Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1429fe3-9ff0-3285-855e-41d413d083d5.roa
File: e1429fe3-9ff0-3285-855e-41d413d083d5.roa (raw, json)
Hash identifier: H4pyclCfW9eeYiVtTsPJV1Oeht2IehgHwmqgXWtfsnQ=
Subject key identifier: 11:D1:B1:94:56:10:B8:2E:DB:6F:91:9B:B0:DA:74:73:97:24:71:14
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBBAB29C04945D0535DF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1429fe3-9ff0-3285-855e-41d413d083d5.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 107.178.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ba:b2:9c:04:94:5d:05:35:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=8c64716e-bf31-40de-a341-9236ae8dfa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:d2:cb:ef:65:21:97:33:40:8f:45:5e:89:
f1:0f:c3:e2:f8:6a:78:1e:c0:64:b1:10:a9:02:ca:
38:6f:5b:bd:2f:0d:07:4e:c9:6f:e6:7b:0f:c1:fe:
df:d1:44:da:31:dd:b2:b3:10:8c:56:d4:d1:88:78:
1b:a2:9a:b1:ad:fa:78:77:f5:c9:6e:c0:ce:83:69:
ab:5a:2b:98:cc:a9:5f:59:d3:54:7b:1b:fc:3d:6f:
ea:44:f1:16:0f:89:c3:0a:24:eb:0b:e3:ea:2d:d8:
13:b1:3e:f5:cb:16:57:18:e4:56:92:db:5a:99:e1:
17:2d:62:14:c4:5f:da:b6:33:70:09:e2:52:5f:49:
d7:86:db:82:7d:0e:09:30:e3:1b:d1:f5:71:72:83:
0f:6a:30:b1:f7:a7:15:51:31:48:89:43:b6:88:93:
dc:8a:5a:bb:c5:5e:51:83:69:25:3f:d1:87:86:55:
e7:bf:8b:c0:02:6e:41:e9:df:40:97:3b:4c:b4:58:
73:8c:59:fd:8d:af:0d:90:4a:07:7a:8d:03:5f:6d:
76:f4:ba:78:e4:c3:e9:60:5b:26:0d:6c:74:cf:2e:
55:56:73:2b:1f:97:c5:4e:e2:e0:c5:be:94:8a:1a:
f1:da:51:4e:eb:4a:90:fd:89:f1:ca:53:20:b3:0a:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:B1:94:56:10:B8:2E:DB:6F:91:9B:B0:DA:74:73:97:24:71:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1429fe3-9ff0-3285-855e-41d413d083d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
107.178.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f2:1d:3a:c4:77:52:41:63:54:f5:7f:9e:aa:24:12:d7:da:
7a:83:8f:67:77:68:cb:1d:27:98:ad:c9:91:78:63:15:c4:ec:
3c:68:db:7f:1b:26:01:14:73:00:af:b1:41:06:f7:69:a1:99:
50:46:63:e8:0b:de:c2:35:aa:6e:a4:94:46:b0:33:77:06:ab:
b2:73:6d:a3:ba:67:69:28:ae:03:15:23:a1:55:17:f5:99:bd:
1a:8d:6a:3f:d2:f7:df:e2:a5:31:9f:ce:9b:be:39:bf:6d:56:
36:bc:2b:89:7a:7d:e5:94:f2:2d:24:a3:39:a1:f5:02:50:d3:
14:50:2f:12:5b:38:cb:28:50:3b:40:2f:ae:6e:6e:b4:d7:fb:
55:15:df:86:eb:3d:16:78:2c:c8:d7:2a:3b:2b:f7:4a:e4:fe:
ae:5c:85:cd:d7:aa:ca:d9:fa:01:53:29:7e:7b:ba:5c:20:c9:
fa:a7:e8:e2:32:3c:13:f2:04:8c:ca:02:03:38:c8:14:94:d3:
c4:21:de:86:8c:6c:b9:8a:65:d2:51:a7:7a:28:2d:89:80:ec:
bc:af:7f:84:a9:5c:51:66:74:54:62:3a:e3:06:be:af:79:3a:
f0:ea:31:44:71:2e:b8:ae:6f:65:a5:62:a0:5d:21:e1:b2:f5:
da:9b:22:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67qynASUXQU134AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
OGM2NDcxNmUtYmYzMS00MGRlLWEzNDEtOTIzNmFlOGRmYTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd7Sy+9lIZczQI9FXonxD8Pi+Gp4HsBksRCp
Aso4b1u9Lw0HTslv5nsPwf7f0UTaMd2ysxCMVtTRiHgbopqxrfp4d/XJbsDOg2mr
WiuYzKlfWdNUexv8PW/qRPEWD4nDCiTrC+PqLdgTsT71yxZXGORWkttameEXLWIU
xF/atjNwCeJSX0nXhtuCfQ4JMOMb0fVxcoMPajCx96cVUTFIiUO2iJPcilq7xV5R
g2klP9GHhlXnv4vAAm5B6d9AlztMtFhzjFn9ja8NkEoHeo0DX2129Lp45MPpYFsm
DWx0zy5VVnMrH5fFTuLgxb6Uihrx2lFO60qQ/YnxylMgswohPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHRsZRWELgu22+Rm7DadHOXJHEUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTE0MjlmZTMtOWZmMC0z
Mjg1LTg1NWUtNDFkNDEzZDA4M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa7LQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzyHTrEd1JBY1T1f56qJBLX2nqDj2d3aMsdJ5ityZF4YxXE7Dxo238b
JgEUcwCvsUEG92mhmVBGY+gL3sI1qm6klEawM3cGq7JzbaO6Z2korgMVI6FVF/WZ
vRqNaj/S99/ipTGfzpu+Ob9tVja8K4l6feWU8i0kozmh9QJQ0xRQLxJbOMsoUDtA
L65ubrTX+1UV34brPRZ4LMjXKjsr90rk/q5chc3XqsrZ+gFTKX57ulwgyfqn6OIy
PBPyBIzKAgM4yBSU08Qh3oaMbLmKZdJRp3ooLYmA7Lyvf4SpXFFmdFRiOuMGvq95
OvDqMURxLriub2WlYqBdIeGy9dqbIg8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:48 2025 by rpki-client