Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
File: 4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa (raw, json)
Hash identifier: ACmcMa38bVQc2Gil7lcXf70Dyy+cP39USwbvIrSaLUI=
Subject key identifier: 36:9E:C6:B1:BC:8C:99:EC:59:8F:6D:84:4A:02:95:6F:19:42:C5:B6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094DCBDC42EAC7290A82D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 108.177.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:dc:bd:c4:2e:ac:72:90:a8:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=60c389e6-c67e-4e60-9c65-c8f10001d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:a8:80:ea:5f:76:a9:a9:34:51:7a:4e:b3:
a0:89:63:7f:76:42:ce:69:43:c6:cd:55:c8:3e:09:
02:e5:f6:9d:30:08:a1:a0:2a:af:ed:a7:82:79:a4:
21:65:95:e2:20:51:90:d7:e1:e4:23:37:af:68:1c:
c7:00:7b:20:b8:d6:0f:df:e3:d6:8e:63:dd:ff:34:
9e:27:f2:8f:ec:fc:e3:b7:38:e2:c1:57:79:ca:34:
47:16:15:8c:f2:e8:9f:9b:6c:dc:8a:b7:bf:81:ea:
70:69:c5:1a:ff:28:ab:28:9b:88:dc:fd:ca:f5:b9:
c8:2f:79:5c:df:a1:5d:0f:7a:a3:f2:ba:32:fa:3b:
3e:f0:2f:be:d5:75:14:64:87:8a:5a:d5:c8:1d:63:
c4:28:a9:a9:93:92:02:67:06:24:d5:3b:29:86:8e:
fe:cc:78:dd:6b:ae:35:42:2e:6c:37:f3:cf:d1:aa:
1d:b7:a3:28:58:ae:7a:ba:b4:00:79:19:2f:d0:89:
88:d4:31:8c:cf:4b:e4:5c:03:ac:a8:37:17:9c:d8:
fb:5e:3b:e2:0d:8d:16:7f:cd:65:5f:75:35:d0:1a:
59:d3:c3:52:e0:bb:d3:7b:d0:f3:5b:c0:83:d8:b8:
f0:8b:5f:c3:18:79:84:bc:92:ba:28:b0:88:28:f8:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:C6:B1:BC:8C:99:EC:59:8F:6D:84:4A:02:95:6F:19:42:C5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:89:dc:eb:09:cf:c2:13:4c:a3:1f:f5:9d:52:d8:3d:c3:d4:
09:bf:5b:53:be:da:f0:59:79:3e:ec:a7:29:f5:37:f4:a2:f0:
ea:fd:42:98:00:82:d4:32:3c:28:d2:4c:59:97:08:0f:32:19:
9a:1f:44:1b:e4:95:da:10:b9:19:81:c7:f0:ec:7a:0a:1d:43:
5d:5c:0d:3f:bd:31:de:62:71:6e:ae:36:a8:95:fa:da:ad:c4:
f1:5e:46:66:dc:ff:67:6b:5c:ef:75:32:0e:15:8d:59:a4:39:
ca:7d:51:67:ab:20:3f:a0:b0:4e:cf:53:49:56:5c:7d:7b:98:
6b:ee:5e:7e:90:d8:25:bb:07:37:48:f9:4c:35:9d:4e:01:b0:
0e:12:94:2a:0b:2b:d3:16:e7:ab:fe:b1:11:b3:8f:d2:59:2f:
a6:82:65:be:e2:be:3a:0b:0c:75:24:95:59:dc:c9:ad:bd:65:
5e:d4:69:e6:0d:38:28:fe:d3:3c:cc:90:d6:fb:e3:6b:2a:90:
c8:06:80:04:24:8e:89:71:e2:65:ed:64:b3:63:e5:d3:dc:ad:
0c:f3:fd:78:0b:47:10:8b:d9:0b:58:4f:67:12:a8:4a:80:6c:
66:0a:f2:8b:c0:00:44:35:90:9c:38:0d:a2:ea:b5:40:2a:36:
59:79:6f:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglNy9xC6scpCoLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NjBjMzg5ZTYtYzY3ZS00ZTYwLTljNjUtYzhmMTAwMDFkMjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGWogOpfdqmpNFF6TrOgiWN/dkLOaUPGzVXI
PgkC5fadMAihoCqv7aeCeaQhZZXiIFGQ1+HkIzevaBzHAHsguNYP3+PWjmPd/zSe
J/KP7PzjtzjiwVd5yjRHFhWM8uifm2zcire/gepwacUa/yirKJuI3P3K9bnIL3lc
36FdD3qj8roy+js+8C++1XUUZIeKWtXIHWPEKKmpk5ICZwYk1Tspho7+zHjda641
Qi5sN/PP0aodt6MoWK56urQAeRkv0ImI1DGMz0vkXAOsqDcXnNj7XjviDY0Wf81l
X3U10BpZ08NS4LvTe9DzW8CD2Ljwi1/DGHmEvJK6KLCIKPj8KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaexrG8jJnsWY9thEoClW8ZQsW2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGNlMTJhNjUtMTRkYS0z
YjcyLTk1YTUtZGEwYWMxYzMxNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWJ3OsJz8ITTKMf9Z1S2D3D1Am/W1O+2vBZeT7spyn1N/Si8Or9QpgA
gtQyPCjSTFmXCA8yGZofRBvkldoQuRmBx/DsegodQ11cDT+9Md5icW6uNqiV+tqt
xPFeRmbc/2drXO91Mg4VjVmkOcp9UWerID+gsE7PU0lWXH17mGvuXn6Q2CW7BzdI
+Uw1nU4BsA4SlCoLK9MW56v+sRGzj9JZL6aCZb7ivjoLDHUklVncya29ZV7UaeYN
OCj+0zzMkNb742sqkMgGgAQkjolx4mXtZLNj5dPcrQzz/XgLRxCL2QtYT2cSqEqA
bGYK8ovAAEQ1kJw4DaLqtUAqNll5bx4=
-----END CERTIFICATE-----
Generated at Fri May 9 20:06:18 2025 by rpki-client