Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa
File: 306f4639-2ca2-3128-acf0-ed21010e43ec.roa (raw, json)
Hash identifier: 25fxbvhFCLh5tt1ciEA0bog1uIVBqmygAS5D3IV5aVI=
Subject key identifier: 8F:46:22:A8:48:48:C8:9D:4C:2F:71:81:6D:49:20:26:96:1E:0F:0C
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858480A76B7AC656005C9EAF89EC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa
Signing time: Fri 29 Nov 2024 14:04:10 +0000
ROA not before: Fri 29 Nov 2024 14:04:10 +0000
ROA not after: Thu 27 Feb 2025 14:04:10 +0000
asID: 53356
IP address blocks: 104.243.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:76:b7:ac:65:60:05:c9:ea:f8:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 29 14:04:10 2024 GMT
Not After : Feb 27 14:04:10 2025 GMT
Subject: CN=17bcc5cd-be31-43bf-b157-e82d15a20edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:1e:f8:0e:49:64:50:28:b8:e1:18:df:9e:
e7:1d:26:96:ac:2f:88:71:1f:c4:eb:f5:04:e3:93:
d9:73:3e:11:12:f7:46:50:a0:1d:3e:bb:1e:fa:a8:
10:dc:7b:8e:6b:af:0b:49:c8:0e:bf:7d:35:36:f5:
b5:0a:6d:fd:ea:d0:53:10:34:33:ba:ff:e9:55:88:
af:cf:e0:b1:c1:22:a9:82:fd:c1:3a:74:60:86:18:
b4:1d:c6:ee:48:b5:7c:aa:a3:45:4a:96:a5:db:85:
1e:1e:ec:62:c8:d7:1f:a2:7b:ec:e1:ec:11:aa:14:
00:33:57:cd:78:9c:15:63:37:21:18:a1:46:cd:d7:
d0:2c:c4:81:c2:ba:24:b8:15:04:cb:83:1a:d9:ce:
75:4e:ce:7a:81:75:84:86:3c:1b:26:ef:4f:50:a2:
67:44:f9:bf:f8:71:ed:13:68:4f:e8:7e:28:8c:00:
8f:56:7b:1e:f2:fb:b4:a3:0d:6f:4a:56:8c:0b:36:
73:ea:7e:93:41:02:39:96:c4:8b:b3:4d:fd:5e:e0:
b5:60:4b:48:73:45:2d:ba:e0:d0:e0:b8:71:35:bc:
20:1e:c0:c3:76:b1:86:83:c5:4e:e4:a1:f4:43:6f:
ee:54:c9:7e:ac:9b:f3:cd:b6:e1:21:4e:19:74:4a:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:46:22:A8:48:48:C8:9D:4C:2F:71:81:6D:49:20:26:96:1E:0F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c0:a3:fc:4e:ee:46:25:68:c3:0f:5c:29:54:9a:80:c4:0c:
35:72:c7:99:23:da:69:55:f7:1f:83:a4:98:c6:cc:14:46:97:
c0:1d:23:35:03:75:f2:85:a2:b8:89:e7:6f:9f:32:48:d2:c3:
34:c2:f9:91:25:02:55:8a:dd:a9:05:8f:3a:02:40:fb:81:b7:
77:37:a1:19:32:00:42:87:a7:0f:d7:ab:0f:fa:0e:05:6e:f0:
ee:18:c4:bc:66:2d:8d:13:eb:43:63:d1:f8:ae:29:cf:d3:96:
7e:7b:7b:5f:8f:e9:43:a3:c8:38:58:0d:b3:5d:a2:55:a0:a2:
e0:04:22:53:f3:64:23:b6:7f:5b:e5:ad:3f:c3:eb:e4:78:2b:
16:b1:62:7a:92:8a:b4:a0:50:fe:ca:12:f2:3b:67:fe:a5:69:
e2:55:25:7d:c6:fc:80:d7:e4:03:10:39:79:5f:9e:9b:f4:cc:
61:37:e4:49:26:b9:c0:e1:ba:73:86:24:c7:a7:cd:e1:92:fb:
8a:df:f4:96:e6:d0:b8:a9:77:c6:60:ab:a8:99:71:53:1f:56:
01:e6:09:37:c9:74:bc:c3:ac:ab:88:da:82:5b:7c:ed:79:e4:
66:31:a1:b5:b3:d1:10:ad:34:f0:22:fd:31:40:1b:65:9d:ac:
05:63:7d:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKdresZWAFyer4nsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTEyOTE0MDQxMFoXDTI1MDIyNzE0MDQxMFowLzEtMCsGA1UEAxMk
MTdiY2M1Y2QtYmUzMS00M2JmLWIxNTctZTgyZDE1YTIwZWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzQe+A5JZFAouOEY357nHSaWrC+IcR/E6/UE
45PZcz4REvdGUKAdPrse+qgQ3HuOa68LScgOv301NvW1Cm396tBTEDQzuv/pVYiv
z+CxwSKpgv3BOnRghhi0HcbuSLV8qqNFSpal24UeHuxiyNcfonvs4ewRqhQAM1fN
eJwVYzchGKFGzdfQLMSBwrokuBUEy4Ma2c51Ts56gXWEhjwbJu9PUKJnRPm/+HHt
E2hP6H4ojACPVnse8vu0ow1vSlaMCzZz6n6TQQI5lsSLs039XuC1YEtIc0UtuuDQ
4LhxNbwgHsDDdrGGg8VO5KH0Q2/uVMl+rJvzzbbhIU4ZdEpwgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9GIqhISMidTC9xgW1JICaWHg8MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzA2ZjQ2MzktMmNhMi0z
MTI4LWFjZjAtZWQyMTAxMGU0M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXAo/xO7kYlaMMPXClUmoDEDDVyx5kj2mlV9x+DpJjGzBRGl8AdIzUD
dfKForiJ52+fMkjSwzTC+ZElAlWK3akFjzoCQPuBt3c3oRkyAEKHpw/Xqw/6DgVu
8O4YxLxmLY0T60Nj0fiuKc/Tln57e1+P6UOjyDhYDbNdolWgouAEIlPzZCO2f1vl
rT/D6+R4KxaxYnqSirSgUP7KEvI7Z/6laeJVJX3G/IDX5AMQOXlfnpv0zGE35Ekm
ucDhunOGJMenzeGS+4rf9Jbm0Lipd8Zgq6iZcVMfVgHmCTfJdLzDrKuI2oJbfO15
5GYxobWz0RCtNPAi/TFAG2WdrAVjfU8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:33 2025 by rpki-client