Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb83ef79-dc1c-307f-b985-e61117ccea3f.roa
File: fb83ef79-dc1c-307f-b985-e61117ccea3f.roa (raw, json)
Hash identifier: UEiLb8DeUIWmNoNMxEBWdN2WIWbDKqANh52K8RBmoQw=
Subject key identifier: C2:FC:ED:28:D2:6C:0A:BA:22:EF:0B:40:F4:D1:59:33:9F:21:79:06
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B1FAE463B4A398265E6D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb83ef79-dc1c-307f-b985-e61117ccea3f.roa
Signing time: Tue 10 Dec 2024 01:22:01 +0000
ROA not before: Tue 10 Dec 2024 01:22:01 +0000
ROA not after: Mon 10 Mar 2025 00:22:01 +0000
asID: 13335
IP address blocks: 108.162.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b1:fa:e4:63:b4:a3:98:26:5e:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:22:01 2024 GMT
Not After : Mar 10 00:22:01 2025 GMT
Subject: CN=921d4685-36de-4d77-b4d7-a38c52048bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:1d:7b:2e:80:e4:d8:9d:83:0f:d8:38:81:
fb:1c:20:63:36:43:05:90:70:88:b4:a9:a1:48:da:
5d:0b:15:bd:9f:a6:82:93:01:e8:a7:c8:6d:4a:51:
05:3e:10:fc:48:a8:90:c9:bc:ec:0e:d7:c6:c3:b2:
59:f0:07:11:17:c8:6b:d0:76:f1:1b:f9:15:1d:03:
7b:9f:65:c4:0e:7d:b5:34:e1:96:0f:45:19:f3:96:
b2:cd:ab:c7:a6:3d:b8:24:fd:a9:d6:9f:de:c5:7a:
14:da:76:0b:e3:33:1e:2f:b5:8e:f8:5f:45:cf:5e:
2e:6d:03:4f:39:e3:74:0a:0e:04:44:12:77:65:99:
09:d4:e3:02:31:74:bf:d5:71:4e:81:84:11:8d:a8:
18:a1:d7:ef:c5:bf:e4:79:86:54:e9:c7:fe:8d:00:
da:60:67:77:90:0c:92:65:ab:e8:f8:b9:79:47:95:
85:5f:68:ea:1a:0b:66:8d:35:d0:84:9f:05:a5:84:
34:36:de:1e:ef:11:1b:52:94:7a:cc:34:e8:c6:66:
9c:4e:88:f1:f5:14:99:e2:dd:e8:9f:21:93:1f:49:
2e:7b:06:70:65:ba:20:52:bb:e6:61:c3:41:c7:1d:
33:12:ad:ff:bc:e3:9b:de:85:d0:d2:d4:ad:31:89:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:ED:28:D2:6C:0A:BA:22:EF:0B:40:F4:D1:59:33:9F:21:79:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb83ef79-dc1c-307f-b985-e61117ccea3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
108.162.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:21:ce:a6:83:aa:e7:fb:67:40:f1:fc:7b:40:c6:01:7f:f0:
8b:1d:da:4b:ba:43:f8:97:36:81:31:a3:8d:5c:26:a8:46:47:
01:65:8f:db:95:6d:e7:44:54:94:77:65:e7:69:bf:9a:87:b5:
cd:dd:23:98:ec:bb:59:79:64:f7:75:5d:06:93:c2:dc:ec:71:
29:bd:28:30:41:26:11:b1:19:e8:bd:29:6b:01:4c:1d:66:09:
00:29:ef:a3:a2:1f:9a:e0:c3:2a:c6:fa:c4:78:cd:21:76:6d:
d6:a7:87:73:2b:56:f7:9e:bb:74:df:34:fa:a4:ed:f9:61:33:
5f:9b:02:10:92:96:cb:5a:e6:18:40:9d:4f:f5:39:13:6c:ed:
fa:6d:b7:77:8b:79:7c:02:d6:7b:25:52:5c:a8:74:43:14:68:
2d:de:c3:7d:3d:85:e2:7a:18:46:cf:b6:54:ae:3d:f0:0c:ba:
7c:56:61:96:84:e5:7e:90:c1:b6:10:1c:03:15:2c:83:3a:52:
de:52:8d:f9:d7:91:de:ef:cc:50:bc:ef:dd:c8:5e:1a:04:e0:
da:a0:07:fc:61:b8:93:ae:11:7e:02:a1:72:1c:d6:40:94:f7:
53:77:0a:66:e9:bd:70:fb:21:66:c5:47:6d:cc:67:50:37:9f:
7c:34:b8:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnsfrkY7SjmCZebUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMjIwMVoXDTI1MDMxMDAwMjIwMVowLzEtMCsGA1UEAxMk
OTIxZDQ2ODUtMzZkZS00ZDc3LWI0ZDctYTM4YzUyMDQ4YmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvcdey6A5Nidgw/YOIH7HCBjNkMFkHCItKmh
SNpdCxW9n6aCkwHop8htSlEFPhD8SKiQybzsDtfGw7JZ8AcRF8hr0HbxG/kVHQN7
n2XEDn21NOGWD0UZ85ayzavHpj24JP2p1p/exXoU2nYL4zMeL7WO+F9Fz14ubQNP
OeN0Cg4ERBJ3ZZkJ1OMCMXS/1XFOgYQRjagYodfvxb/keYZU6cf+jQDaYGd3kAyS
Zavo+Ll5R5WFX2jqGgtmjTXQhJ8FpYQ0Nt4e7xEbUpR6zDToxmacTojx9RSZ4t3o
nyGTH0kuewZwZbogUrvmYcNBxx0zEq3/vOOb3oXQ0tStMYncAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFML87SjSbAq6Iu8LQPTRWTOfIXkGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI4M2VmNzktZGMxYy0z
MDdmLWI5ODUtZTYxMTE3Y2NlYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKL9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUhzqaDquf7Z0Dx/HtAxgF/8Isd2ku6Q/iXNoExo41cJqhGRwFlj9uV
bedEVJR3Zedpv5qHtc3dI5jsu1l5ZPd1XQaTwtzscSm9KDBBJhGxGei9KWsBTB1m
CQAp76OiH5rgwyrG+sR4zSF2bdanh3MrVveeu3TfNPqk7flhM1+bAhCSlsta5hhA
nU/1ORNs7fptt3eLeXwC1nslUlyodEMUaC3ew309heJ6GEbPtlSuPfAMunxWYZaE
5X6QwbYQHAMVLIM6Ut5SjfnXkd7vzFC8793IXhoE4NqgB/xhuJOuEX4CoXIc1kCU
91N3CmbpvXD7IWbFR23MZ1A3n3w0uHA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:13:42 2025 by rpki-client