Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json)
Hash identifier: 6QSF2xNQiry9EstNrnOP4d5jwlrRQg3UuS/Ld5w2hek=
Subject key identifier: 36:E8:7E:4C:14:FF:88:B6:69:1E:E7:5E:37:99:11:28:B7:15:9F:FF
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F432858495ABEDEB35F7D113491097AC0
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 40788
IP address blocks: 108.168.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:de:b3:5f:7d:11:34:91:09:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=d7242245-27ab-41a7-a9d2-651586ceff7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:06:e5:15:03:7f:7c:3a:e8:af:f6:3c:3e:
55:e2:c4:02:d9:9f:53:30:c5:08:eb:d4:ab:5e:eb:
8b:46:e6:b0:3e:7e:2a:6b:60:b4:5f:17:1e:9d:f8:
fa:87:ed:2b:dd:ec:3f:ae:5a:e5:05:fb:65:b8:d1:
0a:9d:f9:c3:81:7f:03:0c:d7:1f:67:ab:d3:92:6a:
5a:fa:6e:9d:1b:1f:61:b0:ec:92:ca:97:21:cd:16:
d0:a3:b7:95:3a:88:db:ef:0a:ad:fa:6f:f1:40:ba:
3e:ab:5a:4d:d2:17:c4:cd:25:84:3f:5d:01:b9:75:
20:fd:2d:c5:7a:30:55:ed:9f:b7:0d:91:d4:f1:2f:
86:71:5a:d6:74:9e:0a:55:61:2b:f4:9e:61:52:14:
1a:b2:0b:92:66:cb:d8:6d:2d:35:ce:fd:e2:60:8a:
81:d4:82:77:77:0b:46:45:d7:8c:26:00:e7:12:1e:
a7:f5:47:4f:9c:b1:41:43:7c:14:48:15:ef:40:63:
d3:b3:57:8c:b0:20:ad:15:de:df:c8:ac:31:df:39:
70:2a:56:82:eb:7b:14:cc:d7:82:40:3c:3e:68:5b:
94:ef:e7:6f:8b:74:c6:8b:79:1e:67:e9:62:af:59:
5e:9f:65:18:70:bc:de:b4:0c:76:c9:f7:11:4f:72:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:7E:4C:14:FF:88:B6:69:1E:E7:5E:37:99:11:28:B7:15:9F:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
108.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:01:94:65:05:7a:03:e5:ee:bc:40:47:c9:0a:0f:22:69:b3:
01:06:88:a0:ed:f6:85:53:d1:a7:a3:6d:ca:d5:8f:cf:13:91:
25:38:e8:a1:37:cc:85:13:aa:71:0c:1e:91:5d:ad:2d:c1:50:
84:f9:49:ff:de:a7:ac:74:7b:54:71:ba:2f:2a:fd:07:39:68:
53:38:88:0b:e0:2d:4b:55:ab:be:33:55:94:23:bf:60:c4:d2:
4f:c9:30:fb:cc:8f:12:9f:56:7c:24:b3:3b:92:d0:0d:8d:64:
4b:44:53:ec:40:47:2e:b9:9a:af:1d:1b:34:28:d2:2e:4d:af:
b0:53:4f:77:fa:05:79:9e:87:c8:01:91:da:97:82:18:33:1a:
e1:bc:c8:0e:30:95:64:f4:92:57:10:1b:03:b8:7c:a7:2c:91:
a5:5c:dc:fa:a4:11:1e:bb:82:ec:42:32:25:63:e6:b1:9f:49:
4c:56:1e:dc:d8:46:2c:15:ee:e6:d3:26:4d:0b:74:dd:5d:15:
87:50:8a:be:cc:15:e7:9c:38:65:00:64:f8:48:1a:c5:4a:c0:
54:fb:5a:be:90:35:52:90:38:4b:6e:b8:72:f2:86:6d:e3:38:
e2:e4:ea:20:ba:8d:47:f0:5a:66:b0:86:52:a6:ec:2e:fb:e4:
eb:8c:ec:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt6zX30RNJEJesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl
MDU5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
ZDcyNDIyNDUtMjdhYi00MWE3LWE5ZDItNjUxNTg2Y2VmZjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlsG5RUDf3w66K/2PD5V4sQC2Z9TMMUI69Sr
XuuLRuawPn4qa2C0Xxcenfj6h+0r3ew/rlrlBftluNEKnfnDgX8DDNcfZ6vTkmpa
+m6dGx9hsOySypchzRbQo7eVOojb7wqt+m/xQLo+q1pN0hfEzSWEP10BuXUg/S3F
ejBV7Z+3DZHU8S+GcVrWdJ4KVWEr9J5hUhQasguSZsvYbS01zv3iYIqB1IJ3dwtG
RdeMJgDnEh6n9UdPnLFBQ3wUSBXvQGPTs1eMsCCtFd7fyKwx3zlwKlaC63sUzNeC
QDw+aFuU7+dvi3TGi3keZ+lir1len2UYcLzetAx2yfcRT3L2zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbofkwU/4i2aR7nXjeZESi3FZ//MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5
YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z
YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj
MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh
ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy
NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJABlGUFegPl7rxAR8kKDyJpswEGiKDt9oVT0aejbcrVj88TkSU46KE3
zIUTqnEMHpFdrS3BUIT5Sf/ep6x0e1Rxui8q/Qc5aFM4iAvgLUtVq74zVZQjv2DE
0k/JMPvMjxKfVnwkszuS0A2NZEtEU+xARy65mq8dGzQo0i5Nr7BTT3f6BXmeh8gB
kdqXghgzGuG8yA4wlWT0klcQGwO4fKcskaVc3PqkER67guxCMiVj5rGfSUxWHtzY
RiwV7ubTJk0LdN1dFYdQir7MFeecOGUAZPhIGsVKwFT7Wr6QNVKQOEtuuHLyhm3j
OOLk6iC6jUfwWmawhlKm7C775OuM7OU=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net