Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
File: c4f8707e-8024-3449-9a43-a9af164495b9.roa (raw, json)
Hash identifier: /9v/PbVNOiopQYMrmVrmkeobrkNT4IyL70UHOcp7/ds=
Subject key identifier: 9C:38:F1:24:3D:C3:64:8E:D7:AF:DB:B1:6F:46:A6:60:33:2E:8A:B0
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F432858484515928833BD223F72C6EDC0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 57043
IP address blocks: 208.67.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:92:88:33:bd:22:3f:72:c6:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=6d71412c-ac6c-42a7-91a1-140ccf11baa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:04:63:8a:e7:45:9c:bd:75:66:2b:98:fc:
68:7d:88:c8:45:8b:21:ec:3c:42:a9:2b:da:e6:39:
f9:26:7b:43:c1:29:c1:e9:9c:36:93:f6:8f:cf:d7:
71:13:be:da:a1:d1:36:93:32:31:1d:59:94:0a:57:
2c:fe:21:56:8f:76:48:4c:f8:67:e1:8f:47:49:66:
3f:18:6b:ee:32:8e:9c:57:5f:67:dc:a1:73:1b:65:
ea:33:06:67:c5:cc:cb:a5:03:7e:3c:49:f5:df:0f:
c0:7c:89:c9:ba:7f:ee:4d:03:9f:4b:47:c3:63:55:
9b:12:7e:3c:a7:c5:e3:ff:8f:e2:da:a1:d4:1a:cc:
4f:1d:40:2d:88:0f:86:6b:bc:31:bb:b3:88:2d:b1:
71:87:29:81:9e:e3:b8:f3:d8:63:0d:d7:37:34:16:
c0:46:fe:58:45:a4:41:3e:db:e6:3e:ce:78:e8:46:
c7:4b:ad:9c:e4:b9:bd:cc:87:16:90:5b:92:36:77:
22:e6:3c:3f:e0:df:8d:95:de:d0:7c:bc:ea:0b:7a:
0a:bc:09:9b:9c:08:2d:02:31:1d:ff:32:6d:cc:f8:
93:25:f6:3b:b7:60:ae:e5:06:2f:88:70:b8:c1:1d:
80:34:ac:fb:c6:d5:22:f9:9d:3d:0f:e8:fa:81:d0:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:38:F1:24:3D:C3:64:8E:D7:AF:DB:B1:6F:46:A6:60:33:2E:8A:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:f0:ad:71:55:77:ff:44:e2:d1:e7:b6:96:ab:5c:69:8a:b0:
5b:25:de:e6:96:f9:20:a8:16:6a:82:3f:a9:fb:a1:6c:e5:af:
6d:29:a0:b7:3e:0d:8b:2e:b1:f5:48:54:0f:ec:20:fe:e2:5b:
66:d7:23:9b:4d:e6:9a:95:71:ee:b6:f2:69:93:86:64:06:be:
db:31:f9:1b:b1:a6:f0:fc:64:ad:26:4a:f5:08:be:77:17:3e:
3b:82:b2:64:bd:33:b1:a4:23:62:2c:1f:88:5f:eb:80:4b:36:
54:5a:c7:da:2a:89:e7:90:75:45:e2:75:7f:bd:73:b3:5b:66:
61:a1:e8:b8:fe:68:d3:73:e6:dd:ee:44:e7:41:5d:8e:ca:a3:
32:4e:9c:f7:93:e5:e6:0e:64:1a:2f:af:b4:7a:fb:f4:a5:23:
0d:8f:f6:5b:f1:22:2b:b7:5a:9f:57:86:31:6d:9f:d2:c6:90:
90:7d:d4:53:a5:bc:5d:ea:32:e0:4e:39:57:20:fc:b6:b5:19:
09:81:76:90:41:79:57:b7:df:50:ca:a5:2b:db:8d:02:c9:83:
e7:04:6a:f9:4e:dd:76:c0:63:71:25:9d:84:ee:91:4f:0d:a4:
6d:0d:bf:c2:16:d7:ca:f8:60:90:67:50:2d:f7:8c:9d:85:d4:
21:fe:fc:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZKIM70iP3LG7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1YTk3YWUtZGY0ZS00OWJjLTlmNzYtZmYwMjVhNWMy
NWU4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
NmQ3MTQxMmMtYWM2Yy00MmE3LTkxYTEtMTQwY2NmMTFiYWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSwEY4rnRZy9dWYrmPxofYjIRYsh7DxCqSva
5jn5JntDwSnB6Zw2k/aPz9dxE77aodE2kzIxHVmUClcs/iFWj3ZITPhn4Y9HSWY/
GGvuMo6cV19n3KFzG2XqMwZnxczLpQN+PEn13w/AfInJun/uTQOfS0fDY1WbEn48
p8Xj/4/i2qHUGsxPHUAtiA+Ga7wxu7OILbFxhymBnuO489hjDdc3NBbARv5YRaRB
PtvmPs546EbHS62c5Lm9zIcWkFuSNnci5jw/4N+Nld7QfLzqC3oKvAmbnAgtAjEd
/zJtzPiTJfY7t2Cu5QYviHC4wR2ANKz7xtUi+Z09D+j6gdDEVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJw48SQ9w2SO16/bsW9GpmAzLoqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTVh
OTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAyNWE1YzI1ZTgvYzRmODcwN2UtODAyNC0z
NDQ5LTlhNDMtYTlhZjE2NDQ5NWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU1YTk3YWUtZGY0ZS00OWJjLTlm
NzYtZmYwMjVhNWMyNWU4LzQ1NWE5N2FlLWRmNGUtNDliYy05Zjc2LWZmMDI1YTVj
MjVlOC5jcmwwHwYDVR0jBBgwFoAU1q6NbrjOWHH/k5GUTpU1xCeTuU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTVhOTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAy
NWE1YzI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ENqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALwrXFVd/9E4tHntparXGmKsFsl3uaW+SCoFmqCP6n7oWzlr20poLc+
DYsusfVIVA/sIP7iW2bXI5tN5pqVce628mmThmQGvtsx+RuxpvD8ZK0mSvUIvncX
PjuCsmS9M7GkI2IsH4hf64BLNlRax9oqieeQdUXidX+9c7NbZmGh6Lj+aNNz5t3u
ROdBXY7KozJOnPeT5eYOZBovr7R6+/SlIw2P9lvxIiu3Wp9XhjFtn9LGkJB91FOl
vF3qMuBOOVcg/La1GQmBdpBBeVe331DKpSvbjQLJg+cEavlO3XbAY3ElnYTukU8N
pG0Nv8IW18r4YJBnUC33jJ2F1CH+/B8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:51:07 2025 by rpki-client