:8a:0f:e5:5d:f0:
55:49:98:81:47:d8:48:b2:d7:09:a1:dc:59:c6:07:8f:89:0f:
c9:db:19:5a:95:3f:6b:2a:8e:f4:40:f5:ac:f5:cf:8b:00:28:
29:bc:e8:6f:de:c4:20:67:eb:ed:ac:7b:24:b1:6a:dd:14:73:
4c:39:8c:80:37:0f:d4:45:c2:36:af:23:d7:c2:93:fa:aa:a2:
6e:89:4d:e3:d3:20:df:3d:17:67:37:68:d8:42:bf:80:c3:59:
c7:e5:4e:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj6i+n+Y7UYXsm1BwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw
OTQ4MB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZWE5NTE5Y2UtMDg1Yy00ZTJmLTllMmEtYTkwNDU5ZGMzYTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OUqIlqLs9s9mwvIuwdrEriGI5VzBZuj5cLx
KQ4kyjQWGC6JvMRv6O4NKZL5VHkOZcUCdKsjhSNOetpXM1yiAJ2b+bZOm/0L1RmF
4CAiPuFTF29A7qeEJl5WmkxAgr911MJ8QnENx14CUJzuV/Rq+F3riv8DPPx9PYOl
0SdQRZqFt5wxuXZ4Ol3MRdOpBpVp2mSTQPbwpHuPK12NtA2XaJQZFSOq4EkQYzJt
LhcXy/xv38eGAXapAiDl/jPt5lxz+BW8KKMzYTjFnky4vFXWTpdl9mK2lDswQlHb
t7E5FVCjK6RJf4P0Jp54kk4vI+XIZMMhccvr2+mIO3OZ+aYrcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4K9s6ZjtATaoGRStBzrfrR9dVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl
M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z
NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1
ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl
MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2
MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZjfVF7OPsf3jzdp5kWCRO6gmxIWT9GBOce2cWBtNsUDdxGW20dUCPI
dgIv04fntOBqm5Y+FPAft4r85jVKoRyRLmdgLzyzEkwjYq52FV+Tn19og+mvVJ+I
83XkiZcjOj7bwRKxT3xaw7wCXGji2wM5duOI1wq0AWpteFJSRhtfhi3PGjI6/3o9
ErlK4HzmBjtKHQs+IbRlnnciJU2KD+Vd8FVJmIFH2Eiy1wmh3FnGB4+JD8nbGVqV
P2sqjvRA9az1z4sAKCm86G/exCBn6+2seySxat0Uc0w5jIA3D9RFwjavI9fCk/qq
om6JTePTIN89F2c3aNhCv4DDWcflTnI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:39 2025 by rpki-client