Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa
File: 10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa (raw, json)
Hash identifier: R5LlDy91cJA8cQe6aRc5FqH1wg3p3oG/Veh21U3QgdI=
Subject key identifier: 13:74:F4:B6:F1:09:CF:0A:E7:3F:1E:1D:A4:22:0A:C1:54:FF:70:5D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848BFEBD218C938237AF4AF9E70
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 108.177.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d2:18:c9:38:23:7a:f4:af:9e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=0e2feb25-ea56-4244-a81a-af1bd8c77141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:cc:c1:27:f6:7b:c3:56:c5:0d:19:97:64:
0a:5e:e7:72:9b:5a:17:9f:08:49:5d:e3:62:54:ff:
57:ec:88:69:ae:dd:77:0e:17:ff:83:af:ae:9c:81:
05:7d:d1:6d:0b:bc:6b:e5:d3:98:2f:24:cb:81:b2:
1d:24:e3:d6:84:01:39:c1:17:3c:08:61:6b:ba:4f:
23:dc:56:af:8a:3d:8d:05:16:2c:c8:37:ab:c8:be:
bf:ee:4e:6a:83:4c:50:c3:b5:cb:03:bd:be:df:7b:
d5:1f:1a:18:0a:19:30:49:6e:e9:b3:e3:63:3d:c5:
b3:e2:5b:39:42:dd:46:6d:f9:b3:b1:95:99:50:a1:
43:aa:4a:90:7d:ca:29:e6:a1:2b:0e:1f:bd:fb:37:
6e:a8:0a:32:95:12:67:07:4e:03:89:de:47:2d:5a:
ec:f7:1d:b3:89:e4:2e:21:51:59:8d:f1:69:a1:06:
8c:a6:18:8c:f8:c0:df:69:02:67:1b:dd:6e:b3:0c:
4d:b2:8a:bd:cb:7e:1f:e7:c2:96:91:ba:d7:5f:ba:
97:5d:33:d2:65:6a:bc:98:e9:55:82:cd:7c:94:ec:
58:64:f2:d2:3f:31:e5:4b:1a:d1:11:34:9e:3a:a1:
14:10:b7:17:3d:19:3e:1b:b7:b9:20:63:d9:40:21:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:F4:B6:F1:09:CF:0A:E7:3F:1E:1D:A4:22:0A:C1:54:FF:70:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:96:90:17:20:f5:2f:2b:7a:8f:63:c2:b6:4c:d6:52:81:32:
aa:c3:ff:5c:a1:0f:59:c9:23:13:2b:7b:1e:de:c6:b4:53:a0:
c1:05:56:52:b0:7d:82:af:43:f6:a5:cf:00:17:31:ba:43:cb:
8a:fb:65:07:c7:2e:7c:d4:3c:75:f1:22:aa:17:0b:37:4e:dd:
45:94:3c:6b:c6:c0:0a:b9:99:23:98:99:19:2e:2a:14:8a:40:
c7:52:5d:5a:b5:22:4d:cd:78:98:0b:88:a0:59:b4:84:29:88:
ed:5f:37:9c:da:c5:84:9f:15:d9:8f:fb:9d:56:7a:c2:07:4c:
24:2f:78:6c:9e:ad:6d:9c:f8:2f:17:2a:1a:15:bf:d7:45:51:
66:12:24:e5:ca:eb:ab:47:fa:69:83:cf:4c:0d:5b:f1:44:b7:
48:ec:2a:3e:e1:f8:15:b5:af:f7:57:52:03:29:ec:63:cb:9c:
a1:99:21:fa:a7:0b:36:5e:25:af:b1:3f:af:9a:e8:99:d1:69:
c0:1e:ba:46:fd:53:05:7c:9c:02:be:83:32:cd:3e:f2:55:11:
db:60:ab:fa:28:8a:84:19:90:55:4e:5b:81:ca:aa:94:2b:11:
a1:26:0b:d6:fc:4b:33:fd:e4:36:75:9f:b6:6d:70:23:ae:8a:
ae:4c:b5:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69IYyTgjevSvnnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MGUyZmViMjUtZWE1Ni00MjQ0LWE4MWEtYWYxYmQ4Yzc3MTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK3MwSf2e8NWxQ0Zl2QKXudym1oXnwhJXeNi
VP9X7Ihprt13Dhf/g6+unIEFfdFtC7xr5dOYLyTLgbIdJOPWhAE5wRc8CGFruk8j
3Favij2NBRYsyDeryL6/7k5qg0xQw7XLA72+33vVHxoYChkwSW7ps+NjPcWz4ls5
Qt1GbfmzsZWZUKFDqkqQfcop5qErDh+9+zduqAoylRJnB04Did5HLVrs9x2zieQu
IVFZjfFpoQaMphiM+MDfaQJnG91uswxNsoq9y34f58KWkbrXX7qXXTPSZWq8mOlV
gs18lOxYZPLSPzHlSxrRETSeOqEUELcXPRk+G7e5IGPZQCHnxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN09LbxCc8K5z8eHaQiCsFU/3BdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBjZjBjMzYtMDliYS0z
ODI1LWI4MzctOGE4YTZhMTBmYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+WkBcg9S8reo9jwrZM1lKBMqrD/1yhD1nJIxMrex7exrRToMEFVlKw
fYKvQ/alzwAXMbpDy4r7ZQfHLnzUPHXxIqoXCzdO3UWUPGvGwAq5mSOYmRkuKhSK
QMdSXVq1Ik3NeJgLiKBZtIQpiO1fN5zaxYSfFdmP+51WesIHTCQveGyerW2c+C8X
KhoVv9dFUWYSJOXK66tH+mmDz0wNW/FEt0jsKj7h+BW1r/dXUgMp7GPLnKGZIfqn
CzZeJa+xP6+a6JnRacAeukb9UwV8nAK+gzLNPvJVEdtgq/ooioQZkFVOW4HKqpQr
EaEmC9b8SzP95DZ1n7ZtcCOuiq5MtbY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:53:09 2025 by rpki-client