Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
File: 868a1978-2e1f-3361-bbef-2069ed241746.roa (raw, json)
Hash identifier: 89OPSBLpfu6oBZ6X9akEsmvRDm02+mumBg7PqR2XJTk=
Subject key identifier: A8:39:E3:6B:D6:E7:42:7A:BC:6B:55:B5:8C:BA:44:47:F6:F7:07:0D
Certificate issuer: /CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Certificate serial: 010D0C9F4328584819CFC16C78F236B50EB0C7C0
Authority key identifier: 29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 104.207.170.0/24 maxlen: 24
104.207.171.0/24 maxlen: 24
104.207.172.0/24 maxlen: 24
104.207.173.0/24 maxlen: 24
104.207.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c1:6c:78:f2:36:b5:0e:b0:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=f2c59313-1a47-4d8d-b677-5186dc1b36bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:74:d0:e0:e7:da:f4:49:2a:dc:c7:81:e0:
51:5b:fd:e2:cc:cd:73:af:90:72:26:1b:6a:f7:7a:
f1:62:94:19:35:85:b7:b1:ae:d0:88:8f:41:79:a8:
42:d4:33:36:3b:0a:3c:b3:52:f4:34:15:0a:15:5d:
df:17:1b:bf:8e:1b:f1:db:5b:65:fd:be:16:b0:e8:
64:7d:b0:fd:b3:d2:09:0c:59:b9:b5:8d:cc:65:78:
28:95:c3:10:0f:cf:f5:05:29:0d:10:cc:3e:4b:6e:
7e:2e:d3:36:2e:34:aa:8a:c9:64:0c:20:99:3d:65:
bc:ab:45:ab:c6:d9:85:52:f0:f7:b8:e4:61:89:e0:
dc:9d:da:77:8c:fc:dd:e4:e9:38:e0:56:b3:f4:3f:
04:12:5e:16:c1:47:e2:18:45:5d:44:62:d7:7b:ac:
81:ac:f8:79:e3:ef:8f:c9:5b:d4:40:cc:b8:f6:85:
71:ea:03:df:a6:89:f1:39:f9:67:6a:d0:ac:9a:a1:
84:ea:75:39:b6:99:0a:93:6f:70:f5:ec:ec:a7:0c:
f5:26:03:05:bc:d0:f5:5e:ff:50:fe:c7:cd:ba:69:
12:cc:39:d4:67:92:2f:38:2b:04:08:7b:fe:d0:f5:
4d:94:a2:48:c6:d6:d4:35:05:4d:ab:3f:7c:8f:06:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:E3:6B:D6:E7:42:7A:BC:6B:55:B5:8C:BA:44:47:F6:F7:07:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/868a1978-2e1f-3361-bbef-2069ed241746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl
X509v3 Authority Key Identifier:
keyid:29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.207.170.0-104.207.174.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3a:06:7e:e5:f6:4c:d1:a7:65:9e:df:98:47:6e:05:93:32:
3a:8d:80:be:6f:60:af:f1:c5:78:9f:17:63:f7:4f:8f:78:2a:
55:72:1d:eb:e2:f4:85:cb:c0:92:24:b9:27:01:8a:ec:a7:ef:
40:09:00:3f:82:e3:1c:45:67:97:99:66:c3:5d:90:64:3e:21:
f0:f9:d3:dd:35:8f:93:24:62:55:b4:4a:35:70:8e:ae:8b:d7:
45:27:3b:16:05:2e:73:58:79:b0:9b:73:ce:a8:18:31:e6:93:
37:38:3f:37:c4:95:bd:95:08:98:0c:5f:09:c2:ed:53:10:41:
cc:87:18:8e:83:b6:50:78:18:57:4c:86:ea:f5:b3:ab:ae:96:
31:80:66:77:b2:0e:22:cc:57:0b:8c:52:05:62:de:07:32:9d:
78:a8:7b:4a:ad:13:37:70:05:85:6d:2a:06:85:cc:aa:8a:15:
48:f2:62:02:d8:55:e7:67:08:6d:b3:78:3b:ab:2c:7d:19:76:
7d:92:01:aa:06:1e:f2:18:8b:5a:eb:eb:20:8f:13:bb:36:3b:
ca:11:7d:24:cb:6a:b3:d3:ac:75:2c:95:e4:b6:ee:8c:ad:c7:
c4:3c:81:f9:16:f9:72:02:81:23:03:65:c4:32:8b:ef:27:9b:
d8:76:c3:59
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgZz8FsePI2tQ6wx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2UwZjI0MmEtYWFlZS00Mjk3LTk5MzctYjMzMzI5YThj
MzRmMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZjJjNTkzMTMtMWE0Ny00ZDhkLWI2NzctNTE4NmRjMWIzNmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWh00ODn2vRJKtzHgeBRW/3izM1zr5ByJhtq
93rxYpQZNYW3sa7QiI9BeahC1DM2Owo8s1L0NBUKFV3fFxu/jhvx21tl/b4WsOhk
fbD9s9IJDFm5tY3MZXgolcMQD8/1BSkNEMw+S25+LtM2LjSqislkDCCZPWW8q0Wr
xtmFUvD3uORhieDcndp3jPzd5Ok44Faz9D8EEl4WwUfiGEVdRGLXe6yBrPh54++P
yVvUQMy49oVx6gPfponxOflnatCsmqGE6nU5tpkKk29w9ezspwz1JgMFvND1Xv9Q
/sfNumkSzDnUZ5IvOCsECHv+0PVNlKJIxtbUNQVNqz98jwZ5rQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKg542vW50J6vGtVtYy6REf29wcNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZTBm
MjQyYS1hYWVlLTQyOTctOTkzNy1iMzMzMjlhOGMzNGYvODY4YTE5NzgtMmUxZi0z
MzYxLWJiZWYtMjA2OWVkMjQxNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2UwZjI0MmEtYWFlZS00Mjk3LTk5
MzctYjMzMzI5YThjMzRmLzNlMGYyNDJhLWFhZWUtNDI5Ny05OTM3LWIzMzMyOWE4
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUKbee1eB/yFaagd9cKgLvpvXpnbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZTBmMjQyYS1hYWVlLTQyOTctOTkzNy1iMzMz
MjlhOGMzNGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFoz6oD
BABoz64wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEANjoGfuX2TNGnZZ7fmEduBZMyOo2Avm9gr/HFeJ8XY/dP
j3gqVXId6+L0hcvAkiS5JwGK7KfvQAkAP4LjHEVnl5lmw12QZD4h8PnT3TWPkyRi
VbRKNXCOrovXRSc7FgUuc1h5sJtzzqgYMeaTNzg/N8SVvZUImAxfCcLtUxBBzIcY
joO2UHgYV0yG6vWzq66WMYBmd7IOIsxXC4xSBWLeBzKdeKh7Sq0TN3AFhW0qBoXM
qooVSPJiAthV52cIbbN4O6ssfRl2fZIBqgYe8hiLWuvrII8TuzY7yhF9JMtqs9Os
dSyV5LbujK3HxDyB+Rb5cgKBIwNlxDKL7yeb2HbDWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:34 2025 by rpki-client