Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3a07cd18-be5e-3aaa-8693-5047415d1025.roa
File: 3a07cd18-be5e-3aaa-8693-5047415d1025.roa (raw, json)
Hash identifier: 12A8afXAUFoiA3/09UP9mZ1g1UZRPmXpTp3xZZhNsfk=
Subject key identifier: F3:0D:9D:31:20:C2:FC:7F:D5:A4:11:0A:74:96:E1:2C:07:DC:8A:73
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285848960B57581946C75A0FE47E80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3a07cd18-be5e-3aaa-8693-5047415d1025.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 20473
IP address blocks: 149.19.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:57:58:19:46:c7:5a:0f:e4:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=8be5dd8b-fd1f-4f42-b3b4-0422f250560d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:e3:3e:d9:db:1e:e5:1e:30:07:55:1c:c3:
d3:84:a4:a6:db:6f:99:9e:f1:c9:b4:f1:a2:94:f3:
ba:5a:8c:08:36:19:dd:26:b0:ce:76:f0:82:a1:2b:
31:a3:ba:84:60:a9:15:e5:62:c6:a2:05:6a:06:3b:
be:1f:bb:d6:95:80:06:bc:82:10:62:1e:9e:da:f2:
07:a7:24:a0:66:41:fe:7f:dd:e9:e1:27:3c:06:3c:
be:9c:de:bf:58:f7:ce:48:15:bb:e9:c0:af:e0:f4:
ae:d8:e9:3d:12:38:3b:cb:4e:9c:97:8a:80:02:5e:
f5:91:ac:b1:0e:1d:36:b6:8f:45:de:af:e3:20:ff:
3f:e3:32:5a:a7:a5:30:a4:61:a8:d5:e0:69:10:f1:
e9:8c:a4:4e:31:56:ab:2a:67:12:94:3b:c7:c9:d9:
b1:79:78:16:9a:88:34:c1:b3:cf:85:a5:42:29:98:
dc:f8:93:8f:d5:0a:38:be:67:c6:8e:45:e5:bd:9f:
fb:4c:af:db:44:e0:0d:aa:55:eb:87:86:c0:18:6c:
70:db:b4:6e:6d:53:37:06:75:b9:4b:c9:5c:e7:d0:
5f:bc:31:23:ef:31:43:6d:77:47:b5:55:81:0a:ef:
4c:c9:52:31:bf:cd:15:ab:45:d0:f1:b0:b1:39:2d:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:9D:31:20:C2:FC:7F:D5:A4:11:0A:74:96:E1:2C:07:DC:8A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3a07cd18-be5e-3aaa-8693-5047415d1025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.19.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:7e:58:b0:7d:41:a0:8e:1d:ef:a1:78:af:e0:14:c3:95:4b:
36:2c:f8:d5:06:9e:9e:43:3f:83:84:37:1e:e2:5b:fe:21:7f:
01:74:22:f2:09:58:33:bf:25:3d:0d:40:5d:ea:35:7b:39:c9:
b8:a9:7d:60:4e:0f:6e:7e:97:d2:da:f8:30:22:3e:42:f2:12:
a4:b7:94:ed:9c:60:67:88:7d:d2:c6:dd:a5:7b:0f:1a:55:ef:
c4:5c:1c:a0:e9:6e:d8:95:f7:2e:81:29:0a:97:3e:5f:a9:f7:
0d:ee:03:7e:05:6b:a1:2a:c9:86:47:6d:f0:e0:4e:5a:b9:3e:
d9:65:af:cd:c6:46:a9:5d:96:57:2d:eb:fe:16:f2:9a:41:aa:
f9:f8:17:70:5b:eb:02:d8:74:fc:77:81:af:9e:dd:6d:81:10:
f8:d7:00:1f:94:2f:b9:f1:42:f8:e7:43:98:95:f6:e9:c5:a9:
fc:bc:c5:f0:6c:36:f7:ff:44:32:04:31:0b:5e:6c:dc:8f:fe:
60:b5:bf:f8:51:df:39:b6:b9:99:f2:4a:36:e5:a8:1a:e6:24:
52:f9:04:8c:0a:c7:04:15:62:ff:28:2c:93:c2:ca:18:f7:03:
7e:b0:37:e1:1e:fb:b4:ce:61:1d:8e:8a:65:4c:9a:b5:c6:2e:
28:6c:9b:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1dYGUbHWg/kfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
OGJlNWRkOGItZmQxZi00ZjQyLWIzYjQtMDQyMmYyNTA1NjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKTjPtnbHuUeMAdVHMPThKSm22+ZnvHJtPGi
lPO6WowINhndJrDOdvCCoSsxo7qEYKkV5WLGogVqBju+H7vWlYAGvIIQYh6e2vIH
pySgZkH+f93p4Sc8Bjy+nN6/WPfOSBW76cCv4PSu2Ok9Ejg7y06cl4qAAl71kayx
Dh02to9F3q/jIP8/4zJap6UwpGGo1eBpEPHpjKROMVarKmcSlDvHydmxeXgWmog0
wbPPhaVCKZjc+JOP1Qo4vmfGjkXlvZ/7TK/bROANqlXrh4bAGGxw27RubVM3BnW5
S8lc59BfvDEj7zFDbXdHtVWBCu9MyVIxv80Vq0XQ8bCxOS2cpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMNnTEgwvx/1aQRCnSW4SwH3IpzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvM2EwN2NkMTgtYmU1ZS0z
YWFhLTg2OTMtNTA0NzQxNWQxMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1+WLB9QaCOHe+heK/gFMOVSzYs+NUGnp5DP4OENx7iW/4hfwF0IvIJ
WDO/JT0NQF3qNXs5ybipfWBOD25+l9La+DAiPkLyEqS3lO2cYGeIfdLG3aV7DxpV
78RcHKDpbtiV9y6BKQqXPl+p9w3uA34Fa6EqyYZHbfDgTlq5Ptllr83GRqldllct
6/4W8ppBqvn4F3Bb6wLYdPx3ga+e3W2BEPjXAB+UL7nxQvjnQ5iV9unFqfy8xfBs
Nvf/RDIEMQtebNyP/mC1v/hR3zm2uZnySjblqBrmJFL5BIwKxwQVYv8oLJPCyhj3
A36wN+Ee+7TOYR2OimVMmrXGLihsm+8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:28 2025 by rpki-client