Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa
File: 2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa (raw, json)
Hash identifier: DCyQNmRSEZU4zYBaMtNPvH75XEfAJoQFYh1+oFyIx9A=
Subject key identifier: 56:73:03:CC:54:3C:D8:28:82:07:0F:3A:77:33:F7:5A:43:4F:8C:F0
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858489A3B4E1B83ECCBAC8AE846C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 62651
IP address blocks: 108.171.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4e:1b:83:ec:cb:ac:8a:e8:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=d8356c53-773c-4db0-8067-be994d8f1411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:00:d1:93:bf:0b:f5:f4:24:b7:40:5a:30:
e7:25:99:18:15:fe:3d:54:e4:90:10:d0:dc:a1:ef:
35:2c:5f:41:48:74:28:f3:f8:51:f0:7e:f3:f1:69:
0e:8a:19:da:ce:a9:6c:c4:f1:93:43:1c:21:8c:45:
64:ea:8a:d6:67:36:f4:dd:86:e4:cc:3b:9d:15:47:
79:70:b7:1b:05:0d:c1:40:b9:43:6d:36:29:9d:ea:
c0:2b:04:b3:3c:bd:70:52:8d:7d:56:c1:6b:12:b4:
a2:5a:d6:ea:6c:32:fb:2b:0e:14:03:4a:ea:41:d6:
f1:42:fc:e3:d5:f9:4c:24:bf:6b:7d:6d:2a:f3:3d:
2f:02:fe:72:10:b0:05:89:e9:59:16:89:ef:b8:7d:
96:36:34:66:e9:5d:7e:92:ce:f1:07:82:9b:da:e9:
1c:42:15:c0:d1:3f:bf:c7:b7:28:cd:6b:5c:d7:c1:
31:be:1f:f8:b9:e1:1b:94:c1:d0:67:c6:d8:51:47:
d6:9c:dc:fc:eb:ef:1d:db:eb:c8:da:e9:5e:ae:e9:
60:32:5a:a4:76:d2:66:79:10:3f:89:47:79:e1:fa:
56:03:e6:91:bc:92:82:3b:fd:8b:7b:2f:49:15:6c:
53:e1:8c:fd:41:0d:b5:90:05:28:f2:1b:c2:d4:d7:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:73:03:CC:54:3C:D8:28:82:07:0F:3A:77:33:F7:5A:43:4F:8C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:23:a0:d0:7e:26:89:ee:1f:23:b3:a8:f8:5a:fb:67:fe:fc:
1b:70:0c:81:8f:30:f2:a9:e6:3b:12:cf:e3:2e:22:01:e0:39:
9c:32:f5:3f:5c:5e:de:52:03:57:fe:4e:cb:92:fb:e3:13:ea:
f1:e1:c2:0f:f8:2b:7c:b8:6d:05:f5:91:ca:d7:b8:97:8a:60:
56:41:b6:ea:8f:a2:5f:13:e1:13:bb:7b:b3:71:c7:00:02:a8:
30:54:5f:7d:be:6e:a5:8a:47:d8:10:dd:18:28:e2:75:ed:e0:
58:e6:e8:b3:fe:fd:84:fa:1b:a0:88:a4:84:8f:45:22:cf:6a:
46:69:3b:7e:2d:35:26:9d:1d:c0:ba:e8:d9:80:d5:5e:e9:96:
00:de:9c:86:17:b7:70:c8:f2:69:d9:f4:b7:ec:15:00:1b:e4:
22:b8:ba:c5:9c:b2:04:22:b1:c8:d1:ea:a9:a8:20:75:a3:cb:
9c:70:ec:bc:3b:2d:47:3a:4d:39:98:11:04:1c:b0:a7:29:27:
2e:d8:55:2d:9e:5a:eb:74:16:40:5a:84:05:8c:4c:58:0a:9a:
bb:17:ac:4b:a5:d4:02:e8:54:74:4c:b3:67:1a:cf:cb:28:d4:
45:2a:fa:10:13:aa:86:17:fb:65:76:a0:e1:7d:d2:47:72:6c:
e9:a7:df:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO04bg+zLrIroRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZDgzNTZjNTMtNzczYy00ZGIwLTgwNjctYmU5OTRkOGYxNDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E8A0ZO/C/X0JLdAWjDnJZkYFf49VOSQENDc
oe81LF9BSHQo8/hR8H7z8WkOihnazqlsxPGTQxwhjEVk6orWZzb03YbkzDudFUd5
cLcbBQ3BQLlDbTYpnerAKwSzPL1wUo19VsFrErSiWtbqbDL7Kw4UA0rqQdbxQvzj
1flMJL9rfW0q8z0vAv5yELAFielZFonvuH2WNjRm6V1+ks7xB4Kb2ukcQhXA0T+/
x7cozWtc18Exvh/4ueEblMHQZ8bYUUfWnNz86+8d2+vI2ulerulgMlqkdtJmeRA/
iUd54fpWA+aRvJKCO/2Ley9JFWxT4Yz9QQ21kAUo8hvC1NdWGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZzA8xUPNgoggcPOncz91pDT4zwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMmIxODRjYmMtZmRkZi0z
MWUzLWEwZjAtZTk5YWM0YjI0M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKtoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIjoNB+JonuHyOzqPha+2f+/BtwDIGPMPKp5jsSz+MuIgHgOZwy9T9c
Xt5SA1f+TsuS++MT6vHhwg/4K3y4bQX1kcrXuJeKYFZBtuqPol8T4RO7e7NxxwAC
qDBUX32+bqWKR9gQ3Rgo4nXt4Fjm6LP+/YT6G6CIpISPRSLPakZpO34tNSadHcC6
6NmA1V7plgDenIYXt3DI8mnZ9LfsFQAb5CK4usWcsgQiscjR6qmoIHWjy5xw7Lw7
LUc6TTmYEQQcsKcpJy7YVS2eWut0FkBahAWMTFgKmrsXrEul1ALoVHRMs2caz8so
1EUq+hATqoYX+2V2oOF90kdybOmn37s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:04 2025 by rpki-client