Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa
File: 0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa (raw, json)
Hash identifier: wbifP6N+6+FO28lYoF4Q3ynF+cx7/GPB7mVhmGlkbSc=
Subject key identifier: E8:1F:B5:10:EB:56:43:F5:F3:5B:3E:13:99:1B:75:3D:85:84:0A:6C
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848100A926BB571E6161C818800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 204440
IP address blocks: 64.124.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:92:6b:b5:71:e6:16:1c:81:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=d561f2e8-9c8a-4492-828c-df5f750e6b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:6a:b7:c9:c3:49:02:ef:96:79:28:7d:f5:
df:da:22:7c:98:7b:f8:b3:03:09:4e:62:f6:1d:f6:
42:61:79:4c:79:3e:40:f8:2b:9d:23:49:12:5b:22:
c3:ed:33:cd:a3:1d:77:b0:68:09:a8:19:53:07:a4:
09:83:84:71:66:6c:be:95:b8:4c:2c:11:23:70:8e:
27:7d:1c:2a:7a:73:f4:a3:cf:05:07:93:e4:c8:45:
6c:1a:52:ef:96:39:2a:8a:e7:bf:85:ac:a3:92:0c:
95:47:55:bd:15:57:3e:7b:6c:1c:03:e0:87:fd:be:
3a:ca:e1:37:cd:df:17:c4:c5:2f:68:73:2c:74:39:
aa:2c:e3:b4:9b:18:c3:c0:e9:02:99:9a:ec:69:6f:
ce:24:68:a4:2f:c9:44:7c:e1:1f:af:f4:73:5d:5f:
eb:ca:dd:c1:70:48:7b:30:86:fd:e2:53:d8:c1:95:
48:f4:1a:c0:86:f8:06:87:84:a1:0e:8d:1d:ce:f1:
9e:ca:d1:98:5c:51:a5:90:95:12:26:20:3d:77:34:
2a:9d:c1:fc:78:c8:ed:09:21:cd:2d:63:d7:c5:8d:
3c:60:bf:12:b5:54:64:f5:82:6a:d7:8d:9a:b3:88:
be:7b:c7:2a:6c:29:e3:26:f6:bb:3c:96:30:f2:af:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:B5:10:EB:56:43:F5:F3:5B:3E:13:99:1B:75:3D:85:84:0A:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ca0e8e0-8338-3fb1-946d-9a9fb73c6e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:8b:a0:29:df:77:dd:69:7b:1a:bf:10:0f:b9:84:86:b9:a5:
dd:3e:72:58:ca:46:b0:ed:77:21:aa:60:fd:e3:18:9d:bb:8a:
c8:b0:8f:9b:df:4b:33:f9:9c:b5:cf:ad:77:b6:fa:83:59:84:
f4:60:71:f7:20:69:7b:b8:5d:c9:27:72:d4:61:97:19:43:7b:
13:f3:89:35:71:3f:42:b1:bb:6d:96:31:07:7c:db:ac:bb:e3:
b7:8d:d4:69:e1:5c:10:eb:61:35:11:31:77:3d:36:fe:d4:4a:
cd:e7:ed:aa:94:03:0d:d2:6a:34:b2:9b:a5:95:3d:7c:f4:07:
1f:fc:fb:8b:9c:cf:72:c7:8e:91:be:22:7e:dc:51:23:a9:53:
ea:e5:4d:2a:29:aa:5f:77:a7:14:05:e4:9e:df:16:4e:d3:86:
f7:7b:90:fa:6b:30:55:94:b6:f2:bf:0f:93:3c:84:24:19:b3:
15:b0:1c:2f:4e:e5:67:d3:e0:0f:fd:6c:25:3c:44:ee:7c:77:
27:94:be:c0:e0:36:90:85:95:41:a1:4b:f4:af:dc:05:07:00:
e5:e7:8e:59:a7:df:8b:b4:23:6c:79:1b:c7:e5:d5:91:7a:b5:
da:b0:21:87:a8:27:42:61:6a:ef:b3:26:aa:2a:6f:af:db:ad:
c0:21:d0:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCpJrtXHmFhyBiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
ZDU2MWYyZTgtOWM4YS00NDkyLTgyOGMtZGY1Zjc1MGU2YjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Nqt8nDSQLvlnkoffXf2iJ8mHv4swMJTmL2
HfZCYXlMeT5A+CudI0kSWyLD7TPNox13sGgJqBlTB6QJg4RxZmy+lbhMLBEjcI4n
fRwqenP0o88FB5PkyEVsGlLvljkqiue/hayjkgyVR1W9FVc+e2wcA+CH/b46yuE3
zd8XxMUvaHMsdDmqLOO0mxjDwOkCmZrsaW/OJGikL8lEfOEfr/RzXV/ryt3BcEh7
MIb94lPYwZVI9BrAhvgGh4ShDo0dzvGeytGYXFGlkJUSJiA9dzQqncH8eMjtCSHN
LWPXxY08YL8StVRk9YJq142as4i+e8cqbCnjJva7PJYw8q9/VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgftRDrVkP181s+E5kbdT2FhApsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMGNhMGU4ZTAtODMzOC0z
ZmIxLTk0NmQtOWE5ZmI3M2M2ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHxrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANCLoCnfd91pexq/EA+5hIa5pd0+cljKRrDtdyGqYP3jGJ27isiwj5vf
SzP5nLXPrXe2+oNZhPRgcfcgaXu4XcknctRhlxlDexPziTVxP0Kxu22WMQd826y7
47eN1GnhXBDrYTURMXc9Nv7USs3n7aqUAw3SajSym6WVPXz0Bx/8+4ucz3LHjpG+
In7cUSOpU+rlTSopql93pxQF5J7fFk7Thvd7kPprMFWUtvK/D5M8hCQZsxWwHC9O
5WfT4A/9bCU8RO58dyeUvsDgNpCFlUGhS/Sv3AUHAOXnjlmn34u0I2x5G8fl1ZF6
tdqwIYeoJ0Jhau+zJqoqb6/brcAh0Iw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:17 2025 by rpki-client