Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
File: a2820430-cffa-3a28-865a-d2bff6b67e7e.roa (raw, json)
Hash identifier: M55Lsf9xoQHMAOuB7mrPMnCKAeXroF2MmCLKCjDlbpA=
Subject key identifier: D5:56:FD:6C:34:5E:D1:4C:D7:63:6E:4C:C4:9D:3A:A2:D0:3E:44:26
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F43285848748B21316C594438BEC568C0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 140042
IP address blocks: 104.251.224.0/20 maxlen: 24
172.81.102.0/23 maxlen: 24
172.81.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:21:31:6c:59:44:38:be:c5:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=1d55076f-6d17-4370-8842-768d49568c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:31:7e:99:06:2d:b7:e4:ff:4a:0a:0f:46:
92:86:7e:63:d9:6c:36:8e:6f:60:80:c4:74:a8:f9:
57:0a:56:56:7c:e8:76:fc:81:6b:f8:9a:e5:72:ae:
d8:b7:e1:f5:26:b2:9a:44:22:9e:65:b9:a9:c5:e0:
54:0b:a4:73:00:3f:d9:b0:de:1d:c9:c1:f0:f6:81:
90:2c:8b:f9:6d:e0:b2:cb:c0:c6:e3:3f:57:9c:79:
0d:b7:1a:c9:87:c7:d9:c8:42:eb:c9:d2:88:e2:17:
d2:fc:c2:82:95:a6:9a:91:00:3b:17:19:61:4d:8f:
22:b6:a5:6e:7c:16:ac:15:04:7e:2f:e3:ce:89:83:
89:4c:7f:b4:e6:71:83:f5:83:d9:8a:eb:b9:3c:f9:
82:ed:ff:53:f8:3b:8c:71:f3:31:5c:83:4f:41:fc:
0b:eb:cb:5a:b7:c8:b1:4a:ee:65:ee:fb:3a:eb:82:
1f:67:c6:89:10:7e:cd:a3:be:89:25:fc:23:2b:2d:
a9:bc:83:8b:4e:d9:74:8a:b1:9e:3c:15:12:a3:c8:
e6:4d:51:a8:3a:6c:66:90:ef:6b:7c:89:40:c8:eb:
d1:2c:07:ee:41:4d:a3:d5:de:c6:79:54:f6:b6:b0:
db:2f:d1:d5:e1:ca:c9:4e:fd:ed:8b:4d:58:f6:ce:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:FD:6C:34:5E:D1:4C:D7:63:6E:4C:C4:9D:3A:A2:D0:3E:44:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.224.0/20
172.81.102.0-172.81.111.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:da:cb:4b:21:78:dc:6d:74:eb:8e:bd:bb:c8:b0:37:0f:dc:
1f:20:ef:dd:27:98:1a:a0:6e:d9:fd:7e:bc:67:3a:e9:58:68:
5f:f4:9f:d3:e6:7b:0d:39:bf:9e:0d:5e:49:3f:6c:37:f4:d8:
82:cb:26:a0:68:ea:61:ee:77:52:19:d8:5f:fb:dd:85:37:7e:
22:e9:ea:32:b3:64:9d:f1:90:6b:37:40:33:7b:d2:fe:e2:bd:
bd:f8:64:22:9e:ba:80:eb:68:51:fe:b1:0d:f1:a8:d8:a5:bd:
10:e5:9b:1e:8f:ba:e3:4c:be:03:ba:54:2f:8a:9f:57:d8:cb:
41:0e:b8:98:c6:c4:2d:5f:82:8c:36:8a:0a:2a:b7:ca:c9:76:
93:f8:57:de:20:b1:7a:d2:03:10:df:60:ac:49:fa:59:53:89:
da:70:5b:68:16:d1:71:50:71:1f:57:ac:43:24:ab:50:43:3e:
1e:4f:35:32:ad:63:61:8b:ef:6c:f3:5e:bb:86:1f:d7:78:48:
07:99:74:18:bb:70:12:7f:4e:c6:03:ca:4a:93:59:c8:c2:11:
49:14:f6:84:4b:98:56:c1:8c:a7:f1:57:e8:8c:54:8b:6f:cd:
54:41:db:fc:a5:3f:00:25:80:8f:91:4d:1c:c1:79:4a:f6:9b:
d2:c3:df:b9
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEh0iyExbFlEOL7FaMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MWQ1NTA3NmYtNmQxNy00MzcwLTg4NDItNzY4ZDQ5NTY4YzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWExfpkGLbfk/0oKD0aShn5j2Ww2jm9ggMR0
qPlXClZWfOh2/IFr+Jrlcq7Yt+H1JrKaRCKeZbmpxeBUC6RzAD/ZsN4dycHw9oGQ
LIv5beCyy8DG4z9XnHkNtxrJh8fZyELrydKI4hfS/MKClaaakQA7FxlhTY8itqVu
fBasFQR+L+POiYOJTH+05nGD9YPZiuu5PPmC7f9T+DuMcfMxXINPQfwL68tat8ix
Su5l7vs664IfZ8aJEH7No76JJfwjKy2pvIOLTtl0irGePBUSo8jmTVGoOmxmkO9r
fIlAyOvRLAfuQU2j1d7GeVT2trDbL9HV4crJTv3ti01Y9s4QowIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFNVW/Ww0XtFM12NuTMSdOqLQPkQmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTI4MjA0MzAtY2ZmYS0z
YTI4LTg2NWEtZDJiZmY2YjY3ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEaPvgMAwD
BAGsUWYDBASsUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAXdrLSyF43G106469u8iwNw/cHyDv3SeYGqBu
2f1+vGc66VhoX/Sf0+Z7DTm/ng1eST9sN/TYgssmoGjqYe53UhnYX/vdhTd+Iunq
MrNknfGQazdAM3vS/uK9vfhkIp66gOtoUf6xDfGo2KW9EOWbHo+640y+A7pUL4qf
V9jLQQ64mMbELV+CjDaKCiq3ysl2k/hX3iCxetIDEN9grEn6WVOJ2nBbaBbRcVBx
H1esQySrUEM+Hk81Mq1jYYvvbPNeu4Yf13hIB5l0GLtwEn9OxgPKSpNZyMIRSRT2
hEuYVsGMp/FX6IxUi2/NVEHb/KU/ACWAj5FNHMF5Svab0sPfuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:36 2025 by rpki-client