Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa
File: 4acda3a4-e641-396a-9a6f-a18db1280ee8.roa (raw, json)
Hash identifier: 95XJ8L2CTRbtEQEXpx6Xz+mpK/bvlNvBWvitYxU8vVk=
Subject key identifier: 63:25:87:FF:29:94:99:3A:8B:E1:68:31:7B:E7:63:85:C5:BA:06:F2
Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial: 010D0C9F4328584902EC2DF53EC7260E52C64340
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 0
IP address blocks: 149.112.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2d:f5:3e:c7:26:0e:52:c6:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=48528e7c-abc9-41fa-8199-3439233164b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:66:9a:c2:9a:aa:d4:cf:9e:09:ac:14:80:
42:6f:bd:54:64:a3:f2:14:4e:e5:79:65:94:71:a0:
02:4d:42:02:68:10:1b:a6:9d:ae:b0:c1:c1:3b:5e:
7e:c9:8b:b5:f1:be:52:86:cb:e2:d3:fe:61:94:81:
d6:2d:14:b5:13:65:bd:bb:ca:87:c3:22:99:91:ab:
2c:17:68:1e:0d:cd:08:a0:a6:3c:24:fb:6f:52:5b:
73:58:73:65:40:11:14:26:f4:6e:88:c8:0b:73:df:
18:9b:e9:6a:c7:e9:1e:20:a8:bc:75:d6:b1:5e:c0:
d0:1a:86:4e:d6:9c:e1:38:39:4b:41:f5:44:d2:c9:
55:71:37:71:8c:24:6c:ae:b6:e9:a5:cf:c4:fc:4e:
77:65:cc:cd:6e:74:99:7a:ed:bd:37:00:27:7f:35:
4a:72:d8:6d:f4:39:18:fa:f8:57:f5:6b:fc:ac:72:
87:ab:50:58:56:49:ca:36:4b:84:98:c7:01:06:3d:
f2:08:f2:7d:73:e6:86:ed:9a:41:d9:bd:d7:57:4c:
c8:00:9f:be:4c:4d:4d:49:48:0e:39:e9:f5:0e:ad:
b7:54:36:be:9a:42:b4:70:d1:43:4b:fb:6d:0d:a3:
99:93:ba:c0:5a:8a:22:7d:08:b7:47:83:5c:b9:c3:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:87:FF:29:94:99:3A:8B:E1:68:31:7B:E7:63:85:C5:BA:06:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
X509v3 Authority Key Identifier:
keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:47:22:fe:ad:6b:36:99:27:d0:97:fe:3e:38:e8:f1:fc:73:
a0:66:30:18:c7:da:f2:ca:77:2e:d3:fb:a9:dc:5d:61:43:5f:
2c:20:ef:9e:80:5b:73:02:6e:4a:aa:fb:9f:4f:9d:51:72:14:
12:d4:9b:7e:49:33:74:a8:e2:4c:d2:61:9c:4a:3a:65:b3:f7:
cf:fe:e9:22:46:87:a3:37:67:8c:11:47:f2:2c:94:fc:44:4a:
8c:c1:95:10:1a:af:f1:ec:0b:2a:20:8d:87:22:26:e8:5b:02:
0c:53:e1:c6:71:82:d1:39:e3:6f:c2:4d:6b:e5:d2:90:91:aa:
6d:5c:7b:86:5d:12:6b:0c:f4:04:32:f3:ea:73:0f:2d:80:d9:
e1:3f:31:67:b7:14:b2:6c:57:77:93:d8:40:68:0e:a7:b8:2a:
75:b4:67:b6:7d:58:c8:81:41:65:05:78:a0:c6:e2:54:6f:11:
87:d4:09:d9:99:3a:ce:55:a9:b9:f4:69:97:72:1b:9a:43:bb:
98:b5:2e:70:9b:b2:22:44:45:50:85:64:f9:66:03:d3:94:f9:
6e:3f:27:89:6d:7b:8c:78:5d:0f:5c:37:ff:65:35:8e:87:cc:
4d:3f:ae:bb:b9:b6:c1:36:14:85:66:15:01:0e:32:f2:9a:52:
3a:25:a0:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C31PscmDlLGQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz
NWY3MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NDg1MjhlN2MtYWJjOS00MWZhLTgxOTktMzQzOTIzMzE2NGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiudmmsKaqtTPngmsFIBCb71UZKPyFE7leWWU
caACTUICaBAbpp2usMHBO15+yYu18b5Shsvi0/5hlIHWLRS1E2W9u8qHwyKZkass
F2geDc0IoKY8JPtvUltzWHNlQBEUJvRuiMgLc98Ym+lqx+keIKi8ddaxXsDQGoZO
1pzhODlLQfVE0slVcTdxjCRsrrbppc/E/E53ZczNbnSZeu29NwAnfzVKctht9DkY
+vhX9Wv8rHKHq1BYVknKNkuEmMcBBj3yCPJ9c+aG7ZpB2b3XV0zIAJ++TE1NSUgO
Oen1Dq23VDa+mkK0cNFDS/ttDaOZk7rAWooifQi3R4NcucNjPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMlh/8plJk6i+FoMXvnY4XFugbyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl
YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvNGFjZGEzYTQtZTY0MS0z
OTZhLTlhNmYtYTE4ZGIxMjgwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1
MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2
MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2
NTFlNjM1ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXByMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlHIv6tazaZJ9CX/j446PH8c6BmMBjH2vLKdy7T+6ncXWFDXywg756A
W3MCbkqq+59PnVFyFBLUm35JM3So4kzSYZxKOmWz98/+6SJGh6M3Z4wRR/IslPxE
SozBlRAar/HsCyogjYciJuhbAgxT4cZxgtE542/CTWvl0pCRqm1ce4ZdEmsM9AQy
8+pzDy2A2eE/MWe3FLJsV3eT2EBoDqe4KnW0Z7Z9WMiBQWUFeKDG4lRvEYfUCdmZ
Os5Vqbn0aZdyG5pDu5i1LnCbsiJERVCFZPlmA9OU+W4/J4lte4x4XQ9cN/9lNY6H
zE0/rru5tsE2FIVmFQEOMvKaUjoloPo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:03 2025 by rpki-client