Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
File: d0812d54-f0d3-311e-83ad-e1bce560e63f.roa (raw, json)
Hash identifier: o8G14YkC0sIowVMcW2UoldIOLmvxOousoP31exk6QPc=
Subject key identifier: 9D:69:95:BD:95:D0:3C:4A:41:AB:14:DE:B5:CC:EF:1E:C7:35:64:7D
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F43285848EF61489A402A82FCEB5ABD28
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 15404
IP address blocks: 148.188.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:48:9a:40:2a:82:fc:eb:5a:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=27a66d58-d453-4589-a934-3ad3a22532c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:97:19:51:b4:8a:c2:de:fb:dd:7b:8c:51:
75:56:be:62:da:a0:fa:5c:7f:de:6c:5d:94:36:f6:
82:fd:1b:af:74:f3:1e:c2:3b:6c:af:43:5d:9a:d5:
96:c6:e6:96:c7:48:67:68:ed:19:e2:97:16:6f:b4:
9c:5b:10:fa:64:cf:29:35:20:6a:2b:68:db:da:e0:
76:15:77:84:ee:e9:e4:2a:61:c6:2b:ac:1e:89:77:
50:66:9b:8e:de:5e:a7:a7:98:cb:40:8c:72:cc:97:
a2:20:61:b4:ee:bc:b3:81:50:93:68:0a:d7:57:98:
d3:ea:74:b3:0d:e0:b6:fa:43:1d:a9:a4:c3:43:70:
0d:3c:76:26:cd:b6:89:cb:32:ba:63:fd:7f:e0:90:
2f:b5:b9:be:94:7b:c2:02:c4:12:1d:c6:eb:b2:31:
99:9e:66:65:2d:48:97:55:a0:cc:f9:90:94:e6:40:
28:82:d0:12:11:6a:32:6b:74:69:e2:56:70:78:fe:
c4:b4:61:59:71:6f:3c:69:92:60:ea:34:dc:d2:94:
9c:4c:66:3a:0d:f7:59:b4:67:f9:a6:03:47:c5:78:
ee:c5:68:da:4b:23:2c:74:3d:a7:fb:19:c4:42:27:
4e:30:ff:7a:bc:73:a0:a0:86:63:60:e4:8f:c6:01:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:95:BD:95:D0:3C:4A:41:AB:14:DE:B5:CC:EF:1E:C7:35:64:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:0c:91:13:b1:8f:4a:b0:b9:0a:f0:d1:96:48:af:e7:c3:01:
c7:df:c8:50:2f:dc:44:2e:46:e7:4a:a8:cb:98:a4:f4:cf:f4:
df:92:16:33:50:ec:60:bb:e0:bb:9b:4c:83:5c:af:78:ee:22:
d5:73:20:a0:b4:b7:36:a7:77:2e:b2:08:e4:73:61:1f:ba:96:
54:48:b4:4e:5f:3a:6c:b6:7d:4a:0a:87:84:08:d4:29:e3:2b:
be:51:c5:13:ac:f1:34:a4:1c:02:f2:3f:cf:bd:1c:09:24:01:
91:81:e4:66:24:fa:e2:f2:52:4a:26:9b:04:69:3e:fe:aa:9a:
2e:f9:a3:a1:88:c2:3f:8a:d5:37:7b:64:fd:71:9a:f9:7f:03:
a2:aa:8f:26:e4:92:68:6e:62:9e:76:36:ee:a7:f1:02:49:1f:
81:3d:1e:78:9e:3f:af:92:26:db:a7:e3:24:20:27:9c:66:a1:
e5:75:d9:b7:8c:7a:ef:76:43:86:8f:51:d6:30:08:50:e9:ce:
da:05:6f:2a:ba:37:06:d2:59:e0:56:cb:25:fb:3e:1e:69:57:
b2:b3:be:81:ee:dc:4e:b5:10:b4:5d:c0:26:80:7e:f6:fa:83:
eb:1b:d4:4b:cc:76:03:24:7e:72:0e:47:9c:6c:38:ad:f2:e0:
c0:09:cc:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUiaQCqC/OtavSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw
OTQ4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
MjdhNjZkNTgtZDQ1My00NTg5LWE5MzQtM2FkM2EyMjUzMmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/SXGVG0isLe+917jFF1Vr5i2qD6XH/ebF2U
NvaC/RuvdPMewjtsr0NdmtWWxuaWx0hnaO0Z4pcWb7ScWxD6ZM8pNSBqK2jb2uB2
FXeE7unkKmHGK6weiXdQZpuO3l6np5jLQIxyzJeiIGG07ryzgVCTaArXV5jT6nSz
DeC2+kMdqaTDQ3ANPHYmzbaJyzK6Y/1/4JAvtbm+lHvCAsQSHcbrsjGZnmZlLUiX
VaDM+ZCU5kAogtASEWoya3Rp4lZweP7EtGFZcW88aZJg6jTc0pScTGY6DfdZtGf5
pgNHxXjuxWjaSyMsdD2n+xnEQidOMP96vHOgoIZjYOSPxgGTQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1plb2V0DxKQasU3rXM7x7HNWR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl
M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvZDA4MTJkNTQtZjBkMy0z
MTFlLTgzYWQtZTFiY2U1NjBlNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1
ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl
MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2
MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlLzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoMkROxj0qwuQrw0ZZIr+fDAcffyFAv3EQuRudKqMuYpPTP9N+SFjNQ
7GC74LubTINcr3juItVzIKC0tzandy6yCORzYR+6llRItE5fOmy2fUoKh4QI1Cnj
K75RxROs8TSkHALyP8+9HAkkAZGB5GYk+uLyUkommwRpPv6qmi75o6GIwj+K1Td7
ZP1xmvl/A6KqjybkkmhuYp52Nu6n8QJJH4E9HnieP6+SJtun4yQgJ5xmoeV12beM
eu92Q4aPUdYwCFDpztoFbyq6NwbSWeBWyyX7Ph5pV7KzvoHu3E61ELRdwCaAfvb6
g+sb1EvMdgMkfnIOR5xsOK3y4MAJzFg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:41 2025 by rpki-client