Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa
File: 60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa (raw, json)
Hash identifier: U0kn0XT63hgd8ACwEQuZuH0zK/gneErqWcYKUU0q9+s=
Subject key identifier: 43:93:D7:50:BC:1F:EC:43:19:2D:40:05:DD:54:05:2C:0C:08:1B:1A
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848D6410940E61E2B3BD1BC1180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 62610
IP address blocks: 107.151.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:09:40:e6:1e:2b:3b:d1:bc:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=1be74122-84af-4b53-89ac-2c46287e92d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:e7:26:52:87:b4:51:8b:73:19:2b:ac:75:
63:ed:ca:04:a8:5b:c9:55:f8:02:dd:dc:0f:21:d4:
a1:7d:1d:e6:20:58:03:84:1f:03:39:66:72:bb:b9:
92:eb:52:6b:7d:8e:56:f5:7a:c4:19:3b:c3:61:3f:
f3:aa:99:b3:74:21:fa:38:d7:07:84:48:cd:1b:b4:
99:19:31:5b:6f:a3:26:29:25:86:c7:0e:39:d2:22:
ec:a1:91:40:0f:d7:10:75:77:51:29:b9:cf:40:2b:
1c:78:80:f7:0e:23:9e:a4:bc:ab:bd:67:9c:89:e0:
47:16:73:ca:07:31:73:b6:bc:c1:b7:7a:72:d1:a8:
1e:0d:0a:d6:a1:68:86:00:b2:4b:ec:7c:1d:44:a4:
5f:07:77:ce:0c:f4:f6:14:04:e7:65:c7:83:31:b0:
37:0c:2c:59:6a:38:5d:b8:9e:33:14:94:30:48:e3:
d4:7e:6a:89:62:01:83:70:14:f0:d5:c5:01:bd:a8:
a5:8d:ff:50:1e:12:e7:2e:17:03:63:80:70:1f:6d:
64:ba:07:fc:43:dc:d2:f4:bb:2c:5b:a8:42:de:ca:
62:21:d2:74:27:3b:b4:cb:53:6e:f2:aa:57:e2:01:
58:ce:99:77:77:92:69:22:75:1e:55:98:31:0e:87:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:D7:50:BC:1F:EC:43:19:2D:40:05:DD:54:05:2C:0C:08:1B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ed:b7:48:41:5b:f1:9f:2d:74:8b:be:e9:1c:7e:5c:c8:4c:
68:51:e7:fe:f9:cc:1d:20:b5:44:28:73:ba:47:a8:97:11:d3:
21:28:7b:11:c2:a0:31:9c:9e:6e:1a:4f:a9:f8:42:3f:59:3f:
2f:ea:44:99:2f:bd:9b:a5:fd:0c:1f:c8:7c:f6:62:77:7a:37:
b9:0c:36:4e:f8:52:fa:9f:9a:73:d5:3c:77:0d:a1:02:93:8c:
9b:68:5b:91:d2:9b:60:ec:fb:c0:88:3d:0a:69:86:f8:e0:07:
78:de:96:ea:ec:33:1d:a0:1a:1d:a2:ee:99:ed:d2:cb:fd:ea:
43:9e:7e:03:92:86:7e:b3:dd:b2:26:96:d8:28:75:0b:1c:b1:
c0:34:6d:b9:70:b5:12:c0:11:bc:9b:3d:6e:7e:08:7f:71:57:
0a:45:20:4f:d9:ab:1c:d7:08:74:d6:2b:af:30:28:cd:04:7d:
1d:e9:9d:ed:c7:52:a5:a8:cc:8e:0d:f7:c1:db:6f:e4:fa:9a:
e2:63:9b:65:d9:ea:e5:dc:2e:37:db:18:9c:67:24:8e:9a:5f:
43:ad:ee:88:42:5a:b3:9e:a4:28:61:fa:b0:8e:ee:1f:97:4b:
43:b3:af:2c:84:e9:c8:64:8e:ef:26:0b:8e:15:18:25:77:f0:
e5:17:da:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQlA5h4rO9G8EYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWJlNzQxMjItODRhZi00YjUzLTg5YWMtMmM0NjI4N2U5MmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM3nJlKHtFGLcxkrrHVj7coEqFvJVfgC3dwP
IdShfR3mIFgDhB8DOWZyu7mS61JrfY5W9XrEGTvDYT/zqpmzdCH6ONcHhEjNG7SZ
GTFbb6MmKSWGxw450iLsoZFAD9cQdXdRKbnPQCsceID3DiOepLyrvWecieBHFnPK
BzFztrzBt3py0ageDQrWoWiGALJL7HwdRKRfB3fODPT2FATnZceDMbA3DCxZajhd
uJ4zFJQwSOPUfmqJYgGDcBTw1cUBvailjf9QHhLnLhcDY4BwH21kugf8Q9zS9Lss
W6hC3spiIdJ0Jzu0y1Nu8qpX4gFYzpl3d5JpInUeVZgxDoeBeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOT11C8H+xDGS1ABd1UBSwMCBsaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNjBjNWM5MDMtN2ZhMy0z
YWFjLTlhZWUtMmVkN2UzODk5MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5eZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7tt0hBW/GfLXSLvukcflzITGhR5/75zB0gtUQoc7pHqJcR0yEoexHC
oDGcnm4aT6n4Qj9ZPy/qRJkvvZul/QwfyHz2Ynd6N7kMNk74UvqfmnPVPHcNoQKT
jJtoW5HSm2Ds+8CIPQpphvjgB3jelursMx2gGh2i7pnt0sv96kOefgOShn6z3bIm
ltgodQscscA0bblwtRLAEbybPW5+CH9xVwpFIE/ZqxzXCHTWK68wKM0EfR3pne3H
UqWozI4N98Hbb+T6muJjm2XZ6uXcLjfbGJxnJI6aX0Ot7ohCWrOepChh+rCO7h+X
S0OzryyE6chkju8mC44VGCV38OUX2kw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:36 2025 by rpki-client