Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
File: edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa (raw, json)
Hash identifier: nvzO5hcqqSHgQHAcTVq51mJzSh4MK3d4CK4GHn2I6Eo=
Subject key identifier: 63:BA:79:AF:08:C0:60:7A:12:DE:6C:51:E6:C7:62:D4:10:25:71:D8
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F43285848E16BE8183A41E1B6F2337E80
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 1403
IP address blocks: 107.161.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e8:18:3a:41:e1:b6:f2:33:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=b2e65251-2d6f-477b-bd3c-2bf95173325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:90:e6:e2:47:8a:ac:7c:fa:22:97:bc:42:
73:94:dd:67:e2:98:22:16:3e:6e:92:b9:5a:81:d5:
75:30:bb:9e:2b:c9:f7:98:6a:77:e6:0f:56:2b:39:
05:0d:8d:33:0d:d6:c8:42:52:bd:e3:51:3c:cf:22:
b7:8f:79:66:21:b8:99:80:ca:e5:fc:43:47:c2:59:
ce:4a:a1:54:a3:ef:3c:c0:c6:65:3b:f1:f4:3a:d4:
36:ae:ae:10:02:d5:3f:8e:62:62:1e:e6:62:6f:f4:
79:67:25:4b:e0:6a:ad:08:91:ab:9a:82:29:df:44:
03:0f:5e:b2:7d:22:48:d9:58:fd:f6:d8:9a:9d:e8:
d9:46:b5:19:69:97:d5:5e:a6:17:da:e2:32:6b:10:
43:35:c9:16:7e:9c:66:ae:cf:32:ea:6a:58:57:60:
5f:70:bc:61:87:94:7a:5e:4a:fd:0f:38:4b:94:87:
d4:68:29:1a:95:ea:43:44:5d:24:ac:0d:9d:77:f4:
97:86:db:50:30:db:0a:fe:93:46:5e:12:0f:3b:92:
8c:01:8b:98:f5:0d:79:b6:2a:e2:65:80:a9:63:09:
ba:58:3c:59:54:1a:11:9d:b4:a0:4b:28:89:8b:a4:
bc:8e:00:31:b1:69:7c:e1:74:3f:bf:18:16:77:1f:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BA:79:AF:08:C0:60:7A:12:DE:6C:51:E6:C7:62:D4:10:25:71:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
107.161.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:41:ce:5a:b9:06:ad:10:91:0a:3d:09:1e:d3:a8:e8:fa:5d:
52:ea:56:72:b1:0b:7e:b3:b1:32:63:93:e6:25:46:9d:c5:7a:
ca:38:b7:94:d0:f5:71:aa:d0:34:18:14:01:2b:8a:72:5b:54:
b5:11:c0:a6:9a:cf:83:db:ca:5b:74:d0:7e:cd:68:14:5f:3f:
1c:e5:68:53:57:6b:5c:64:0e:8c:f3:c6:3f:61:44:7e:52:1b:
db:ff:15:04:b2:f1:56:20:fd:eb:65:f3:15:3f:65:cf:3c:af:
a8:48:d0:b8:08:71:fd:83:6d:b0:c6:d6:61:87:90:56:55:58:
7a:8e:9b:6a:46:22:7b:b0:bf:a7:1c:9c:4c:6c:1d:bf:39:ad:
c2:67:c3:7e:6f:69:97:b0:5b:ca:b4:97:ae:97:84:f8:64:a8:
08:7e:e0:7c:0b:b5:91:d8:af:90:5e:71:e5:a5:91:d7:a8:83:
df:9d:51:ad:ca:a9:8c:19:74:98:17:33:f5:d4:82:e4:c7:40:
11:68:9d:8b:c2:79:e0:6f:d6:83:e6:f8:55:ad:2e:b2:28:6c:
e1:6a:07:b1:e6:b4:80:d7:de:4a:0f:d1:7e:bc:83:df:c1:f3:
9d:2b:3e:fb:4d:01:b4:43:85:52:b9:7d:90:63:10:61:bf:75:
74:c1:8f:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+gYOkHhtvIzfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
YjJlNjUyNTEtMmQ2Zi00NzdiLWJkM2MtMmJmOTUxNzMzMjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4iQ5uJHiqx8+iKXvEJzlN1n4pgiFj5ukrla
gdV1MLueK8n3mGp35g9WKzkFDY0zDdbIQlK941E8zyK3j3lmIbiZgMrl/ENHwlnO
SqFUo+88wMZlO/H0OtQ2rq4QAtU/jmJiHuZib/R5ZyVL4GqtCJGrmoIp30QDD16y
fSJI2Vj99tianejZRrUZaZfVXqYX2uIyaxBDNckWfpxmrs8y6mpYV2BfcLxhh5R6
Xkr9DzhLlIfUaCkalepDRF0krA2dd/SXhttQMNsK/pNGXhIPO5KMAYuY9Q15tiri
ZYCpYwm6WDxZVBoRnbSgSyiJi6S8jgAxsWl84XQ/vxgWdx/VvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGO6ea8IwGB6Et5sUebHYtQQJXHYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvZWRiMTM5OWMtZTdhYS0z
NmE4LWJkNDQtZGZiYWNiYTgwOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa6E4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhBzlq5Bq0QkQo9CR7TqOj6XVLqVnKxC36zsTJjk+YlRp3Feso4t5TQ
9XGq0DQYFAErinJbVLURwKaaz4Pbylt00H7NaBRfPxzlaFNXa1xkDozzxj9hRH5S
G9v/FQSy8VYg/etl8xU/Zc88r6hI0LgIcf2DbbDG1mGHkFZVWHqOm2pGInuwv6cc
nExsHb85rcJnw35vaZewW8q0l66XhPhkqAh+4HwLtZHYr5BeceWlkdeog9+dUa3K
qYwZdJgXM/XUguTHQBFonYvCeeBv1oPm+FWtLrIobOFqB7HmtIDX3koP0X68g9/B
850rPvtNAbRDhVK5fZBjEGG/dXTBj/0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:29 2025 by rpki-client