Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa
File: aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa (raw, json)
Hash identifier: vwh4hbTo+bftQjzzTqY+a5PPneXIXFuJ7IOOs4jelyc=
Subject key identifier: 5A:38:42:0A:6F:28:A7:7A:47:42:0A:57:D2:9B:B4:2A:29:36:E9:50
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858481F65324659DEB75ACF30ED80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 18013
IP address blocks: 107.151.240.0/23 maxlen: 24
198.44.166.0/23 maxlen: 24
198.44.168.0/23 maxlen: 24
198.44.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:32:46:59:de:b7:5a:cf:30:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=6555f52a-ffa5-4ef4-b1f9-a38bf4f92677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:72:79:00:27:9e:a6:dc:1d:af:43:2a:ff:
5c:ce:fc:b4:69:29:e0:3d:fe:a3:80:69:44:82:d3:
96:39:73:63:ff:ad:a1:a4:d4:c5:1f:19:33:45:36:
a0:41:3c:6c:f3:36:5d:19:76:a9:b4:60:36:3d:b5:
40:85:82:38:8d:06:2e:aa:8a:a9:23:be:89:af:49:
c5:f9:c2:65:cd:f0:a7:b0:a4:3e:fc:77:ab:78:56:
5e:4b:ef:5e:07:d1:c9:c4:27:34:67:be:b4:ef:e4:
2c:52:4f:fb:7e:8c:0c:b2:81:45:3a:c6:b0:2b:bb:
10:5f:5d:d9:6a:42:69:67:43:04:a7:46:5c:6d:4c:
2b:ab:6d:61:af:d2:16:dc:aa:e8:3e:f6:a7:2a:e8:
d5:a7:05:8b:dd:22:03:da:17:44:54:78:39:21:da:
81:84:fe:ae:0d:37:74:97:50:b4:4f:51:ab:45:f4:
bf:72:c8:2d:1e:eb:18:db:5c:2c:35:76:1c:32:a9:
06:ed:e2:b5:ff:e1:48:b1:6d:59:0a:5b:ee:da:38:
87:26:14:21:b9:7f:cd:73:47:67:dd:cc:d9:d1:b8:
38:0e:eb:77:b7:b3:a1:bf:50:5f:be:9a:6a:19:20:
ea:6f:75:80:a1:64:5a:d8:b6:7e:d8:74:2b:24:43:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:42:0A:6F:28:A7:7A:47:42:0A:57:D2:9B:B4:2A:29:36:E9:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aa41f2c6-b83a-3c0d-92a2-9bf638f727ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.240.0/23
198.44.166.0-198.44.169.255
198.44.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:df:5c:da:12:c6:df:ce:4d:20:1e:ce:8e:12:ae:25:0b:0d:
cd:53:0a:81:93:91:c0:e3:d7:7c:78:9f:49:02:8a:8a:30:cc:
8a:3c:6a:dd:71:ee:5e:7b:76:df:45:98:60:f7:2a:3a:08:84:
03:c1:60:07:39:3f:76:3d:63:2b:3c:8b:06:cb:97:80:44:c9:
49:64:84:55:61:e5:94:47:87:3b:0f:d4:c0:a6:16:c8:f6:59:
3c:c2:d9:9c:80:40:4a:78:e1:d6:85:ab:fc:9b:6f:fb:2e:c7:
ba:87:77:b6:fd:9c:cd:41:fc:4e:47:2a:19:72:2b:25:97:39:
2a:c2:10:c5:2c:32:8f:cd:b3:ff:8d:41:a8:81:ad:f0:77:7e:
3c:12:e6:af:4b:31:42:bc:e9:d3:73:e7:f0:20:7b:d8:58:73:
2d:ef:28:72:11:4c:7e:88:f2:8a:3d:2d:4d:f1:31:3e:66:8b:
61:5c:ec:2f:4d:77:51:84:0b:0d:41:f2:4b:ba:77:ee:94:d3:
35:5b:a6:d7:cb:f5:db:29:66:95:7c:a5:95:5a:b7:10:03:77:
bd:e2:6c:14:96:e9:b9:1a:3c:37:51:0f:6a:da:da:8b:59:5e:
67:84:35:e3:78:ef:7b:7a:07:85:87:4d:39:bf:a0:c0:c2:06:
8a:be:c7:ba
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEgfZTJGWd63Ws8w7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
NjU1NWY1MmEtZmZhNS00ZWY0LWIxZjktYTM4YmY0ZjkyNjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2JyeQAnnqbcHa9DKv9czvy0aSngPf6jgGlE
gtOWOXNj/62hpNTFHxkzRTagQTxs8zZdGXaptGA2PbVAhYI4jQYuqoqpI76Jr0nF
+cJlzfCnsKQ+/HereFZeS+9eB9HJxCc0Z7607+QsUk/7fowMsoFFOsawK7sQX13Z
akJpZ0MEp0ZcbUwrq21hr9IW3KroPvanKujVpwWL3SID2hdEVHg5IdqBhP6uDTd0
l1C0T1GrRfS/csgtHusY21wsNXYcMqkG7eK1/+FIsW1ZClvu2jiHJhQhuX/Nc0dn
3czZ0bg4Dut3t7Ohv1BfvppqGSDqb3WAoWRa2LZ+2HQrJENdUwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFFo4QgpvKKd6R0IKV9KbtCopNulQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYWE0MWYyYzYtYjgzYS0z
YzBkLTkyYTItOWJmNjM4ZjcyN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBa5fwMAwD
BAHGLKYDBAHGLKgDBALGLLgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANt9c2hLG385NIB7OjhKuJQsNzVMK
gZORwOPXfHifSQKKijDMijxq3XHuXnt230WYYPcqOgiEA8FgBzk/dj1jKzyLBsuX
gETJSWSEVWHllEeHOw/UwKYWyPZZPMLZnIBASnjh1oWr/Jtv+y7Huod3tv2czUH8
TkcqGXIrJZc5KsIQxSwyj82z/41BqIGt8Hd+PBLmr0sxQrzp03Pn8CB72FhzLe8o
chFMfojyij0tTfExPmaLYVzsL013UYQLDUHyS7p37pTTNVum18v12ylmlXyllVq3
EAN3veJsFJbpuRo8N1EPatrai1leZ4Q143jve3oHhYdNOb+gwMIGir7Hug==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:51:48 2025 by rpki-client