Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/ad06a69c-24f8-3a21-82c9-21cd0ca491c6.roa
File: ad06a69c-24f8-3a21-82c9-21cd0ca491c6.roa (raw, json)
Hash identifier: 7fzGgjwTmu3tfZPe5lYe30/kyD93fJdoYKCJixJPXpI=
Subject key identifier: F4:02:90:9B:AB:41:49:2E:DD:8B:BC:26:AE:98:5E:80:05:AD:7E:BA
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F432858484C1022C1FD7A71C2F3AC9C00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/ad06a69c-24f8-3a21-82c9-21cd0ca491c6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399471
IP address blocks: 107.182.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:22:c1:fd:7a:71:c2:f3:ac:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4d9e5cb0-bcfd-44bc-9aed-afc6a19dd89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:3b:c1:48:ce:ee:fa:d1:b1:a0:6d:41:95:
be:5e:1f:ba:7f:d3:e3:e5:f8:87:f7:e7:67:1a:eb:
89:13:65:1c:f8:f3:8f:d1:21:e2:7f:5c:f3:1f:f6:
3e:ae:7d:99:0c:cc:a6:b0:48:89:95:2c:bb:b4:49:
36:1a:6f:b6:e6:48:7a:e1:2b:4f:9d:fa:d6:e8:3d:
e0:93:8e:f2:8d:f4:f1:0f:ce:f8:ce:80:49:9f:8d:
a6:d7:c0:9f:5a:51:09:10:40:40:a3:ce:e9:34:23:
e7:e8:9b:1d:9b:14:9d:d8:85:6f:e9:2c:87:9d:41:
7e:f8:33:ce:92:b6:1d:19:fd:cc:51:a7:cc:08:db:
87:b0:03:3b:1c:e9:6a:78:f5:eb:86:97:c6:9f:9d:
f8:76:64:2a:12:f3:91:8e:0a:53:9f:d3:35:0f:e3:
b0:3f:21:68:cf:51:75:ab:4f:10:3f:f4:f9:e5:a5:
4b:64:13:63:9c:ac:74:9c:25:34:cd:a5:c9:3b:6f:
b8:46:a2:e8:54:8e:3f:25:4a:91:62:dd:ac:2d:45:
13:39:31:eb:1a:4d:4e:48:7f:c8:b2:bf:3b:e5:a0:
a3:65:29:c6:99:bb:88:db:1a:73:32:3e:ba:82:cc:
50:a5:37:04:2b:21:2a:f2:4d:0c:0f:26:44:50:be:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:90:9B:AB:41:49:2E:DD:8B:BC:26:AE:98:5E:80:05:AD:7E:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/ad06a69c-24f8-3a21-82c9-21cd0ca491c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
107.182.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1c:43:d5:12:c1:38:d5:dd:55:ce:44:8e:35:93:da:c0:85:
c2:f2:8a:12:cb:67:67:b7:43:67:56:18:8d:75:73:3c:b9:85:
c7:62:96:bd:8f:5d:13:9c:45:59:d0:99:c9:e1:96:ff:c5:90:
8b:c9:1b:15:36:ca:7b:19:ce:ac:b8:ad:a5:92:2b:4f:35:27:
ac:3e:da:15:5b:e6:ba:1e:77:2f:35:9b:6c:be:b2:a0:09:f5:
b5:c6:32:b3:8f:3f:fb:39:b3:4b:63:88:29:5b:df:90:bf:44:
9c:5d:d5:c7:07:94:93:cb:20:7b:d6:c4:c9:52:e2:33:4a:7c:
80:cf:e7:d2:e1:71:59:41:cc:3d:5e:e8:09:4c:37:bc:1d:f0:
35:66:03:4a:4d:c2:42:a6:0c:fd:e7:e9:eb:d1:43:e5:36:d6:
5e:64:d7:73:0a:9a:5c:d2:0f:f2:e8:e5:f6:a0:15:00:f7:70:
17:9a:48:16:88:27:82:48:f6:fe:5d:79:54:80:34:54:f3:2d:
93:dd:52:c0:e5:4d:35:09:88:4a:4c:3b:ba:32:fe:3b:b5:68:
0b:df:f6:df:11:f3:33:7f:d1:06:6d:7c:d8:43:21:84:fe:76:
ae:d0:c7:10:b1:d0:ba:d2:a0:b9:b0:91:31:0f:b3:cb:d2:76:
c0:ae:a8:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECLB/XpxwvOsnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1YTk3YWUtZGY0ZS00OWJjLTlmNzYtZmYwMjVhNWMy
NWU4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGQ5ZTVjYjAtYmNmZC00NGJjLTlhZWQtYWZjNmExOWRkODlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweI7wUjO7vrRsaBtQZW+Xh+6f9Pj5fiH9+dn
GuuJE2Uc+POP0SHif1zzH/Y+rn2ZDMymsEiJlSy7tEk2Gm+25kh64StPnfrW6D3g
k47yjfTxD874zoBJn42m18CfWlEJEEBAo87pNCPn6JsdmxSd2IVv6SyHnUF++DPO
krYdGf3MUafMCNuHsAM7HOlqePXrhpfGn534dmQqEvORjgpTn9M1D+OwPyFoz1F1
q08QP/T55aVLZBNjnKx0nCU0zaXJO2+4RqLoVI4/JUqRYt2sLUUTOTHrGk1OSH/I
sr875aCjZSnGmbuI2xpzMj66gsxQpTcEKyEq8k0MDyZEUL79DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQCkJurQUku3Yu8Jq6YXoAFrX66MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTVh
OTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAyNWE1YzI1ZTgvYWQwNmE2OWMtMjRmOC0z
YTIxLTgyYzktMjFjZDBjYTQ5MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU1YTk3YWUtZGY0ZS00OWJjLTlm
NzYtZmYwMjVhNWMyNWU4LzQ1NWE5N2FlLWRmNGUtNDliYy05Zjc2LWZmMDI1YTVj
MjVlOC5jcmwwHwYDVR0jBBgwFoAU1q6NbrjOWHH/k5GUTpU1xCeTuU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTVhOTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAy
NWE1YzI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa7aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8cQ9USwTjV3VXORI41k9rAhcLyihLLZ2e3Q2dWGI11czy5hcdilr2P
XROcRVnQmcnhlv/FkIvJGxU2ynsZzqy4raWSK081J6w+2hVb5roedy81m2y+sqAJ
9bXGMrOPP/s5s0tjiClb35C/RJxd1ccHlJPLIHvWxMlS4jNKfIDP59LhcVlBzD1e
6AlMN7wd8DVmA0pNwkKmDP3n6evRQ+U21l5k13MKmlzSD/Lo5fagFQD3cBeaSBaI
J4JI9v5deVSANFTzLZPdUsDlTTUJiEpMO7oy/ju1aAvf9t8R8zN/0QZtfNhDIYT+
dq7QxxCx0LrSoLmwkTEPs8vSdsCuqHU=
-----END CERTIFICATE-----
Generated at Thu May 8 21:11:48 2025 by rpki-client