Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa
File: 84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa (raw, json)
Hash identifier: 4OfiyzRKcpUvLCtK1FA5TEEyOCuMqqHKbjHgYDlrtsQ=
Subject key identifier: 4A:A9:77:CC:70:0E:67:54:D3:BA:FB:A0:E8:3C:1C:C8:16:2F:80:01
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285848A29B531140A190148DA1E8A0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 399195
IP address blocks: 107.148.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:53:11:40:a1:90:14:8d:a1:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=40f34ee7-69d9-4324-9830-4b4b41538f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:2e:f3:58:8e:80:e1:02:66:54:20:d2:63:
93:9e:4e:dc:ec:6b:41:c8:5d:89:51:7d:44:f6:e4:
30:bf:10:33:04:c4:39:de:20:7e:4a:73:bf:b6:bf:
1d:c0:bd:b2:cf:1f:57:cd:b4:fc:25:d4:00:d7:74:
c8:08:c2:46:aa:f8:39:98:1e:67:e3:7f:7d:69:13:
d9:58:9b:27:1e:6e:9c:6e:6c:c2:a5:50:c5:26:9d:
8a:35:2b:0c:a9:2a:f0:ea:10:f2:72:31:ce:c1:05:
5b:54:7a:91:ca:27:01:45:66:5a:9b:09:d5:0b:d3:
a1:96:a4:4e:ac:96:12:87:41:46:49:37:28:de:02:
ef:86:2d:99:29:95:84:20:9e:35:0b:31:e4:d8:75:
cb:0c:33:e2:cd:19:f1:eb:28:c1:32:59:3a:f6:8b:
4c:58:13:cc:c0:2d:0e:f0:ee:55:5d:b2:54:6d:72:
b2:1a:af:38:31:de:94:cf:eb:1e:35:3a:50:e7:ab:
ca:b2:10:d0:37:72:0a:03:c3:c4:62:9e:13:b7:4a:
09:7e:81:5c:f5:2a:ce:6e:96:50:20:b9:bc:27:54:
9f:bd:32:05:9f:43:26:c4:96:05:c2:53:79:af:7c:
63:ca:e2:4e:26:dd:5d:50:73:47:5c:b1:2a:9d:f1:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:77:CC:70:0E:67:54:D3:BA:FB:A0:E8:3C:1C:C8:16:2F:80:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:08:f1:c0:e2:8c:75:29:17:75:f5:a8:c8:f0:d3:53:ae:38:
2d:67:89:50:f0:2f:49:a3:a5:32:5f:99:c2:9c:7d:97:81:09:
0d:28:9e:aa:a7:81:f7:b0:21:a6:b1:e0:77:a1:1f:90:6e:fb:
c1:45:e2:6a:b0:4a:f2:bd:ca:ee:35:1a:d2:8b:4f:d5:d1:9b:
a1:b7:b8:bf:e7:94:d3:c8:b0:a5:ba:59:a4:55:2c:b8:aa:c2:
a3:6c:e4:76:6e:ec:83:19:5d:c7:8a:4b:4e:fd:c6:53:01:a4:
2d:47:4e:c7:a3:e1:cd:0e:d1:78:54:4b:62:83:02:83:3d:59:
17:75:39:19:e3:2b:24:0d:6e:aa:84:30:2c:57:d5:44:b2:1f:
13:9a:fb:c9:84:46:4b:2f:65:c2:28:a3:60:30:fa:a7:d8:ba:
40:8c:00:1d:92:e3:ee:a2:1a:64:8e:21:3d:76:93:eb:8a:af:
33:43:61:a3:99:26:6a:db:64:07:a6:af:d1:27:01:bd:32:0e:
03:29:40:bb:e0:1a:b6:7b:93:43:8d:f5:e4:65:30:fd:d3:9a:
43:29:ff:1a:64:59:39:7a:85:66:c9:0b:bc:a8:b8:a9:b7:e9:
d5:ca:e7:52:d6:7a:1f:65:e9:4c:a8:ff:3a:2f:e6:e1:f8:ed:
76:f7:c8:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1MRQKGQFI2h6KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NDBmMzRlZTctNjlkOS00MzI0LTk4MzAtNGI0YjQxNTM4ZjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Eu81iOgOECZlQg0mOTnk7c7GtByF2JUX1E
9uQwvxAzBMQ53iB+SnO/tr8dwL2yzx9XzbT8JdQA13TICMJGqvg5mB5n4399aRPZ
WJsnHm6cbmzCpVDFJp2KNSsMqSrw6hDycjHOwQVbVHqRyicBRWZamwnVC9OhlqRO
rJYSh0FGSTco3gLvhi2ZKZWEIJ41CzHk2HXLDDPizRnx6yjBMlk69otMWBPMwC0O
8O5VXbJUbXKyGq84Md6Uz+seNTpQ56vKshDQN3IKA8PEYp4Tt0oJfoFc9SrObpZQ
ILm8J1SfvTIFn0MmxJYFwlN5r3xjyuJOJt1dUHNHXLEqnfHxXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqpd8xwDmdU07r7oOg8HMgWL4ABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODRjODViYWEtZTZhNy0z
NmQ5LWJhMWUtMTZmZDA3ZmNiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsI8cDijHUpF3X1qMjw01OuOC1niVDwL0mjpTJfmcKcfZeBCQ0onqqn
gfewIaax4HehH5Bu+8FF4mqwSvK9yu41GtKLT9XRm6G3uL/nlNPIsKW6WaRVLLiq
wqNs5HZu7IMZXceKS079xlMBpC1HTsej4c0O0XhUS2KDAoM9WRd1ORnjKyQNbqqE
MCxX1USyHxOa+8mERksvZcIoo2Aw+qfYukCMAB2S4+6iGmSOIT12k+uKrzNDYaOZ
JmrbZAemr9EnAb0yDgMpQLvgGrZ7k0ON9eRlMP3TmkMp/xpkWTl6hWbJC7youKm3
6dXK51LWeh9l6Uyo/zov5uH47Xb3yPM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:24 2025 by rpki-client