Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ded8fdfe-386b-3030-974d-da10c23ff1f8.roa
File: ded8fdfe-386b-3030-974d-da10c23ff1f8.roa (raw, json)
Hash identifier: ZRKLwAewY/rHvAtXy9IGnJLT3fN4NZc4Z92X1VoGYPI=
Subject key identifier: 27:9C:02:53:6D:92:55:22:08:EA:61:2A:24:AB:76:75:C6:5E:0E:E9
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848159FF63CF5E8B3F3D5074800
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ded8fdfe-386b-3030-974d-da10c23ff1f8.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 55933
IP address blocks: 107.151.240.0/23 maxlen: 24
198.44.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f6:3c:f5:e8:b3:f3:d5:07:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=a280271f-ff5f-4b8c-93c0-f885b7167bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:8c:3a:8e:44:78:69:5c:3b:2c:72:5e:e6:
be:dd:d2:ca:e5:fd:ca:16:29:4a:1a:bf:2f:83:a4:
bb:b2:d4:0e:f6:be:fe:52:c8:69:24:ba:6e:cf:e3:
ad:29:49:bd:f7:b2:5d:31:c1:76:c2:9c:31:28:66:
48:77:3f:5b:97:cf:7e:f3:22:6a:6f:ab:cd:ec:df:
0e:80:21:8e:01:2d:b7:ee:01:2e:f1:24:e1:5b:5c:
64:10:3a:30:5e:0c:b3:f6:97:57:4d:4b:19:a1:66:
7f:a1:16:37:7e:35:df:d5:fe:b1:e7:a6:0a:65:cb:
cb:30:b0:33:81:98:72:53:f3:ee:6a:b6:6a:a4:ab:
ba:94:a8:c4:48:04:64:b8:18:5b:e2:0b:48:af:8e:
0b:e1:cf:e6:c2:9b:27:d9:9e:36:ce:06:f9:8e:79:
9d:55:39:cf:63:34:11:74:a4:83:2b:2e:83:35:e2:
64:01:28:1d:06:ab:57:c8:b6:7b:5c:2b:c2:32:72:
b3:3f:24:37:97:59:f7:04:b4:e0:6c:28:b5:8b:29:
62:be:be:57:e4:ef:29:c4:92:5c:53:10:1f:66:34:
9e:90:7e:83:65:35:4a:b2:7c:c0:36:3d:47:75:d7:
be:32:7a:d0:df:bb:3c:bc:6b:ed:f8:2b:16:c9:ef:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:02:53:6D:92:55:22:08:EA:61:2A:24:AB:76:75:C6:5E:0E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ded8fdfe-386b-3030-974d-da10c23ff1f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.240.0/23
198.44.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:31:4d:ab:77:30:fb:30:3b:ee:4d:7e:e2:ce:e7:68:e7:81:
e0:75:6a:78:88:f4:21:e6:c0:3e:49:12:f0:00:0f:f2:d9:ac:
39:69:3d:42:80:90:79:a1:ba:d5:73:64:cd:af:9c:3d:c3:e2:
aa:72:4c:06:16:a4:c1:7a:01:ab:f4:2f:12:60:4f:b4:34:4a:
d3:ed:4f:d1:e5:1d:da:86:35:0a:c2:51:75:b9:c5:47:86:2d:
92:07:3f:db:d6:29:c3:d6:67:61:be:65:1d:77:7f:3d:bb:ed:
7d:8e:db:a6:d9:b1:56:03:1f:a1:a7:a9:36:18:64:16:c8:c8:
70:fb:f1:84:b7:12:25:f6:1a:95:9e:83:8d:02:47:5b:31:d0:
d7:d8:4a:cb:d4:8e:2e:50:5c:2e:01:c0:94:70:7a:fe:77:2f:
a1:94:73:3c:14:ad:73:71:d9:f3:f4:43:23:27:e4:1e:c4:a6:
fe:a0:1f:d0:d6:e6:6e:f3:09:8a:ae:d1:42:8c:96:e9:e1:d5:
08:fc:25:75:ba:d4:d0:c3:ae:ca:86:7f:6e:4c:18:6c:8b:9f:
1f:c0:16:ea:e7:6f:ee:88:ba:a8:b8:25:2d:27:3c:61:8d:35:
38:2d:9c:3d:61:6b:26:b5:03:e5:10:a9:85:09:22:00:33:94:
23:57:a2:1d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgVn/Y89eiz89UHSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
YTI4MDI3MWYtZmY1Zi00YjhjLTkzYzAtZjg4NWI3MTY3YmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeKMOo5EeGlcOyxyXua+3dLK5f3KFilKGr8v
g6S7stQO9r7+UshpJLpuz+OtKUm997JdMcF2wpwxKGZIdz9bl89+8yJqb6vN7N8O
gCGOAS237gEu8SThW1xkEDowXgyz9pdXTUsZoWZ/oRY3fjXf1f6x56YKZcvLMLAz
gZhyU/PuarZqpKu6lKjESARkuBhb4gtIr44L4c/mwpsn2Z42zgb5jnmdVTnPYzQR
dKSDKy6DNeJkASgdBqtXyLZ7XCvCMnKzPyQ3l1n3BLTgbCi1iylivr5X5O8pxJJc
UxAfZjSekH6DZTVKsnzANj1Hdde+MnrQ37s8vGvt+CsWye+EtQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCecAlNtklUiCOphKiSrdnXGXg7pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZGVkOGZkZmUtMzg2Yi0z
MDMwLTk3NGQtZGExMGMyM2ZmMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBa5fwAwQB
xiyoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADwxTat3MPswO+5NfuLO52jngeB1aniI9CHmwD5JEvAAD/LZ
rDlpPUKAkHmhutVzZM2vnD3D4qpyTAYWpMF6Aav0LxJgT7Q0StPtT9HlHdqGNQrC
UXW5xUeGLZIHP9vWKcPWZ2G+ZR13fz277X2O26bZsVYDH6GnqTYYZBbIyHD78YS3
EiX2GpWeg40CR1sx0NfYSsvUji5QXC4BwJRwev53L6GUczwUrXNx2fP0QyMn5B7E
pv6gH9DW5m7zCYqu0UKMlunh1Qj8JXW61NDDrsqGf25MGGyLnx/AFurnb+6Iuqi4
JS0nPGGNNTgtnD1haya1A+UQqYUJIgAzlCNXoh0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:33:41 2025 by rpki-client