Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
File: b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json)
Hash identifier: BRmJDsXgf+gKBEowfXmgOuuvrIQKjEFjrUQ6tsZhGDg=
Subject key identifier: 6D:62:C7:C7:49:7B:A2:B0:81:6E:5E:B9:88:AD:89:96:2A:AE:F5:FB
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584836C97EFEC556CC3674D16600
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
Signing time: Sun 15 Dec 2024 11:06:32 +0000
ROA not before: Sun 15 Dec 2024 11:06:32 +0000
ROA not after: Sat 15 Mar 2025 10:06:32 +0000
asID: 33598
IP address blocks: 138.8.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:36:c9:7e:fe:c5:56:cc:36:74:d1:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 15 11:06:32 2024 GMT
Not After : Mar 15 10:06:32 2025 GMT
Subject: CN=808f883b-e938-4c60-8c57-1578064c6bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:77:13:7d:11:9c:42:1d:20:f9:fa:b1:3f:
bd:4b:7f:00:e4:9c:34:cb:a0:0c:42:38:c4:34:ea:
fa:22:8b:ae:70:24:62:9b:08:65:44:92:28:49:c7:
4d:e3:3c:2a:e6:be:20:9a:4b:f9:39:1f:84:b4:37:
e8:90:ea:54:17:75:b3:a3:c9:2c:b3:9b:80:62:1b:
c0:6c:fa:9c:ff:5a:9b:bc:38:14:16:f3:08:a3:2b:
a8:6e:c0:6f:5b:3c:a0:f9:73:b7:50:22:67:54:2e:
96:b0:ff:c0:d5:8c:8d:f7:a0:69:78:96:0d:a4:ce:
51:ee:9a:8f:76:9b:7a:1b:a5:e8:0d:50:29:a8:dd:
a0:d7:b7:09:81:be:e7:d0:fe:ff:02:85:f2:75:9e:
cc:e2:15:9e:56:0b:75:d4:6d:74:65:26:33:a2:07:
18:27:a7:32:4c:a5:b2:fd:f0:a4:ef:06:b0:cc:54:
e8:e1:b6:01:e0:2c:69:03:f6:0e:4c:04:6f:98:99:
5c:79:15:5a:6f:13:7e:1f:4e:e8:3d:81:44:b5:4b:
88:f5:a1:51:25:05:aa:45:01:94:cc:76:73:0f:cb:
ed:68:db:f2:b1:ec:22:20:d9:c7:be:29:c9:55:6b:
ca:a0:54:25:31:d5:6b:a2:96:5d:33:5e:3b:27:c1:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:C7:C7:49:7B:A2:B0:81:6E:5E:B9:88:AD:89:96:2A:AE:F5:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:25:38:12:15:7a:4c:a4:54:5b:af:ac:54:c9:9d:df:c6:f9:
6b:dc:a0:fa:30:2e:18:96:0c:2e:66:9a:0a:b7:7f:6d:ea:fe:
9a:81:94:3d:77:ce:e6:fe:ef:05:82:94:88:7e:3a:17:be:52:
91:63:2e:4f:cd:ff:da:74:53:3a:25:ab:4f:76:8d:55:83:a3:
81:3c:7b:80:49:bd:e7:af:3e:28:07:d0:b0:2a:3e:20:89:a9:
1b:e6:33:5f:c7:fd:61:5e:1e:1f:6b:56:4c:72:ba:6d:b0:26:
43:d1:86:ef:27:b2:02:02:cf:c8:fb:9f:45:32:18:b7:35:f4:
06:8c:d1:a7:31:f0:33:cf:bc:00:b1:1a:d6:8b:3e:a8:6b:8f:
81:0b:8e:57:6d:82:d2:2f:e9:35:ee:f2:50:81:c8:f1:bf:ca:
69:2e:46:71:c5:c2:74:f6:02:e3:3e:64:e6:32:2c:c9:c2:5e:
04:35:57:81:66:41:bb:d1:2c:4f:2e:46:96:c1:36:e1:4a:08:
3b:70:fd:52:52:79:85:55:37:af:70:70:06:85:c4:ee:19:aa:
2a:ca:7d:40:3d:6f:15:77:0a:9b:a4:0b:1b:24:0b:50:d8:e1:
3b:91:2b:06:21:3b:9f:e5:b7:c3:2c:09:26:81:5d:1a:55:f9:
fc:12:4f:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg2yX7+xVbMNnTRZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI0MTIxNTExMDYzMloXDTI1MDMxNTEwMDYzMlowLzEtMCsGA1UEAxMk
ODA4Zjg4M2ItZTkzOC00YzYwLThjNTctMTU3ODA2NGM2YmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0h3E30RnEIdIPn6sT+9S38A5Jw0y6AMQjjE
NOr6IouucCRimwhlRJIoScdN4zwq5r4gmkv5OR+EtDfokOpUF3Wzo8kss5uAYhvA
bPqc/1qbvDgUFvMIoyuobsBvWzyg+XO3UCJnVC6WsP/A1YyN96BpeJYNpM5R7pqP
dpt6G6XoDVApqN2g17cJgb7n0P7/AoXydZ7M4hWeVgt11G10ZSYzogcYJ6cyTKWy
/fCk7wawzFTo4bYB4CxpA/YOTARvmJlceRVabxN+H07oPYFEtUuI9aFRJQWqRQGU
zHZzD8vtaNvysewiINnHvinJVWvKoFQlMdVropZdM147J8G//wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1ix8dJe6KwgW5euYitiZYqrvX7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvYjA3YjkwNmUtMTYwMy0z
OWU3LWE0NjgtNjc0Nzc2NjI1YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAighsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8lOBIVekykVFuvrFTJnd/G+WvcoPowLhiWDC5mmgq3f23q/pqBlD13
zub+7wWClIh+Ohe+UpFjLk/N/9p0Uzolq092jVWDo4E8e4BJveevPigH0LAqPiCJ
qRvmM1/H/WFeHh9rVkxyum2wJkPRhu8nsgICz8j7n0UyGLc19AaM0acx8DPPvACx
GtaLPqhrj4ELjldtgtIv6TXu8lCByPG/ymkuRnHFwnT2AuM+ZOYyLMnCXgQ1V4Fm
QbvRLE8uRpbBNuFKCDtw/VJSeYVVN69wcAaFxO4ZqirKfUA9bxV3CpukCxskC1DY
4TuRKwYhO5/lt8MsCSaBXRpV+fwST5o=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:52 2025 by rpki-client