Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
File: 4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa (raw, json)
Hash identifier: 6srjyZI6MPbA9GT7XQRZQNGkmdMB9PsCt3Q6coQJjUw=
Subject key identifier: 84:03:FC:41:86:68:BC:57:5B:EB:DF:9A:54:90:1C:8B:38:A9:B0:B4
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858493C092C6AAB979E0C84393240
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 7018
IP address blocks: 138.229.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2c:6a:ab:97:9e:0c:84:39:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=bad04e69-06c6-49e0-9001-278c4670c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:38:68:6a:b6:5a:5d:56:0c:c3:68:31:c2:
47:f5:53:ad:95:d8:8f:f5:6a:c3:17:60:b6:15:d1:
da:66:c2:2d:28:7e:a9:ba:10:00:a8:59:27:59:6e:
45:ee:10:4a:93:36:fd:26:e6:77:3e:25:55:2d:ef:
ff:31:9d:e0:6c:85:4f:71:70:b4:5a:5d:f0:9b:75:
f6:49:cb:75:e3:4b:0d:05:54:16:76:b2:96:8d:66:
2d:0f:72:33:d1:c7:05:92:d6:ee:4e:b6:49:d6:ed:
dd:6f:ad:1c:29:41:46:2b:43:b4:2d:30:38:b5:7a:
a0:15:55:6e:d5:89:19:7c:89:dc:42:ba:b1:5d:6f:
28:cd:99:d3:c7:40:1b:5f:1f:f3:85:60:86:23:76:
2f:7e:14:5c:57:47:34:b8:3e:da:48:e9:71:83:df:
c7:56:00:aa:d2:60:00:44:5f:66:84:f4:52:e9:61:
39:79:5d:84:93:4b:67:ec:7f:17:f2:51:bd:45:cd:
3a:94:a0:68:a4:26:02:f5:f7:8e:74:fe:75:f2:66:
34:24:b7:3b:82:63:5e:40:08:a8:33:63:29:6c:84:
7e:6e:8d:69:68:43:86:05:3f:86:47:9c:bf:06:92:
df:43:4d:f0:e7:61:62:c1:a8:38:be:bf:90:5d:76:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:03:FC:41:86:68:BC:57:5B:EB:DF:9A:54:90:1C:8B:38:A9:B0:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
138.229.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:f7:79:87:28:c0:41:b3:2e:1d:d5:17:06:b3:13:b6:dd:1d:
f1:d5:fc:2e:b1:0d:46:d1:38:ee:08:06:11:7e:b6:96:69:47:
ad:85:a3:bf:75:cc:69:94:63:bb:90:f2:41:44:20:f1:ce:ae:
14:72:ae:d4:e7:a5:c5:c1:e6:76:f5:83:6c:fe:d6:33:a1:b3:
8f:40:5e:34:af:b1:0d:7b:a7:15:ef:fb:88:4e:87:61:16:47:
9b:57:59:4a:e9:af:15:e7:33:40:b4:3f:6b:f6:9e:f0:65:4c:
83:a1:00:7e:8c:31:fc:99:e3:6d:cc:d4:1f:13:2f:01:90:c4:
04:9f:51:97:62:6e:ee:67:1e:b9:e0:d6:3a:52:c2:df:0d:7d:
7b:e9:07:23:c3:9e:ef:e8:b5:53:70:40:b6:cc:e8:9d:f5:24:
0e:b4:a7:41:e7:e6:a5:e8:3d:61:a7:1e:92:25:fa:c0:3b:c0:
0e:7d:d5:32:be:51:7b:5f:4b:9f:63:3b:cd:b4:c4:db:f9:9a:
68:85:51:bd:5d:6e:87:6a:81:89:de:13:65:14:66:30:0a:01:
51:62:56:68:78:f0:d0:af:c3:57:a8:ce:a9:4a:12:b2:a5:b0:
bc:02:a2:95:c3:3e:97:6f:c5:60:db:13:1e:79:78:86:11:c4:
f1:27:30:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSxqq5eeDIQ5MkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YmFkMDRlNjktMDZjNi00OWUwLTkwMDEtMjc4YzQ2NzBjMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllA4aGq2Wl1WDMNoMcJH9VOtldiP9WrDF2C2
FdHaZsItKH6puhAAqFknWW5F7hBKkzb9JuZ3PiVVLe//MZ3gbIVPcXC0Wl3wm3X2
Sct140sNBVQWdrKWjWYtD3Iz0ccFktbuTrZJ1u3db60cKUFGK0O0LTA4tXqgFVVu
1YkZfIncQrqxXW8ozZnTx0AbXx/zhWCGI3YvfhRcV0c0uD7aSOlxg9/HVgCq0mAA
RF9mhPRS6WE5eV2Ek0tn7H8X8lG9Rc06lKBopCYC9feOdP518mY0JLc7gmNeQAio
M2MpbIR+bo1paEOGBT+GR5y/BpLfQ03w52Fiwag4vr+QXXbwZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQD/EGGaLxXW+vfmlSQHIs4qbC0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNGQyMzU0M2MtMWNkYi0z
ZWIwLWIzOWEtMWZhMzEyOTQ5MWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHD3eYcowEGzLh3VFwazE7bdHfHV/C6xDUbROO4IBhF+tpZpR62Fo791
zGmUY7uQ8kFEIPHOrhRyrtTnpcXB5nb1g2z+1jOhs49AXjSvsQ17pxXv+4hOh2EW
R5tXWUrprxXnM0C0P2v2nvBlTIOhAH6MMfyZ423M1B8TLwGQxASfUZdibu5nHrng
1jpSwt8NfXvpByPDnu/otVNwQLbM6J31JA60p0Hn5qXoPWGnHpIl+sA7wA591TK+
UXtfS59jO820xNv5mmiFUb1dbodqgYneE2UUZjAKAVFiVmh48NCvw1eozqlKErKl
sLwCopXDPpdvxWDbEx55eIYRxPEnMOs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:06 2025 by rpki-client