Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json)
Hash identifier: FAZIugZyN4P/BU8CIY7rc4Td/V50uu+GjXL0O+K48Vk=
Subject key identifier: 38:DC:53:10:FE:F0:9F:49:05:82:7A:DD:44:71:D2:1E:00:B6:0F:A1
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F43285849754460C6809E67E06626C7C0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 63199
IP address blocks: 148.153.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:60:c6:80:9e:67:e0:66:26:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=6ec0fdd7-388d-4544-921b-f806de32b7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:b2:a8:ea:90:f2:24:d3:78:f1:12:ed:62:
86:d9:78:aa:36:f0:3f:79:b9:53:00:5c:98:d7:b8:
8d:19:49:d9:36:f1:0e:d8:55:b3:da:72:8e:bd:9a:
9d:24:df:fd:9d:c2:32:18:f3:9e:db:df:61:f9:e7:
32:9b:1d:a9:c0:d7:24:a9:a7:98:7a:eb:4b:8a:0f:
91:fe:20:e6:07:02:10:30:05:e9:57:88:52:29:a3:
23:db:13:21:4d:9c:f3:5b:61:d8:09:b3:1e:3c:d5:
49:0d:cc:90:75:83:1b:6c:08:dc:20:6f:59:83:12:
36:5c:65:39:a1:7f:1c:d7:c0:3b:ee:7a:33:a8:d1:
ca:b0:66:44:e1:44:ce:bc:d8:0d:37:d6:70:1e:61:
50:cd:a4:c9:27:4a:68:ee:de:e1:19:5b:48:8d:c5:
2c:88:65:65:ac:fd:7f:e4:84:62:5f:5e:b7:b1:ca:
41:42:d2:5e:02:37:40:86:c3:7a:ae:93:94:73:07:
34:37:51:f1:33:be:6d:45:e6:e0:ef:b2:44:76:fa:
fb:93:37:d7:3d:c9:22:d8:15:c6:42:b6:29:1d:b1:
77:d2:2e:0b:b5:e7:28:6c:a1:7e:40:45:b2:8a:68:
b0:b8:ea:60:ca:cc:ee:a5:0d:fe:7d:55:df:8d:4e:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:53:10:FE:F0:9F:49:05:82:7A:DD:44:71:D2:1E:00:B6:0F:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b4:1d:da:c3:31:d9:66:19:2f:e7:1e:97:3a:a0:31:81:03:
92:89:f8:02:52:1b:97:02:47:a7:ec:5f:33:65:fb:e8:de:9f:
41:ff:b3:d4:84:a3:38:26:da:cf:8f:47:1f:ab:32:03:27:bb:
f9:09:f3:b8:7a:6c:d6:c4:3a:87:8c:41:3a:94:2a:8f:be:13:
8e:74:9a:e5:6e:5c:a2:63:8b:fb:6d:b1:a2:19:51:93:65:3f:
1a:32:93:b4:72:d5:d1:c8:63:a7:9b:c6:3c:60:94:67:88:f4:
3f:f0:ac:be:26:0f:70:15:bc:5c:99:61:d2:4a:77:13:7b:ad:
f3:fd:ee:f5:ad:bc:38:88:d4:a7:5d:89:c8:a8:e0:96:d7:10:
0b:96:f2:38:6e:e8:f6:95:d8:2a:c8:2a:62:07:ff:87:10:83:
4f:88:83:95:23:00:f8:48:9c:7d:37:e1:2b:5c:1f:2b:c6:e4:
63:f4:1d:fc:29:9b:6f:90:c0:a2:59:19:53:9b:bb:23:83:8d:
e4:64:b9:36:0c:3f:6d:e9:b5:1e:95:e5:56:fd:23:28:71:fa:
d1:da:31:b0:e1:e7:03:a7:4b:1a:c9:8d:18:1f:04:ec:85:39:
b0:2a:49:00:68:27:b8:a3:cf:c4:69:05:40:14:97:a7:f5:48:
75:84:eb:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RGDGgJ5n4GYmx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk
NmVjMGZkZDctMzg4ZC00NTQ0LTkyMWItZjgwNmRlMzJiN2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xWyqOqQ8iTTePES7WKG2XiqNvA/eblTAFyY
17iNGUnZNvEO2FWz2nKOvZqdJN/9ncIyGPOe299h+ecymx2pwNckqaeYeutLig+R
/iDmBwIQMAXpV4hSKaMj2xMhTZzzW2HYCbMePNVJDcyQdYMbbAjcIG9ZgxI2XGU5
oX8c18A77nozqNHKsGZE4UTOvNgNN9ZwHmFQzaTJJ0po7t7hGVtIjcUsiGVlrP1/
5IRiX163scpBQtJeAjdAhsN6rpOUcwc0N1HxM75tRebg77JEdvr7kzfXPcki2BXG
QrYpHbF30i4LtecobKF+QEWyimiwuOpgyszupQ3+fVXfjU4wsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjcUxD+8J9JBYJ63URx0h4Atg+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGMzNDllMTgtOGFiOS0z
Y2VmLWJlMjYtNjQxOGFmYzExZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADq0HdrDMdlmGS/nHpc6oDGBA5KJ+AJSG5cCR6fsXzNl++jen0H/s9SE
ozgm2s+PRx+rMgMnu/kJ87h6bNbEOoeMQTqUKo++E450muVuXKJji/ttsaIZUZNl
Pxoyk7Ry1dHIY6ebxjxglGeI9D/wrL4mD3AVvFyZYdJKdxN7rfP97vWtvDiI1Kdd
icio4JbXEAuW8jhu6PaV2CrIKmIH/4cQg0+Ig5UjAPhInH034StcHyvG5GP0Hfwp
m2+QwKJZGVObuyODjeRkuTYMP23ptR6V5Vb9Iyhx+tHaMbDh5wOnSxrJjRgfBOyF
ObAqSQBoJ7ijz8RpBUAUl6f1SHWE69c=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net