Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa
File: b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa (raw, json)
Hash identifier: ugv+As+RR1w3MkjPcmhh3NbExuEioVeRyBX40oKWQw4=
Subject key identifier: DA:C4:2D:35:DE:D6:97:D5:EE:7F:5F:28:82:7F:DE:C5:CB:F2:BB:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B3B6D724F3389F3BC3700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 107.4.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:3b:6d:72:4f:33:89:f3:bc:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1e5ac8c5-cfd8-46c4-b4bc-a23f063b6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:0b:f8:a7:9b:a6:a3:d7:7c:0e:cb:dd:07:
be:c4:cc:7f:36:46:e9:ca:44:a6:fb:ee:10:98:6e:
7b:f9:e8:88:ce:11:68:89:09:d7:c6:01:ff:98:cd:
54:15:c8:57:74:1d:74:cb:e5:f2:f4:4e:c8:c8:f1:
b3:2c:70:34:c5:8d:12:74:23:c4:7a:0c:fd:c2:b1:
57:3c:66:71:9c:a6:59:45:e2:55:5b:26:ab:f0:d2:
d4:1c:5d:1b:d0:77:1f:ca:34:f3:56:76:5d:ab:e8:
0e:2c:83:7d:85:b0:bc:03:94:9d:4a:e3:7e:06:cf:
77:b5:12:b3:66:f2:a1:64:e4:8e:24:0d:74:42:bf:
af:05:b1:da:9b:9b:22:a8:57:10:93:13:94:ae:48:
66:af:a3:92:11:47:f5:fb:cb:24:72:9a:b4:83:c1:
36:f8:9a:47:aa:01:ea:57:2f:c1:9f:58:df:14:f1:
15:68:c3:78:06:91:55:bc:fa:23:d2:1d:85:be:56:
33:eb:1c:df:df:4a:37:c6:b2:1c:a6:2f:bd:9a:d5:
92:2e:52:7f:1f:37:1d:bb:78:b9:ff:2a:1e:19:2d:
53:1d:bf:df:45:fc:99:74:55:ce:2d:2a:72:d8:3d:
da:71:4b:51:7d:a8:bb:69:f2:72:08:30:89:d5:2d:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:2D:35:DE:D6:97:D5:EE:7F:5F:28:82:7F:DE:C5:CB:F2:BB:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.4.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:55:15:ce:8c:7f:64:ef:cc:ef:6a:e0:ce:a1:4c:4c:82:45:
2b:95:9a:72:c9:55:65:a6:5b:18:da:13:02:f6:bf:ff:5d:7c:
2f:a2:27:5b:2a:58:f9:46:2f:15:82:07:17:cb:ab:f6:6f:dd:
21:3a:01:be:58:be:51:bd:d8:3d:2a:97:ed:98:b2:45:ec:24:
6e:b9:a4:ed:a4:da:7c:cb:8f:cd:9f:1a:8e:67:60:1a:77:d7:
3e:59:9f:59:13:e7:1c:80:6d:c5:88:7d:d2:e1:ba:06:d7:43:
8e:b8:ed:09:e9:b9:c9:fb:be:ba:55:c8:6f:ec:17:73:27:c5:
00:37:3c:16:fe:20:17:10:26:36:46:24:68:f2:9a:18:4b:b8:
86:2f:48:fb:71:e4:f4:b0:d7:bc:b0:52:56:82:02:81:31:a0:
c4:c2:cf:3e:28:d2:94:4d:e2:d0:28:07:8a:18:ff:54:11:33:
d4:41:7f:58:a7:52:b4:e3:99:2d:d4:2b:2c:a1:23:71:53:81:
97:78:7a:94:0f:fe:02:db:9d:fa:82:53:b7:f9:21:f7:bb:11:
aa:9a:a0:5e:a0:8c:d6:4c:04:9b:db:6f:4a:73:6d:21:88:3d:
44:2f:fa:aa:4a:d9:4d:c3:d2:f2:79:55:1e:a9:12:84:e0:8b:
f5:c9:33:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOzttck8zifO8NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MWU1YWM4YzUtY2ZkOC00NmM0LWI0YmMtYTIzZjA2M2I2ZTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO8L+KebpqPXfA7L3Qe+xMx/NkbpykSm++4Q
mG57+eiIzhFoiQnXxgH/mM1UFchXdB10y+Xy9E7IyPGzLHA0xY0SdCPEegz9wrFX
PGZxnKZZReJVWyar8NLUHF0b0HcfyjTzVnZdq+gOLIN9hbC8A5SdSuN+Bs93tRKz
ZvKhZOSOJA10Qr+vBbHam5siqFcQkxOUrkhmr6OSEUf1+8skcpq0g8E2+JpHqgHq
Vy/Bn1jfFPEVaMN4BpFVvPoj0h2FvlYz6xzf30o3xrIcpi+9mtWSLlJ/Hzcdu3i5
/yoeGS1THb/fRfyZdFXOLSpy2D3acUtRfai7afJyCDCJ1S1c3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrELTXe1pfV7n9fKIJ/3sXL8rtGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBkNDNjYjctMjU4Zi0z
ODJhLWE4YzAtZjA1YWQ2Njk5OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawQZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBVFc6Mf2TvzO9q4M6hTEyCRSuVmnLJVWWmWxjaEwL2v/9dfC+iJ1sq
WPlGLxWCBxfLq/Zv3SE6Ab5YvlG92D0ql+2YskXsJG65pO2k2nzLj82fGo5nYBp3
1z5Zn1kT5xyAbcWIfdLhugbXQ4647Qnpucn7vrpVyG/sF3MnxQA3PBb+IBcQJjZG
JGjymhhLuIYvSPtx5PSw17ywUlaCAoExoMTCzz4o0pRN4tAoB4oY/1QRM9RBf1in
UrTjmS3UKyyhI3FTgZd4epQP/gLbnfqCU7f5Ife7EaqaoF6gjNZMBJvbb0pzbSGI
PUQv+qpK2U3D0vJ5VR6pEoTgi/XJM5Q=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:31 2025 by rpki-client