Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80489b8f-d308-399c-8f25-51453b034f54.roa
File: 80489b8f-d308-399c-8f25-51453b034f54.roa (raw, json)
Hash identifier: 22Bv3Og9aZ3e4je13HsBc7iCN8bGGbpcTZ/KAWQ5NmU=
Subject key identifier: 05:47:40:6B:72:E2:30:83:FC:4A:AD:B8:C3:02:71:84:F2:18:AE:46
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858481F65365730C068F125BB1900
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80489b8f-d308-399c-8f25-51453b034f54.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 134365
IP address blocks: 107.151.200.0/23 maxlen: 23
107.151.202.0/23 maxlen: 23
107.151.204.0/23 maxlen: 23
107.151.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:36:57:30:c0:68:f1:25:bb:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=e4a7d0b1-0037-4255-b26d-7d5f27772e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:ea:7f:ed:fc:21:cb:84:e9:14:83:8e:1b:
b1:84:66:fe:e3:8b:4a:ae:2c:ff:4e:c4:b3:05:10:
c5:25:f2:e8:4e:74:03:58:9d:f3:23:86:e6:6c:58:
74:06:ca:4f:e0:e7:c1:8d:07:48:81:0e:28:62:6e:
b4:ad:f4:c0:fc:36:d4:6f:17:e5:73:4f:b3:85:b1:
bc:06:11:80:92:4f:15:51:6a:30:dc:f6:ad:36:6b:
a7:c2:fa:24:e7:46:d7:0e:f6:fa:03:08:34:f5:93:
f5:af:0e:02:5e:d5:79:d2:5b:e8:5d:05:5f:0c:4a:
83:81:fc:6c:07:cb:b8:13:d9:20:49:53:e7:df:60:
25:25:d5:fa:e3:35:65:b0:80:00:68:96:d1:93:fb:
c7:fc:7a:0e:6b:ba:cb:c5:36:6c:5e:5e:44:ca:cf:
8b:0b:2a:1a:29:da:d1:09:88:46:58:3e:c7:ad:2d:
17:13:96:14:69:b1:ac:d5:c5:8d:ed:79:a2:c2:cf:
8e:17:95:2f:be:16:35:cb:7f:2b:4d:6d:2a:57:46:
b3:61:58:97:45:41:b8:e5:6b:90:20:63:e9:ec:4b:
5e:85:5a:0d:04:8d:0b:4c:c4:a7:12:c4:42:79:6e:
de:5c:24:0b:13:76:17:62:60:4c:55:d4:7c:49:2b:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:40:6B:72:E2:30:83:FC:4A:AD:B8:C3:02:71:84:F2:18:AE:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80489b8f-d308-399c-8f25-51453b034f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:8b:86:56:c0:17:30:86:3b:56:ff:06:ee:1d:d3:55:d0:86:
95:dc:a1:1a:2e:72:d5:43:36:d0:53:c4:ae:86:ef:b2:ba:2d:
2c:0e:b5:52:bf:6e:b6:94:e0:68:7f:35:97:d8:25:c4:60:d4:
bf:85:73:e8:0f:b0:8c:27:16:53:ad:3d:ec:5e:a3:71:ba:c9:
c2:34:e5:36:47:a3:55:6d:c4:3b:1d:15:7f:23:a9:29:b9:18:
0c:cd:b8:30:69:38:1b:f4:9d:75:34:44:76:6b:cf:59:13:c2:
c6:f8:92:41:55:88:66:91:9a:06:2b:7c:0b:fe:c3:ed:5d:68:
8e:e5:73:53:a4:82:76:ed:0c:ae:dc:36:9a:57:96:1b:09:34:
0d:13:d0:08:31:86:25:d0:44:3a:53:6d:44:d2:2b:10:90:1b:
f3:5b:70:d4:7f:61:14:44:84:97:db:c6:f1:45:8e:e4:24:4d:
9d:8e:d5:4d:fb:af:72:9a:0a:5a:35:eb:56:53:57:4d:d9:3d:
34:5e:7e:54:84:7b:37:4e:64:ba:51:b6:db:a1:6f:a1:92:3d:
ed:d4:0d:80:f8:fe:86:29:89:72:61:a5:f4:b9:1b:70:4e:c5:
5c:d6:c5:02:33:a4:24:87:62:72:9a:05:02:7b:bc:83:95:ee:
7d:20:97:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTZXMMBo8SW7GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
ZTRhN2QwYjEtMDAzNy00MjU1LWIyNmQtN2Q1ZjI3NzcyZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzPqf+38IcuE6RSDjhuxhGb+44tKriz/TsSz
BRDFJfLoTnQDWJ3zI4bmbFh0BspP4OfBjQdIgQ4oYm60rfTA/DbUbxflc0+zhbG8
BhGAkk8VUWow3PatNmunwvok50bXDvb6Awg09ZP1rw4CXtV50lvoXQVfDEqDgfxs
B8u4E9kgSVPn32AlJdX64zVlsIAAaJbRk/vH/HoOa7rLxTZsXl5Eys+LCyoaKdrR
CYhGWD7HrS0XE5YUabGs1cWN7Xmiws+OF5UvvhY1y38rTW0qV0azYViXRUG45WuQ
IGPp7EtehVoNBI0LTMSnEsRCeW7eXCQLE3YXYmBMVdR8SSvu9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVHQGty4jCD/EqtuMMCcYTyGK5GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODA0ODliOGYtZDMwOC0z
OTljLThmMjUtNTE0NTNiMDM0ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5fIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyLhlbAFzCGO1b/Bu4d01XQhpXcoRouctVDNtBTxK6G77K6LSwOtVK/
braU4Gh/NZfYJcRg1L+Fc+gPsIwnFlOtPexeo3G6ycI05TZHo1VtxDsdFX8jqSm5
GAzNuDBpOBv0nXU0RHZrz1kTwsb4kkFViGaRmgYrfAv+w+1daI7lc1OkgnbtDK7c
NppXlhsJNA0T0AgxhiXQRDpTbUTSKxCQG/NbcNR/YRREhJfbxvFFjuQkTZ2O1U37
r3KaClo161ZTV03ZPTReflSEezdOZLpRttuhb6GSPe3UDYD4/oYpiXJhpfS5G3BO
xVzWxQIzpCSHYnKaBQJ7vIOV7n0gl7Y=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:42:19 2025 by rpki-client