Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa
File: a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa (raw, json)
Hash identifier: +3Va+kwumz8tuMAG395SQRrCOXYhbUOOXchX5S3xtvY=
Subject key identifier: 6B:90:9C:DA:07:5B:7C:9A:19:58:DA:D8:42:5F:BF:BD:54:C9:6B:11
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584814BAE5AF822CFA49BCF24B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa
Signing time: Tue 03 Dec 2024 06:19:38 +0000
ROA not before: Tue 03 Dec 2024 06:19:38 +0000
ROA not after: Mon 03 Mar 2025 06:19:38 +0000
asID: 54004
IP address blocks: 104.37.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:ba:e5:af:82:2c:fa:49:bc:f2:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 3 06:19:38 2024 GMT
Not After : Mar 3 06:19:38 2025 GMT
Subject: CN=ded016cb-0e6d-417f-8aca-202599cf41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:b3:10:40:9b:72:8c:45:09:cf:17:51:9f:
85:ee:20:a4:a8:d6:53:cf:de:03:d4:83:31:fb:4f:
48:0e:42:4a:c7:e3:16:ba:fb:ab:a6:2f:f9:18:00:
e1:cc:d7:ef:a1:d1:5f:5e:3a:46:c3:18:ac:a0:55:
76:79:3b:8e:cc:bb:47:d5:2e:02:5d:f2:00:4e:2b:
bd:da:f5:43:2a:a0:ec:ff:6e:33:e8:48:d5:48:46:
aa:2f:13:a0:2e:1d:a8:f3:33:5c:0e:ce:99:2a:5c:
f1:d2:e5:94:95:11:81:50:8f:26:3e:02:41:79:41:
0c:3a:ea:f4:dc:0d:60:7b:a7:5b:ea:0b:73:59:a4:
65:1f:49:c5:55:da:b8:89:b6:b3:81:fd:af:cd:f3:
af:77:00:f7:f1:41:be:c3:1d:53:d7:30:b1:86:51:
02:e0:9b:19:13:33:b0:4d:97:48:39:34:b5:86:b3:
bb:aa:39:f5:dc:f6:ee:24:6b:bf:72:86:41:e1:aa:
ba:a4:21:c5:c3:34:fb:5d:a1:49:d9:ea:89:bb:a7:
1c:cf:cd:10:f0:63:41:95:6c:5e:ef:72:b9:bf:46:
b2:ca:13:d8:af:9a:40:61:f4:54:0e:c6:f5:b7:1e:
2f:c9:3a:50:c0:79:79:22:82:b7:a3:c9:3c:ac:16:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:9C:DA:07:5B:7C:9A:19:58:DA:D8:42:5F:BF:BD:54:C9:6B:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9a:55:b1:4e:b5:bb:25:30:1c:22:0e:f7:25:23:dc:81:c2:
cb:9c:e5:4c:29:df:9b:1d:46:1a:ab:db:0d:1d:35:9f:b2:f3:
f9:c1:79:7b:db:90:00:92:da:9d:7c:70:58:f2:81:f1:b8:3c:
5f:ca:76:da:86:d9:8f:9c:91:9a:25:cb:25:05:25:56:94:b1:
c5:e0:c9:e3:17:d0:35:48:4b:7a:4e:62:6b:8a:c8:d7:20:c7:
6c:26:85:3c:56:55:1f:d1:82:b2:3f:10:4e:4e:b6:b1:b1:9c:
38:12:be:c0:0c:42:34:35:b9:55:6b:d2:d7:ac:3c:aa:1d:98:
cb:54:a8:88:85:b4:ec:30:f8:73:00:4d:2a:1d:d5:05:0c:6d:
f0:b6:43:52:34:5a:f5:8d:de:59:33:c7:14:73:e0:ce:bf:37:
b7:56:40:41:7b:7b:a6:0f:c7:84:e4:47:03:83:9c:01:bc:40:
be:b3:5d:06:b0:37:67:db:34:8b:a0:1e:24:7d:30:23:31:17:
c4:e6:82:22:47:58:fd:89:a6:24:24:a4:d1:2f:46:f9:bc:56:
22:89:dd:6c:a9:83:07:a3:7f:a9:9c:57:b3:08:ad:9b:e7:03:
df:ff:49:39:d4:d3:b5:1c:88:89:2b:45:a0:3c:47:3b:a4:60:
04:24:77:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUuuWvgiz6SbzySwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwMzA2MTkzOFoXDTI1MDMwMzA2MTkzOFowLzEtMCsGA1UEAxMk
ZGVkMDE2Y2ItMGU2ZC00MTdmLThhY2EtMjAyNTk5Y2Y0MWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZWzEECbcoxFCc8XUZ+F7iCkqNZTz94D1IMx
+09IDkJKx+MWuvurpi/5GADhzNfvodFfXjpGwxisoFV2eTuOzLtH1S4CXfIATiu9
2vVDKqDs/24z6EjVSEaqLxOgLh2o8zNcDs6ZKlzx0uWUlRGBUI8mPgJBeUEMOur0
3A1ge6db6gtzWaRlH0nFVdq4ibazgf2vzfOvdwD38UG+wx1T1zCxhlEC4JsZEzOw
TZdIOTS1hrO7qjn13PbuJGu/coZB4aq6pCHFwzT7XaFJ2eqJu6ccz80Q8GNBlWxe
73K5v0ayyhPYr5pAYfRUDsb1tx4vyTpQwHl5IoK3o8k8rBaTwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuQnNoHW3yaGVja2EJfv71UyWsRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJhMzk0NjAtOTkwYy0z
YzZmLWFkMTUtOWNhN2IyZDExMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmaVbFOtbslMBwiDvclI9yBwsuc5Uwp35sdRhqr2w0dNZ+y8/nBeXvb
kACS2p18cFjygfG4PF/KdtqG2Y+ckZolyyUFJVaUscXgyeMX0DVIS3pOYmuKyNcg
x2wmhTxWVR/RgrI/EE5OtrGxnDgSvsAMQjQ1uVVr0tesPKodmMtUqIiFtOww+HMA
TSod1QUMbfC2Q1I0WvWN3lkzxxRz4M6/N7dWQEF7e6YPx4TkRwODnAG8QL6zXQaw
N2fbNIugHiR9MCMxF8TmgiJHWP2JpiQkpNEvRvm8ViKJ3Wypgwejf6mcV7MIrZvn
A9//STnU07UciIkrRaA8RzukYAQkd18=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:20 2025 by rpki-client