Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
File: 25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa (raw, json)
Hash identifier: EffVcQL1rVnCe5I5hyWc5bhOMWen5uDpx68iSyIXAxc=
Subject key identifier: EE:D1:71:C4:99:02:9D:AF:63:4C:7F:5B:86:DA:3D:65:CF:94:E7:48
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285849350EA98603814C3F3B68E100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 206092
IP address blocks: 149.19.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a9:86:03:81:4c:3f:3b:68:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=56dcd88d-9f24-4ff6-bc83-ca6288c75f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:90:29:c7:af:c7:a1:99:c7:65:bd:b8:e6:
bd:56:53:b0:e9:c5:e2:b9:a0:1f:ed:5b:16:a2:d7:
d8:d9:b0:48:20:e1:db:f4:cf:c5:8d:92:7a:d3:3a:
4f:09:b9:58:bb:21:91:05:e5:db:8f:01:11:64:3f:
b6:34:54:a3:d0:8a:2a:12:88:95:16:30:43:aa:78:
32:72:94:00:3a:9f:7a:0c:43:ab:41:06:be:85:87:
ee:65:d0:86:10:ae:c3:36:f6:24:a2:af:92:ef:25:
d4:70:61:0c:63:ae:d1:b6:2f:3d:cb:9c:8b:47:41:
e0:0c:5a:a9:0c:9d:60:f2:cb:40:e0:ac:2e:96:ef:
f2:19:1b:7c:55:ad:5b:ef:bd:fb:57:4b:44:29:04:
65:94:1d:05:c1:e6:5f:e2:ce:42:69:3c:4f:af:20:
ef:05:08:ed:35:23:b4:88:71:14:4f:c6:fc:d5:81:
0b:d5:50:4a:0e:84:f9:09:3e:8a:a9:7e:a0:e8:c4:
d1:75:3f:1c:79:4c:30:b8:50:62:7c:ea:c3:86:14:
6b:c3:cd:0d:04:3c:82:b6:5d:0f:75:0e:ec:03:a9:
e0:f6:88:85:78:f1:81:12:c1:a0:7f:a8:09:ca:16:
60:8e:35:5a:3a:6b:70:62:14:10:a4:98:54:bf:18:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:71:C4:99:02:9D:AF:63:4C:7F:5B:86:DA:3D:65:CF:94:E7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:be:35:2b:e0:20:90:a6:c0:7d:05:3c:ad:98:af:30:b2:1f:
23:ff:de:d9:d7:2b:9d:70:8e:04:55:d7:93:11:f5:ca:a6:9d:
3e:85:8b:f1:ec:0f:5e:f1:68:c7:fd:56:b5:fe:f0:f2:3e:a1:
37:23:35:a8:ca:ca:e8:9d:7a:2d:3b:e5:69:50:a4:db:26:2a:
5e:80:9d:d2:40:0f:9a:4e:01:81:23:77:f2:fc:47:7b:8b:d4:
81:a3:55:aa:a8:12:a4:48:6d:8b:86:3f:f0:f1:c9:f0:4f:ec:
c4:be:20:ad:20:e9:dd:7b:7f:f3:fb:3e:a7:fe:79:5c:e7:97:
10:df:db:1f:83:96:40:d7:24:9c:30:3c:56:e5:ba:a1:ed:69:
5a:a4:d2:fe:f3:e4:22:b6:0f:1b:85:b6:86:ff:56:6b:f4:63:
bb:2f:b9:84:22:25:3b:0f:20:39:d2:e8:1c:36:da:f0:cc:08:
84:9b:6e:a1:e3:d7:ab:32:e0:f5:8f:bf:8f:cc:d5:80:56:cc:
e2:ed:7f:24:f4:87:dd:c1:d3:c0:ee:1e:8b:2f:fd:00:3d:96:
ae:9e:17:21:f8:6f:68:a2:22:2e:89:e6:31:4c:4d:f4:d9:f6:
d4:46:38:9e:1c:05:44:e1:34:7a:00:35:52:a9:33:08:22:7a:
ee:17:15:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqmGA4FMPzto4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NTZkY2Q4OGQtOWYyNC00ZmY2LWJjODMtY2E2Mjg4Yzc1ZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPeQKcevx6GZx2W9uOa9VlOw6cXiuaAf7VsW
otfY2bBIIOHb9M/FjZJ60zpPCblYuyGRBeXbjwERZD+2NFSj0IoqEoiVFjBDqngy
cpQAOp96DEOrQQa+hYfuZdCGEK7DNvYkoq+S7yXUcGEMY67Rti89y5yLR0HgDFqp
DJ1g8stA4Kwulu/yGRt8Va1b7737V0tEKQRllB0FweZf4s5CaTxPryDvBQjtNSO0
iHEUT8b81YEL1VBKDoT5CT6KqX6g6MTRdT8ceUwwuFBifOrDhhRrw80NBDyCtl0P
dQ7sA6ng9oiFePGBEsGgf6gJyhZgjjVaOmtwYhQQpJhUvxirRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7RccSZAp2vY0x/W4baPWXPlOdIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjViNjBlM2EtOGFhZC0z
OWI1LWFhODItNThhMmZhNWZiZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFq+NSvgIJCmwH0FPK2YrzCyHyP/3tnXK51wjgRV15MR9cqmnT6Fi/Hs
D17xaMf9VrX+8PI+oTcjNajKyuidei075WlQpNsmKl6AndJAD5pOAYEjd/L8R3uL
1IGjVaqoEqRIbYuGP/DxyfBP7MS+IK0g6d17f/P7Pqf+eVznlxDf2x+DlkDXJJww
PFbluqHtaVqk0v7z5CK2DxuFtob/Vmv0Y7svuYQiJTsPIDnS6Bw22vDMCISbbqHj
16sy4PWPv4/M1YBWzOLtfyT0h93B08DuHosv/QA9lq6eFyH4b2iiIi6J5jFMTfTZ
9tRGOJ4cBUThNHoANVKpMwgieu4XFTI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:38 2025 by rpki-client