Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40111b5c-5346-3ac9-836b-8c5ebccd3118.roa
File: 40111b5c-5346-3ac9-836b-8c5ebccd3118.roa (raw, json)
Hash identifier: 4jM70U56qsoTFNzJpuenKixKFIViuAMy1Rjty9fo/z8=
Subject key identifier: E6:36:86:E2:5E:15:4E:93:F7:1F:55:71:24:3C:96:5B:34:90:74:9B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827ADE934F2430740124D4740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40111b5c-5346-3ac9-836b-8c5ebccd3118.roa
Signing time: Tue 10 Dec 2024 01:13:49 +0000
ROA not before: Tue 10 Dec 2024 01:13:49 +0000
ROA not after: Mon 10 Mar 2025 00:13:49 +0000
asID: 13335
IP address blocks: 108.162.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ad:e9:34:f2:43:07:40:12:4d:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:13:49 2024 GMT
Not After : Mar 10 00:13:49 2025 GMT
Subject: CN=afb68b1a-a5fb-4dc4-862a-3d5e7b533de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:5c:65:14:8a:b3:f2:d2:4d:fd:95:1a:6f:
23:54:16:80:a0:69:4f:79:41:a8:86:6b:52:56:6c:
ee:a3:b7:a2:10:71:95:3e:5a:2b:6b:a9:fc:99:e1:
23:dc:85:4a:da:5d:b3:f6:69:45:49:1d:54:b3:df:
56:94:c5:57:74:f3:20:3e:38:b5:dc:cb:9f:74:54:
75:1e:f7:39:ac:17:6a:40:c6:39:58:42:10:93:5d:
14:a9:c0:57:87:6b:8e:31:0e:76:16:7c:2b:7f:47:
69:58:6d:60:1d:e4:b1:af:b7:fc:2b:5c:bb:dd:85:
ad:48:b9:fc:4c:83:fd:fb:85:0b:04:d4:a1:61:97:
47:56:45:5a:9e:bb:0f:a6:8a:09:93:6e:81:8c:4e:
52:52:2f:90:b0:a1:7a:47:c0:8c:61:93:5e:73:2e:
26:a6:73:90:e8:1d:ab:8b:14:57:6c:03:6a:1b:71:
e5:51:ed:bc:32:66:f5:3a:e9:d5:c8:d6:c6:7c:24:
d0:fa:57:1e:5c:36:2a:17:1b:d6:ae:a4:cd:b9:0e:
a9:14:3e:8d:86:85:ef:70:fe:de:e7:58:fd:95:0e:
39:87:fe:f4:8d:b9:fc:49:b8:48:7f:06:c1:ee:74:
56:56:e9:7a:1f:87:97:8a:23:73:c3:2d:db:cc:72:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:86:E2:5E:15:4E:93:F7:1F:55:71:24:3C:96:5B:34:90:74:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40111b5c-5346-3ac9-836b-8c5ebccd3118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:a0:b6:8d:43:33:f1:ac:a6:88:74:73:14:c2:a1:a5:fc:02:
e3:05:2d:23:14:df:f9:16:5c:68:28:c4:3d:62:f0:10:af:64:
bf:21:fa:cb:4c:d2:f6:f7:01:33:b4:d3:ac:a8:e0:17:80:b8:
ae:12:5c:70:fa:fc:bd:62:94:97:da:a2:0c:70:1f:40:be:8b:
8a:be:d6:b6:a4:b4:2e:c7:00:4a:3f:5f:c9:f0:d0:10:da:79:
73:87:aa:85:ad:92:25:e2:4b:32:e6:eb:3c:e3:ec:6e:ed:64:
1d:a4:c5:db:ca:e3:6d:ca:82:84:68:12:0c:22:ef:4a:0a:80:
43:ea:df:2e:bd:f6:7d:90:d2:43:ac:95:f6:b9:0d:49:18:4f:
6f:06:f1:da:cd:a6:71:ed:aa:f1:d4:e7:ab:8e:29:80:42:43:
56:10:12:c5:de:d7:56:ac:19:aa:b0:e0:63:8b:f6:51:7d:f9:
81:50:91:00:ae:a9:c3:58:11:2b:5d:48:76:50:c8:d8:b6:20:
ce:91:66:03:d3:75:a4:47:fb:7a:0b:c6:4e:49:18:d3:40:ec:
b2:a8:96:f7:97:8d:13:3b:7c:78:13:f3:15:bc:a2:72:eb:f1:
af:f9:9a:13:42:21:f0:be:db:8f:76:c6:9a:33:2a:0b:12:72:
2b:23:31:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnrek08kMHQBJNR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMTM0OVoXDTI1MDMxMDAwMTM0OVowLzEtMCsGA1UEAxMk
YWZiNjhiMWEtYTVmYi00ZGM0LTg2MmEtM2Q1ZTdiNTMzZGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCJcZRSKs/LSTf2VGm8jVBaAoGlPeUGohmtS
Vmzuo7eiEHGVPlora6n8meEj3IVK2l2z9mlFSR1Us99WlMVXdPMgPji13MufdFR1
Hvc5rBdqQMY5WEIQk10UqcBXh2uOMQ52Fnwrf0dpWG1gHeSxr7f8K1y73YWtSLn8
TIP9+4ULBNShYZdHVkVanrsPpooJk26BjE5SUi+QsKF6R8CMYZNecy4mpnOQ6B2r
ixRXbANqG3HlUe28Mmb1OunVyNbGfCTQ+lceXDYqFxvWrqTNuQ6pFD6NhoXvcP7e
51j9lQ45h/70jbn8SbhIfwbB7nRWVul6H4eXiiNzwy3bzHJQlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOY2huJeFU6T9x9VcSQ8lls0kHSbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDAxMTFiNWMtNTM0Ni0z
YWM5LTgzNmItOGM1ZWJjY2QzMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALmgto1DM/Gspoh0cxTCoaX8AuMFLSMU3/kWXGgoxD1i8BCvZL8h+stM
0vb3ATO006yo4BeAuK4SXHD6/L1ilJfaogxwH0C+i4q+1raktC7HAEo/X8nw0BDa
eXOHqoWtkiXiSzLm6zzj7G7tZB2kxdvK423KgoRoEgwi70oKgEPq3y699n2Q0kOs
lfa5DUkYT28G8drNpnHtqvHU56uOKYBCQ1YQEsXe11asGaqw4GOL9lF9+YFQkQCu
qcNYEStdSHZQyNi2IM6RZgPTdaRH+3oLxk5JGNNA7LKolveXjRM7fHgT8xW8onLr
8a/5mhNCIfC+2492xpozKgsScisjMVM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:36 2025 by rpki-client