Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa
File: 0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa (raw, json)
Hash identifier: RHZ8YgrHWQPL2AZlHmzd9CTXXb5FmBw15DSNtKJow2o=
Subject key identifier: 94:D5:D0:DB:14:17:88:B2:96:06:3F:7D:C7:30:11:C8:13:B6:22:94
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285849631ECB5D0921B9476C5F2B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 108.177.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:cb:5d:09:21:b9:47:6c:5f:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=bc879077-a7a6-4364-801e-f27f1c8732c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:74:26:4a:30:11:f3:dd:31:c7:10:d6:25:
d4:5e:f7:8c:f1:8a:7c:67:0f:87:69:94:ff:95:3f:
23:ae:3a:05:5a:9d:ec:d2:f0:91:b5:f7:58:b5:ed:
4d:df:20:5f:8a:bd:74:05:79:3b:0d:80:43:56:dc:
3c:b2:db:a7:81:3b:42:3f:50:e1:2e:1a:49:5f:35:
e6:6f:8a:3f:44:89:f8:8d:e3:f8:f4:fa:b9:ef:ea:
f7:f6:9f:28:a8:b9:a8:0b:21:62:3d:59:28:c6:f8:
ae:49:2a:ed:0f:cb:73:a0:94:a2:b0:0d:bf:50:cc:
83:a3:08:cd:8a:72:ab:1c:d7:45:5d:88:29:2e:8c:
14:19:aa:cc:ed:62:54:93:7c:11:b5:87:fc:6e:df:
80:70:68:81:69:79:ca:36:ed:47:6f:32:c7:54:91:
91:2c:c3:b8:41:56:47:7b:38:c8:5f:df:2c:90:c6:
cd:b3:ad:4a:80:81:de:f4:a1:88:f0:d2:17:68:95:
a4:14:53:1b:3c:8a:79:63:fc:1c:38:47:29:47:0b:
60:35:fe:01:60:69:c3:04:38:41:d2:f6:cd:52:2c:
59:3a:1a:b9:c7:4f:b2:2a:96:cf:23:17:77:c9:c0:
a5:35:10:22:86:b5:62:aa:59:7e:e0:d9:91:79:c1:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D5:D0:DB:14:17:88:B2:96:06:3F:7D:C7:30:11:C8:13:B6:22:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aecbdeb-e27a-37bf-9e7a-7f5d4b922298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a2:4f:f0:47:1d:54:86:ca:c0:8e:24:a1:37:02:c7:98:d8:
65:6a:ed:02:f9:ac:cb:f9:2f:e9:05:fc:d6:88:27:83:6b:36:
5a:44:ed:cf:d0:5a:87:51:bb:a1:36:01:5e:7d:46:67:44:4b:
2f:fc:e2:70:74:4c:2e:60:02:58:8e:ab:bb:d5:7a:01:16:2d:
e2:c1:39:f0:01:bc:5b:f8:58:52:84:c8:3f:cd:17:ce:25:e2:
fa:ca:66:c1:7b:c0:d0:36:df:f9:51:26:7f:ae:b3:ca:45:b4:
3e:5d:39:08:56:20:09:70:c2:09:05:0a:08:88:a8:47:eb:02:
d0:b1:23:e6:c6:34:63:0b:77:15:9e:8b:50:e5:27:63:c0:7e:
6f:57:18:54:00:af:89:05:1c:cd:96:f4:45:80:21:e5:50:b0:
f2:f2:47:b3:82:c6:73:b2:c7:c4:ea:bd:ef:99:c0:e9:ad:7b:
47:8d:b4:3d:17:b5:57:73:93:3a:f5:bf:c6:b0:4a:5a:a0:6a:
2d:75:1c:54:00:a9:d9:c0:e0:d4:00:0d:86:6c:be:51:ad:36:
e3:6a:85:e9:80:65:35:c3:8c:8f:cd:db:35:d7:14:9b:a7:8c:
bc:97:bf:12:1e:bd:96:f5:a2:72:9c:9d:7d:b5:e3:27:ac:7f:
9b:be:b9:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHstdCSG5R2xfKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk
YmM4NzkwNzctYTdhNi00MzY0LTgwMWUtZjI3ZjFjODczMmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivt0JkowEfPdMccQ1iXUXveM8Yp8Zw+HaZT/
lT8jrjoFWp3s0vCRtfdYte1N3yBfir10BXk7DYBDVtw8stungTtCP1DhLhpJXzXm
b4o/RIn4jeP49Pq57+r39p8oqLmoCyFiPVkoxviuSSrtD8tzoJSisA2/UMyDowjN
inKrHNdFXYgpLowUGarM7WJUk3wRtYf8bt+AcGiBaXnKNu1HbzLHVJGRLMO4QVZH
ezjIX98skMbNs61KgIHe9KGI8NIXaJWkFFMbPIp5Y/wcOEcpRwtgNf4BYGnDBDhB
0vbNUixZOhq5x0+yKpbPIxd3ycClNRAihrViqll+4NmRecHtUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTV0NsUF4iylgY/fccwEcgTtiKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFlY2JkZWItZTI3YS0z
N2JmLTllN2EtN2Y1ZDRiOTIyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSiT/BHHVSGysCOJKE3AseY2GVq7QL5rMv5L+kF/NaIJ4NrNlpE7c/Q
WodRu6E2AV59RmdESy/84nB0TC5gAliOq7vVegEWLeLBOfABvFv4WFKEyD/NF84l
4vrKZsF7wNA23/lRJn+us8pFtD5dOQhWIAlwwgkFCgiIqEfrAtCxI+bGNGMLdxWe
i1DlJ2PAfm9XGFQAr4kFHM2W9EWAIeVQsPLyR7OCxnOyx8Tqve+ZwOmte0eNtD0X
tVdzkzr1v8awSlqgai11HFQAqdnA4NQADYZsvlGtNuNqhemAZTXDjI/N2zXXFJun
jLyXvxIevZb1onKcnX214yesf5u+ubw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:01 2025 by rpki-client on console.sobornost.net