Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/608c5a26-f772-359a-b2f2-c62ce265dbd1.roa
File: 608c5a26-f772-359a-b2f2-c62ce265dbd1.roa (raw, json)
Hash identifier: Q7+UKc2neiyrqR9/DCmOtACpdQo4tfbW1U9HSFpJEb4=
Subject key identifier: 9A:78:99:BF:25:14:EC:73:3F:0B:8D:FE:B0:5A:75:21:E7:87:AF:49
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285847F69064212175865B92C2DD30
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/608c5a26-f772-359a-b2f2-c62ce265dbd1.roa
Signing time: Fri 22 Nov 2024 10:59:44 +0000
ROA not before: Fri 22 Nov 2024 10:59:44 +0000
ROA not after: Thu 20 Feb 2025 10:59:44 +0000
asID: 204957
IP address blocks: 104.252.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f6:90:64:21:21:75:86:5b:92:c2:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Nov 22 10:59:44 2024 GMT
Not After : Feb 20 10:59:44 2025 GMT
Subject: CN=3b8f8544-43f5-4b97-abd7-f9098794e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:15:cd:4a:ea:cd:c0:20:12:7d:fe:a8:31:
e0:da:24:de:7b:ec:1d:a3:3a:71:d6:3a:d7:8b:81:
7d:af:97:47:b6:fc:71:96:17:c1:8d:2e:be:c6:e9:
a2:be:a4:8f:b5:d9:17:b7:fd:d6:4c:ef:3b:ca:0e:
9d:a9:61:54:c8:58:ba:e9:37:80:fb:56:74:97:4d:
0d:99:ab:44:80:64:68:1a:0b:9b:95:39:ab:b4:e2:
d4:77:ed:c8:03:43:3d:0b:6a:1c:79:4a:cd:ac:81:
2a:bb:d1:46:f9:e4:8c:f8:6a:2a:a4:25:0e:b1:04:
b8:a1:09:ae:b2:4a:ee:4c:c6:e7:52:db:72:50:7a:
a2:50:1b:9e:4f:31:89:3d:f2:21:c6:56:32:03:86:
fb:86:72:f2:e4:15:e7:3b:94:5b:69:d5:7a:09:1a:
ae:9a:66:ff:4c:fb:59:7b:2a:34:c2:b2:7f:77:11:
b2:3b:a6:b2:7e:7d:18:a9:9c:5e:31:28:6c:8c:98:
b4:23:66:94:08:a7:5e:2a:4f:39:ca:51:b4:dc:0c:
79:f6:e0:0b:d8:13:e9:9e:7a:88:ed:3d:d2:32:45:
84:0a:eb:03:df:be:51:7a:5b:dd:2d:f2:11:57:06:
2b:58:ff:c5:16:91:89:ca:ae:76:39:77:74:4e:fc:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:99:BF:25:14:EC:73:3F:0B:8D:FE:B0:5A:75:21:E7:87:AF:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/608c5a26-f772-359a-b2f2-c62ce265dbd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.252.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a7:fc:30:65:54:c0:9b:9c:78:55:e5:fb:f1:6e:7a:d2:6d:
6a:1c:27:d9:20:bd:ac:fd:58:dd:dd:3e:61:95:ec:61:b1:70:
f1:ca:09:75:86:7b:bf:ba:60:db:73:5c:02:9b:30:f1:81:ac:
ce:dc:81:07:2b:f8:c3:5e:8c:9c:00:f2:1c:50:e0:69:3b:71:
ea:70:75:29:e6:b3:78:0b:36:8e:3c:ca:5e:4b:54:60:42:f2:
03:97:2c:af:0b:a6:7a:77:72:00:a9:34:cb:d9:c4:57:dc:9f:
b1:d4:66:30:4f:d8:c7:45:d6:6c:b8:55:c6:56:67:7b:8e:4c:
49:26:cd:42:ea:ed:8c:9e:6d:80:e5:33:d9:6f:cd:37:8d:00:
60:2c:c7:2d:c5:bd:6c:33:5f:aa:3e:47:76:48:a5:cb:ed:7d:
b4:f1:d3:2d:89:54:eb:76:92:16:0b:6a:aa:e4:71:0b:3a:93:
9a:6d:3a:1a:fb:20:e9:15:49:ca:38:44:7a:c8:02:3e:39:1a:
1c:02:01:5d:3d:31:bf:c0:47:79:18:50:a7:61:d7:be:3e:e7:
2d:1d:a6:42:a7:07:f5:9d:a6:49:20:36:aa:c9:5d:fd:ab:2e:
41:22:d5:1b:e6:71:95:e6:10:ce:e6:3a:6f:da:7c:51:80:ef:
1c:09:0e:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf2kGQhIXWGW5LC3TAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEyMjEwNTk0NFoXDTI1MDIyMDEwNTk0NFowLzEtMCsGA1UEAxMk
M2I4Zjg1NDQtNDNmNS00Yjk3LWFiZDctZjkwOTg3OTRlNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjsVzUrqzcAgEn3+qDHg2iTee+wdozpx1jrX
i4F9r5dHtvxxlhfBjS6+xumivqSPtdkXt/3WTO87yg6dqWFUyFi66TeA+1Z0l00N
matEgGRoGgublTmrtOLUd+3IA0M9C2oceUrNrIEqu9FG+eSM+GoqpCUOsQS4oQmu
skruTMbnUttyUHqiUBueTzGJPfIhxlYyA4b7hnLy5BXnO5RbadV6CRqummb/TPtZ
eyo0wrJ/dxGyO6ayfn0YqZxeMShsjJi0I2aUCKdeKk85ylG03Ax59uAL2BPpnnqI
7T3SMkWECusD375RelvdLfIRVwYrWP/FFpGJyq52OXd0TvyO5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJp4mb8lFOxzPwuN/rBadSHnh69JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjA4YzVhMjYtZjc3Mi0z
NTlhLWIyZjItYzYyY2UyNjVkYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6n/DBlVMCbnHhV5fvxbnrSbWocJ9kgvaz9WN3dPmGV7GGxcPHKCXWG
e7+6YNtzXAKbMPGBrM7cgQcr+MNejJwA8hxQ4Gk7cepwdSnms3gLNo48yl5LVGBC
8gOXLK8Lpnp3cgCpNMvZxFfcn7HUZjBP2MdF1my4VcZWZ3uOTEkmzULq7YyebYDl
M9lvzTeNAGAsxy3FvWwzX6o+R3ZIpcvtfbTx0y2JVOt2khYLaqrkcQs6k5ptOhr7
IOkVSco4RHrIAj45GhwCAV09Mb/AR3kYUKdh174+5y0dpkKnB/WdpkkgNqrJXf2r
LkEi1RvmcZXmEM7mOm/afFGA7xwJDjM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:27 2025 by rpki-client