Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/fcc57855-e3ff-3145-bbe0-d660bf9cfe37.roa
File: fcc57855-e3ff-3145-bbe0-d660bf9cfe37.roa (raw, json)
Hash identifier: dXWElpiSf7dwgh6n5u7kNXa126GtwmOZ8RrM2yp0Fi0=
Subject key identifier: A1:E4:93:BD:A7:EB:3B:18:0E:95:75:B2:6E:0F:92:9F:C5:90:BF:CA
Certificate issuer: /CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Certificate serial: 010D0C9F432858411067F5DE536902C3210A50D0
Authority key identifier: 08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/fcc57855-e3ff-3145-bbe0-d660bf9cfe37.roa
Signing time: Tue 28 Feb 2023 18:57:57 +0000
ROA not before: Tue 28 Feb 2023 18:57:57 +0000
ROA not after: Mon 02 Jun 2025 04:00:00 +0000
asID: 399970
IP address blocks: 149.112.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:10:67:f5:de:53:69:02:c3:21:0a:50:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Validity
Not Before: Feb 28 18:57:57 2023 GMT
Not After : Jun 2 04:00:00 2025 GMT
Subject: CN=6af8a83d-fc13-45a0-8cd8-c35f2f26ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:c2:6e:b0:fe:35:11:18:96:19:36:a6:88:
aa:df:c5:5f:a6:e3:86:e0:28:0b:2f:06:f6:00:dc:
f1:9c:5e:c6:8a:dd:08:bf:7d:ba:47:b7:04:7e:a6:
06:2f:f8:c2:36:d2:d0:de:22:ff:b5:15:6e:68:fb:
e5:1d:f2:95:cf:47:70:ce:6e:d6:53:9c:a2:d1:1f:
d7:26:7a:8f:57:0f:61:a6:01:55:e5:c8:fa:ef:a4:
30:65:0f:93:90:f6:b1:9a:04:c9:d9:b7:86:fc:11:
b5:d7:81:01:85:72:32:8c:eb:81:75:42:b8:bf:24:
28:bd:17:8d:75:45:b3:71:2a:74:47:9e:c3:f8:fa:
a8:25:06:d5:0a:80:b0:ce:24:2f:e6:d4:3f:c1:3a:
2a:4a:14:9f:5d:66:01:bb:76:b3:8d:4d:a5:f1:97:
bb:0b:db:6f:35:ad:3f:e5:d1:54:c9:51:70:30:c4:
ab:ee:7c:fe:77:ff:91:fc:d9:82:ee:c4:7b:c4:fe:
ea:82:66:7a:b2:18:bf:33:81:62:95:27:80:f1:b4:
e4:45:ae:bf:38:8d:de:45:ce:18:20:d3:aa:68:49:
b8:e8:38:ad:75:42:9a:b4:9e:21:4e:f5:13:96:dc:
05:a2:36:33:71:eb:3c:87:fc:3e:3a:81:0f:cb:79:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:93:BD:A7:EB:3B:18:0E:95:75:B2:6E:0F:92:9F:C5:90:BF:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/fcc57855-e3ff-3145-bbe0-d660bf9cfe37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.crl
X509v3 Authority Key Identifier:
keyid:08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:3a:48:8c:5b:2c:bd:89:0c:e9:f9:f2:93:f7:b7:e5:b8:5e:
ba:0a:14:ef:05:47:bf:4c:ed:bf:c9:ec:e2:d2:df:67:6b:66:
ca:f0:52:05:00:ab:bd:d8:e0:25:fb:76:40:dd:05:2d:f9:bb:
5b:09:b7:3c:8e:ae:3c:cd:d0:33:30:41:ec:6c:20:11:e4:eb:
d8:33:5f:28:d8:56:b1:57:72:1b:05:29:38:03:91:14:b5:d8:
d9:74:d0:9b:28:e0:2b:09:4c:e5:4d:7c:bd:04:13:56:2a:5d:
83:0b:00:ee:4c:df:aa:7e:77:4c:fb:50:c4:3d:5a:48:11:07:
a4:27:d3:2d:3a:e8:4e:07:83:d2:b3:df:2b:a2:6d:0a:ac:90:
5c:dc:33:39:c6:c1:f8:a5:95:30:10:db:e0:bd:53:0a:f6:3a:
8f:b0:c5:e4:fe:21:fb:62:5b:1a:26:1b:fb:2b:79:bd:90:0e:
1f:b4:b9:85:9d:6f:83:d2:ca:d5:69:ee:92:be:94:91:64:fe:
23:d5:6a:ef:a7:3b:7f:cf:5f:ec:9a:75:20:f6:8f:1b:76:14:
14:5e:5f:fe:cb:46:f1:43:ea:74:33:3c:b2:d5:e2:c0:f5:02:
c5:0d:31:78:a3:51:87:9f:06:45:89:9d:de:cc:9e:5e:ac:56:
69:06:9e:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEQZ/XeU2kCwyEKUNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI3MWUxYjItNTU5NS00NGNmLWFhNGQtNmI1ZDM1YWQz
ODBlMB4XDTIzMDIyODE4NTc1N1oXDTI1MDYwMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmFmOGE4M2QtZmMxMy00NWEwLThjZDgtYzM1ZjJmMjZjYTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzHCbrD+NREYlhk2poiq38VfpuOG4CgLLwb2
ANzxnF7Git0Iv326R7cEfqYGL/jCNtLQ3iL/tRVuaPvlHfKVz0dwzm7WU5yi0R/X
JnqPVw9hpgFV5cj676QwZQ+TkPaxmgTJ2beG/BG114EBhXIyjOuBdUK4vyQovReN
dUWzcSp0R57D+PqoJQbVCoCwziQv5tQ/wToqShSfXWYBu3azjU2l8Ze7C9tvNa0/
5dFUyVFwMMSr7nz+d/+R/NmC7sR7xP7qgmZ6shi/M4FilSeA8bTkRa6/OI3eRc4Y
INOqaEm46DitdUKatJ4hTvUTltwFojYzces8h/w+OoEPy3n56QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHkk72n6zsYDpV1sm4Pkp/FkL/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wYjcx
ZTFiMi01NTk1LTQ0Y2YtYWE0ZC02YjVkMzVhZDM4MGUvZmNjNTc4NTUtZTNmZi0z
MTQ1LWJiZTAtZDY2MGJmOWNmZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGI3MWUxYjItNTU5NS00NGNmLWFh
NGQtNmI1ZDM1YWQzODBlLzBiNzFlMWIyLTU1OTUtNDRjZi1hYTRkLTZiNWQzNWFk
MzgwZS5jcmwwHwYDVR0jBBgwFoAUCPbUaPEJ8ug+oemlCykuiNu48H8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wYjcxZTFiMi01NTk1LTQ0Y2YtYWE0ZC02YjVk
MzVhZDM4MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQ6SIxbLL2JDOn58pP3t+W4XroKFO8FR79M7b/J7OLS32drZsrwUgUA
q73Y4CX7dkDdBS35u1sJtzyOrjzN0DMwQexsIBHk69gzXyjYVrFXchsFKTgDkRS1
2Nl00Jso4CsJTOVNfL0EE1YqXYMLAO5M36p+d0z7UMQ9WkgRB6Qn0y066E4Hg9Kz
3yuibQqskFzcMznGwfillTAQ2+C9Uwr2Oo+wxeT+IftiWxomG/sreb2QDh+0uYWd
b4PSytVp7pK+lJFk/iPVau+nO3/PX+yadSD2jxt2FBReX/7LRvFD6nQzPLLV4sD1
AsUNMXijUYefBkWJnd7Mnl6sVmkGnnA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:14:08 2025 by rpki-client