Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
File: 8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa (raw, json)
Hash identifier: m6RSoQz8MlffhcRQVzp7pSs0DrnuZ7eC/KkGLlVlU5A=
Subject key identifier: 30:9B:98:22:6A:FC:73:95:86:93:81:3E:30:86:E8:DC:5A:84:73:DC
Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial: 010D0C9F432858490B4C27B265AE6190499D8160
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 399646
IP address blocks: 149.112.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:27:b2:65:ae:61:90:49:9d:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=a451e74f-bec3-406f-8090-13fee8e44147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:d4:78:c3:ef:56:4f:e3:76:78:4c:61:a1:
77:3a:7c:cc:55:e9:99:fa:7d:07:ac:48:ba:ff:66:
06:5b:f8:fa:2b:39:97:7d:2f:07:9a:33:b3:20:23:
06:2e:ef:c6:16:02:89:9d:6a:39:a2:1a:4e:f5:9f:
a1:7e:a7:73:19:37:b6:be:0c:d7:f7:7e:60:72:41:
29:73:6f:b0:3e:29:3b:4b:5e:ff:71:9e:5e:69:b2:
1a:de:01:fd:92:d6:c0:41:b1:07:4a:81:d3:42:d8:
7a:05:59:b9:15:c6:c6:01:08:f5:35:10:c1:40:56:
df:3d:61:0b:c0:4e:04:b0:90:fa:cc:20:b1:37:79:
b9:e7:c3:5b:72:ec:f3:e9:93:b7:04:0a:66:f6:e4:
a0:02:fe:d2:b2:52:82:b9:e7:67:45:20:85:3d:35:
a0:73:f7:c2:59:d8:c2:12:45:9e:5d:20:fd:d2:02:
c5:59:3d:51:5a:e0:cb:09:00:7a:55:e2:9f:7f:6c:
e1:35:ac:a5:56:3b:7f:22:2a:48:a4:8d:c6:25:cb:
0d:00:b6:47:d8:51:bc:3f:dd:98:d5:f2:ba:97:37:
9c:77:90:fa:79:6b:22:5b:22:d4:c5:fc:62:f9:bf:
ef:b7:f4:61:e3:13:85:f9:e9:51:d3:15:0b:5d:f8:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:98:22:6A:FC:73:95:86:93:81:3E:30:86:E8:DC:5A:84:73:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/8cf64f11-8acd-37b0-b43f-7968ae8c9cca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
X509v3 Authority Key Identifier:
keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:58:e6:2b:a1:b9:13:a2:84:e2:4b:7e:f7:5b:02:c4:99:23:
77:33:9f:b2:fb:df:30:3e:bc:29:ff:93:5d:58:02:a1:2e:e1:
02:25:01:5c:1f:ea:b3:90:ac:96:eb:40:41:66:66:1d:53:23:
89:a5:ee:b3:b6:13:41:59:8a:d8:11:ce:cd:8f:40:c8:53:47:
18:50:c9:52:85:60:f6:d5:c4:39:3f:c3:cc:4b:aa:2e:aa:54:
4a:2f:cb:aa:03:0f:4f:b0:95:ab:59:97:99:d1:2f:2a:f7:38:
d9:f4:1b:8d:fd:33:1c:4b:a7:30:73:39:b7:1f:5f:25:b9:f8:
96:97:8c:e6:53:31:0a:c3:38:cb:27:88:f7:21:9c:ac:a6:b2:
52:69:80:f9:ec:60:37:db:c3:2d:e7:65:2c:59:be:ed:de:cc:
c6:e7:d2:42:aa:9b:68:90:01:c4:49:27:79:10:28:e9:cc:92:
50:c9:78:5a:6b:db:ec:25:53:f7:19:6e:93:3d:34:f9:23:45:
d6:f0:c5:6a:1f:22:b0:20:d8:a2:e4:9f:c6:5e:98:ff:09:d6:
77:3b:72:31:ec:92:8b:ad:32:fe:f3:e1:4b:50:f6:36:23:21:
7f:6c:27:38:fb:81:d6:2d:98:a5:28:bd:84:77:c4:24:3c:50:
c0:49:23:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCeyZa5hkEmdgWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx
M2M0MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
YTQ1MWU3NGYtYmVjMy00MDZmLTgwOTAtMTNmZWU4ZTQ0MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4XUeMPvVk/jdnhMYaF3OnzMVemZ+n0HrEi6
/2YGW/j6KzmXfS8HmjOzICMGLu/GFgKJnWo5ohpO9Z+hfqdzGTe2vgzX935gckEp
c2+wPik7S17/cZ5eabIa3gH9ktbAQbEHSoHTQth6BVm5FcbGAQj1NRDBQFbfPWEL
wE4EsJD6zCCxN3m558Nbcuzz6ZO3BApm9uSgAv7SslKCuednRSCFPTWgc/fCWdjC
EkWeXSD90gLFWT1RWuDLCQB6VeKff2zhNaylVjt/IipIpI3GJcsNALZH2FG8P92Y
1fK6lzecd5D6eWsiWyLUxfxi+b/vt/Rh4xOF+elR0xULXfjFvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCbmCJq/HOVhpOBPjCG6NxahHPcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx
OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvOGNmNjRmMTEtOGFjZC0z
N2IwLWI0M2YtNzk2OGFlOGM5Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi
ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl
MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw
Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKFY5iuhuROihOJLfvdbAsSZI3czn7L73zA+vCn/k11YAqEu4QIlAVwf
6rOQrJbrQEFmZh1TI4ml7rO2E0FZitgRzs2PQMhTRxhQyVKFYPbVxDk/w8xLqi6q
VEovy6oDD0+wlatZl5nRLyr3ONn0G439MxxLpzBzObcfXyW5+JaXjOZTMQrDOMsn
iPchnKymslJpgPnsYDfbwy3nZSxZvu3ezMbn0kKqm2iQAcRJJ3kQKOnMklDJeFpr
2+wlU/cZbpM9NPkjRdbwxWofIrAg2KLkn8ZemP8J1nc7cjHskoutMv7z4UtQ9jYj
IX9sJzj7gdYtmKUovYR3xCQ8UMBJI34=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:52 2025 by rpki-client