Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa
File: 4c8fab89-95b2-3396-a9be-461ce805ad75.roa (raw, json)
Hash identifier: FI+oKulVnevEKg+WsyKYpX0B8QfM+mxUD0Gp20xejmY=
Subject key identifier: B3:0A:0F:C0:9C:54:B2:EF:FB:2C:96:3F:86:FC:B8:D9:E5:6C:0C:67
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584839EAB5DD1441258885A05F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 20473
IP address blocks: 104.243.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:b5:dd:14:41:25:88:85:a0:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=21a1d008-29ce-4a5f-a158-200382037936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:2f:5c:67:dc:cd:30:53:b0:83:57:12:64:
6a:4d:ee:e8:ad:a9:3a:4a:07:b2:fe:1c:87:c3:bf:
fa:df:34:2a:8f:f2:d6:14:8a:8d:cd:96:56:ca:b4:
66:2b:7e:3b:8e:a7:b7:8e:63:32:c2:48:92:5e:9d:
ac:f8:80:0c:28:d8:e4:76:5f:de:60:a7:22:5e:dd:
f0:96:a5:69:e0:0c:ba:0b:07:0d:13:da:38:dd:69:
b2:db:c4:f7:f9:f6:39:ba:de:40:5c:ca:50:24:ef:
7a:26:c0:4e:52:0b:22:56:08:63:74:b1:60:1a:e4:
88:01:09:dd:c0:1d:2a:a8:3c:70:cc:75:19:41:78:
1e:28:09:7e:71:09:18:53:0b:db:24:6b:46:ab:bf:
2f:d5:ea:fb:32:5b:6b:67:69:ab:ee:a6:e6:ac:79:
45:2e:29:8f:a8:f6:4b:10:bd:15:62:55:57:c2:8e:
ef:0c:9c:51:3f:d5:59:ff:65:f8:13:ec:6b:71:e2:
31:e9:c7:35:01:70:b7:92:fc:96:78:fc:09:54:ae:
f3:6f:37:0e:4f:e8:38:1e:42:5c:9d:c5:76:e4:d7:
7d:75:c1:01:4b:5a:b7:0f:00:5d:11:d9:43:ed:4d:
bb:f0:3f:2d:45:2c:fc:64:b9:40:22:18:06:f5:c2:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0A:0F:C0:9C:54:B2:EF:FB:2C:96:3F:86:FC:B8:D9:E5:6C:0C:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4c8fab89-95b2-3396-a9be-461ce805ad75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:82:9c:6a:e7:46:79:09:1f:22:74:be:a5:a3:a2:b5:0e:b5:
8a:f3:c5:fa:0c:5c:0f:b8:4f:71:69:02:78:b9:7b:53:3d:6d:
dc:a6:a4:f2:c0:f7:b8:e2:dc:4e:be:d5:c8:c4:10:15:e0:44:
0f:81:18:58:ef:75:4b:99:d1:80:9a:21:3e:7c:99:64:e5:b1:
f5:33:c6:17:3f:9a:a7:47:0b:d3:f2:2d:70:76:9b:62:0d:9e:
84:80:26:ae:25:a2:7d:4b:b7:c7:56:b8:bb:1f:53:d3:5a:91:
ec:b2:48:d1:2f:c2:ac:d5:cb:97:05:bb:39:3d:bc:56:a4:48:
56:a1:39:bb:2d:0f:1b:ae:a1:8d:97:47:84:bd:24:b3:12:b0:
7e:53:43:e6:82:1d:10:ac:80:b1:63:27:67:48:38:1f:35:07:
43:f7:7d:48:0f:0e:70:9f:4f:46:a3:1c:e6:07:af:63:16:d1:
e9:e2:38:32:af:8d:93:16:dd:c9:b1:e7:b0:c3:da:58:cd:df:
75:6f:47:65:fe:f9:63:86:2e:1f:49:5d:fa:59:6c:81:d6:29:
94:f1:44:e5:cb:be:ef:e0:63:7f:a1:3d:b6:50:ad:28:60:d7:
d7:c1:5f:73:e4:84:95:9c:03:1a:40:b1:87:01:6e:5e:9e:b9:
fb:b8:c6:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56rXdFEEliIWgX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
MjFhMWQwMDgtMjljZS00YTVmLWExNTgtMjAwMzgyMDM3OTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYUvXGfczTBTsINXEmRqTe7orak6Sgey/hyH
w7/63zQqj/LWFIqNzZZWyrRmK347jqe3jmMywkiSXp2s+IAMKNjkdl/eYKciXt3w
lqVp4Ay6CwcNE9o43Wmy28T3+fY5ut5AXMpQJO96JsBOUgsiVghjdLFgGuSIAQnd
wB0qqDxwzHUZQXgeKAl+cQkYUwvbJGtGq78v1er7MltrZ2mr7qbmrHlFLimPqPZL
EL0VYlVXwo7vDJxRP9VZ/2X4E+xrceIx6cc1AXC3kvyWePwJVK7zbzcOT+g4HkJc
ncV25Nd9dcEBS1q3DwBdEdlD7U278D8tRSz8ZLlAIhgG9cL8GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMKD8CcVLLv+yyWP4b8uNnlbAxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGM4ZmFiODktOTViMi0z
Mzk2LWE5YmUtNDYxY2U4MDVhZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqCnGrnRnkJHyJ0vqWjorUOtYrzxfoMXA+4T3FpAni5e1M9bdympPLA
97ji3E6+1cjEEBXgRA+BGFjvdUuZ0YCaIT58mWTlsfUzxhc/mqdHC9PyLXB2m2IN
noSAJq4lon1Lt8dWuLsfU9NakeyySNEvwqzVy5cFuzk9vFakSFahObstDxuuoY2X
R4S9JLMSsH5TQ+aCHRCsgLFjJ2dIOB81B0P3fUgPDnCfT0ajHOYHr2MW0eniODKv
jZMW3cmx57DD2ljN33VvR2X++WOGLh9JXfpZbIHWKZTxROXLvu/gY3+hPbZQrShg
19fBX3PkhJWcAxpAsYcBbl6eufu4xnk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:33 2025 by rpki-client