Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
File: a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa (raw, json)
Hash identifier: xtyICZws8YpyD9q5/Nh2x+XQJYzxJ6fD8GGWdWbcBFo=
Subject key identifier: 4F:F2:A1:2F:64:1E:05:F6:CA:DB:FD:20:31:A6:B2:24:39:5C:58:7F
Certificate issuer: /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial: 010D0C9F4328584858A059598EF3189C5EE88800
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 393227
IP address blocks: 104.218.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:59:59:8e:f3:18:9c:5e:e8:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=8ffb319e-f3fa-4568-9c19-62f0264737be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:43:13:16:00:10:93:ca:f6:7a:a9:16:2f:
7d:b3:78:cb:53:18:56:1f:8c:17:2a:b5:86:01:7e:
fe:68:72:0d:fd:e0:10:06:b5:f5:92:ed:dc:5f:fd:
3b:8d:81:9f:18:87:02:9e:94:54:c5:74:59:f5:1e:
d3:e7:09:65:ba:f8:6a:19:9c:b2:40:58:dc:97:0d:
ae:a8:2e:35:f8:2b:fb:82:89:22:dd:b4:50:e4:82:
9d:99:4c:55:63:fc:db:0e:34:9e:af:96:58:38:20:
c6:6f:45:27:f6:36:d9:db:6d:1e:47:3e:64:d7:79:
68:83:02:a2:77:db:e8:b1:23:73:44:82:73:d0:d6:
ab:ee:56:6b:50:94:ac:43:a9:a8:c3:97:8f:01:b7:
eb:ce:6a:25:83:9b:c8:bf:b5:0d:c5:7c:b7:13:a8:
9e:d6:74:e4:bb:ee:72:57:a1:5d:e9:e4:10:fb:02:
c9:4e:87:fb:09:c2:df:56:2b:47:c1:17:2d:d3:28:
5b:17:1d:a5:88:a1:0a:0a:75:58:2a:61:68:aa:e9:
b3:7c:a7:1a:e5:50:af:b3:ab:dd:4d:54:28:4c:81:
1c:9c:5c:1f:a8:e8:43:81:d1:96:33:ce:c6:b7:e0:
07:ed:fc:63:a4:10:b7:51:f9:96:5d:0f:17:4c:65:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:A1:2F:64:1E:05:F6:CA:DB:FD:20:31:A6:B2:24:39:5C:58:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
X509v3 Authority Key Identifier:
keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a7:d3:2f:30:d7:06:4c:c9:fd:6f:8d:dd:4f:f5:4c:94:27:
a6:67:4a:c6:07:01:d6:17:25:98:f6:d8:ae:5b:0e:a8:16:19:
8e:ef:d7:a4:cc:f0:a8:d9:81:d2:df:2b:b5:4b:0e:3f:78:59:
64:da:38:84:d5:16:a6:0b:3e:2c:38:74:f4:d3:8f:a1:15:dc:
a8:65:ac:a3:e5:61:80:09:71:30:32:66:3e:5b:ea:60:fd:30:
b3:5e:e1:e1:ae:c5:eb:63:94:0f:6d:4e:71:d3:85:22:48:11:
bb:1e:cf:63:13:83:fd:d4:50:8d:2e:d4:0a:fd:f7:21:b4:c6:
66:00:46:03:06:4c:c9:0c:66:f5:50:70:43:82:fe:38:a2:d4:
98:12:b6:0c:53:cc:b9:66:78:dc:25:16:43:57:67:3d:bc:f1:
ef:05:a0:25:d8:11:c9:90:73:55:e4:4a:9a:b1:8a:23:36:10:
ea:ca:75:75:0e:21:44:56:50:e3:b5:5a:92:e4:6d:6f:2b:47:
7a:83:a7:ab:18:fa:cd:c3:7a:30:4e:80:10:ab:4e:9e:83:01:
cf:f7:17:bc:53:99:f6:fc:ff:78:30:75:6f:90:82:f9:cd:37:
85:c6:d2:60:04:18:4e:da:a8:0b:0f:79:9e:fa:64:f4:99:14:
25:07:31:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFlZjvMYnF7oiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWViODE4MzgtNmNmNy00YzFmLWJmNzMtZWVlYzA4N2U0
NzFhMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
OGZmYjMxOWUtZjNmYS00NTY4LTljMTktNjJmMDI2NDczN2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7pDExYAEJPK9nqpFi99s3jLUxhWH4wXKrWG
AX7+aHIN/eAQBrX1ku3cX/07jYGfGIcCnpRUxXRZ9R7T5wlluvhqGZyyQFjclw2u
qC41+Cv7goki3bRQ5IKdmUxVY/zbDjSer5ZYOCDGb0Un9jbZ220eRz5k13logwKi
d9vosSNzRIJz0Nar7lZrUJSsQ6mow5ePAbfrzmolg5vIv7UNxXy3E6ie1nTku+5y
V6Fd6eQQ+wLJTof7CcLfVitHwRct0yhbFx2liKEKCnVYKmFoqumzfKca5VCvs6vd
TVQoTIEcnFwfqOhDgdGWM87Gt+AH7fxjpBC3UfmWXQ8XTGWAqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/yoS9kHgX2ytv9IDGmsiQ5XFh/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWI4
MTgzOC02Y2Y3LTRjMWYtYmY3My1lZWVjMDg3ZTQ3MWEvYTQzNzliNmQtMzJjNi0z
YjI4LWJmZjEtYThmODhkZWEwMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWViODE4MzgtNmNmNy00YzFmLWJm
NzMtZWVlYzA4N2U0NzFhLzVlYjgxODM4LTZjZjctNGMxZi1iZjczLWVlZWMwODdl
NDcxYS5jcmwwHwYDVR0jBBgwFoAUXXiWJsqY+fRZDdHZ2roQHD/+t/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWI4MTgzOC02Y2Y3LTRjMWYtYmY3My1lZWVj
MDg3ZTQ3MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNrUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSn0y8w1wZMyf1vjd1P9UyUJ6ZnSsYHAdYXJZj22K5bDqgWGY7v16TM
8KjZgdLfK7VLDj94WWTaOITVFqYLPiw4dPTTj6EV3KhlrKPlYYAJcTAyZj5b6mD9
MLNe4eGuxetjlA9tTnHThSJIEbsez2MTg/3UUI0u1Ar99yG0xmYARgMGTMkMZvVQ
cEOC/jii1JgStgxTzLlmeNwlFkNXZz288e8FoCXYEcmQc1XkSpqxiiM2EOrKdXUO
IURWUOO1WpLkbW8rR3qDp6sY+s3DejBOgBCrTp6DAc/3F7xTmfb8/3gwdW+QgvnN
N4XG0mAEGE7aqAsPeZ76ZPSZFCUHMS4=
-----END CERTIFICATE-----
Generated at Mon May 12 11:33:18 2025 by rpki-client