Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
File: df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json)
Hash identifier: Up4JzPHvUP8MDlXmP1cWz73RFhX4ShjaKqQ4OEAyGJ4=
Subject key identifier: D4:BA:73:72:A6:1B:9B:CA:3F:98:18:E6:48:6D:F4:B5:28:8E:CF:30
Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial: 010D0C9F432858483AE54BB8C6525205C9E77700
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
Signing time: Mon 16 Dec 2024 22:25:46 +0000
ROA not before: Mon 16 Dec 2024 22:25:46 +0000
ROA not after: Sun 16 Mar 2025 21:25:46 +0000
asID: 53454
IP address blocks: 104.225.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3a:e5:4b:b8:c6:52:52:05:c9:e7:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Validity
Not Before: Dec 16 22:25:46 2024 GMT
Not After : Mar 16 21:25:46 2025 GMT
Subject: CN=5a9630fb-5cf5-42eb-80eb-93dc8237040e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:29:f1:af:23:1e:0d:78:77:00:2f:38:ec:
a9:43:be:08:f0:a0:0e:1b:03:3f:6c:07:1e:0b:40:
7a:eb:de:69:bb:c1:25:14:7d:e6:57:0f:93:07:e7:
bb:e4:db:5a:ff:42:93:9f:04:89:44:f5:5e:d0:23:
69:bf:15:92:01:26:1a:b1:6d:42:87:06:61:40:06:
47:fd:b8:cf:47:24:c9:6b:5a:9d:37:9e:18:ee:de:
73:2e:b7:ec:d1:56:c4:e1:f9:51:3d:4c:95:4c:f9:
72:b2:51:b4:a0:c4:71:f5:ea:9b:de:2a:4f:e3:cd:
df:7f:c7:e7:3e:69:a1:8c:f9:3a:aa:56:ce:76:6f:
6a:b1:e3:a9:f0:ec:8e:9d:2f:56:9f:a5:e2:f0:fd:
f0:87:6e:5c:12:6a:43:9d:fe:2e:06:9d:b1:db:72:
60:4f:40:61:7b:8d:7e:e1:62:30:c9:b9:84:ef:28:
2a:30:07:5f:2f:66:ec:60:2a:42:d9:4a:89:34:c9:
a4:20:4f:da:85:bf:7c:e7:df:0a:18:5d:88:a2:cb:
65:48:3c:8b:87:33:bb:b3:a0:76:6a:21:32:6e:fc:
44:60:12:61:8f:c9:8b:f9:51:9c:59:78:ac:1d:b4:
12:53:63:fe:e1:6e:11:fd:9f:ff:4a:ff:7b:77:a0:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:73:72:A6:1B:9B:CA:3F:98:18:E6:48:6D:F4:B5:28:8E:CF:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
X509v3 Authority Key Identifier:
keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
sbgp-ipAddrBlock: critical
IPv4:
104.225.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:32:0a:95:58:e1:42:2e:14:04:68:64:72:6e:52:d7:d2:e2:
e1:1c:a2:85:d5:82:a3:e5:da:93:8a:65:ae:a2:a7:70:66:0c:
01:4c:89:9c:55:b8:1d:6d:e2:66:f4:7f:d7:6d:98:fb:b0:a0:
2b:ee:2d:ca:f2:dc:9f:e4:f7:9c:2f:a9:bb:e8:59:f9:29:28:
93:96:c2:89:5b:65:a3:25:1c:69:f9:21:00:55:15:79:e8:24:
d5:e9:bd:3d:3c:74:80:ce:f4:21:27:38:55:6c:10:e8:c4:28:
8f:2d:21:11:7c:c1:dc:cf:cd:f0:f7:a0:d4:30:0d:c7:55:b1:
0f:be:2c:0e:61:27:96:f1:de:b6:4e:99:ed:32:ff:83:61:87:
b2:2d:ec:ae:3b:5c:4a:fc:48:ab:f5:f7:f7:3b:21:30:a9:d1:
d4:91:47:de:1d:a6:f1:0e:89:fc:97:c2:64:12:10:3f:24:ca:
c6:b2:cb:d8:c9:a1:c6:fc:11:7d:0f:56:1e:fd:9c:53:8d:85:
b5:d5:79:88:58:51:77:b8:71:9e:6e:b7:e1:fd:63:b1:48:f9:
91:ea:8e:a0:92:ec:07:a9:14:63:44:03:f4:6f:6d:1f:b3:51:
93:dd:4d:e4:bb:45:16:a9:93:72:2b:fb:bf:0c:22:c2:73:bf:
a4:d2:eb:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg65Uu4xlJSBcnndwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz
ZGNjMB4XDTI0MTIxNjIyMjU0NloXDTI1MDMxNjIxMjU0NlowLzEtMCsGA1UEAxMk
NWE5NjMwZmItNWNmNS00MmViLTgwZWItOTNkYzgyMzcwNDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveop8a8jHg14dwAvOOypQ74I8KAOGwM/bAce
C0B6695pu8ElFH3mVw+TB+e75Nta/0KTnwSJRPVe0CNpvxWSASYasW1ChwZhQAZH
/bjPRyTJa1qdN54Y7t5zLrfs0VbE4flRPUyVTPlyslG0oMRx9eqb3ipP483ff8fn
PmmhjPk6qlbOdm9qseOp8OyOnS9Wn6Xi8P3wh25cEmpDnf4uBp2x23JgT0Bhe41+
4WIwybmE7ygqMAdfL2bsYCpC2UqJNMmkIE/ahb98598KGF2IostlSDyLhzO7s6B2
aiEybvxEYBJhj8mL+VGcWXisHbQSU2P+4W4R/Z//Sv97d6BcHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS6c3KmG5vKP5gY5kht9LUojs8wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw
YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvZGY2NGU2N2YtZDNkNi0z
NjRmLWEwODgtYWQ2ZTQ3NTljYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1
NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi
M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2
MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOH+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUyCpVY4UIuFARoZHJuUtfS4uEcooXVgqPl2pOKZa6ip3BmDAFMiZxV
uB1t4mb0f9dtmPuwoCvuLcry3J/k95wvqbvoWfkpKJOWwolbZaMlHGn5IQBVFXno
JNXpvT08dIDO9CEnOFVsEOjEKI8tIRF8wdzPzfD3oNQwDcdVsQ++LA5hJ5bx3rZO
me0y/4Nhh7It7K47XEr8SKv19/c7ITCp0dSRR94dpvEOifyXwmQSED8kysayy9jJ
ocb8EX0PVh79nFONhbXVeYhYUXe4cZ5ut+H9Y7FI+ZHqjqCS7AepFGNEA/RvbR+z
UZPdTeS7RRapk3Ir+78MIsJzv6TS62g=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:52:41 2025 by rpki-client