Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
File: af0871d5-e0fa-3865-8cdf-a359d771daac.roa (raw, json)
Hash identifier: /bpdLv4+KNaRSciyulZ6OQB3vo1x6P8fmK6dqnBySTk=
Subject key identifier: 36:A4:7C:DC:02:33:7B:EB:E7:3D:8C:18:F9:D6:44:CC:09:4C:11:77
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285847E094EBE72DF05314BF62BFA0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 36040
IP address blocks: 104.237.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:eb:e7:2d:f0:53:14:bf:62:bf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=c875240e-ff53-4fa9-8e6b-96411ed46072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:10:6f:46:ec:0c:fa:21:a4:bb:4b:5d:28:
5e:2e:cc:93:66:20:b6:3b:b9:f0:c7:94:e3:03:e2:
9f:2b:14:07:9a:c3:35:9d:89:df:e4:0b:ed:da:ff:
cb:b3:81:8e:cc:e3:15:fa:21:82:2a:dc:05:59:25:
e2:78:40:06:e4:a6:e2:3a:76:be:13:0c:dc:b0:94:
8e:98:74:d0:18:0b:dd:1d:fd:77:90:b2:4f:35:79:
36:99:db:d7:76:9f:71:b9:52:cb:6c:38:d2:6f:4f:
0d:e1:b6:7b:19:33:7d:26:a3:de:a7:ca:7c:c0:b3:
9e:70:6b:ca:ec:2b:cd:4e:9d:e9:73:e2:f9:6a:08:
58:c2:5d:f1:d7:03:6d:db:1c:8b:13:58:14:b5:c0:
cc:8e:4a:83:9f:0d:45:ba:88:9e:35:5a:bb:13:c8:
96:db:c3:f1:e0:ae:33:6b:a1:16:b6:c0:ad:dd:e0:
d6:b7:ae:a6:16:aa:b8:86:34:be:56:a4:0a:e1:ee:
03:e2:b2:23:ed:c9:71:8b:f4:11:28:97:a7:a7:61:
cc:7b:7c:6a:4f:dc:3f:3e:16:f7:f0:42:3a:ed:31:
54:7d:15:fb:89:01:e9:82:18:a5:c1:7b:d0:bc:a5:
b6:14:cb:04:ee:40:19:95:e5:7d:32:ba:5a:90:05:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:7C:DC:02:33:7B:EB:E7:3D:8C:18:F9:D6:44:CC:09:4C:11:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/af0871d5-e0fa-3865-8cdf-a359d771daac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a5:d1:74:da:03:d5:ce:ae:5a:ab:a5:5a:95:f4:ee:de:22:
91:fc:81:8b:22:b0:02:99:f1:fe:6f:77:af:c6:e3:39:98:46:
ba:eb:1f:d1:5b:e6:e5:2f:b9:0e:34:5c:b3:b5:d8:8e:0c:77:
4f:6e:dd:ec:39:e6:23:fd:9d:38:85:d1:5c:51:e2:9e:9c:19:
e7:59:54:94:f7:c2:77:40:26:09:8f:ba:45:c9:32:41:aa:36:
2b:a7:cb:fe:a8:c6:e9:0c:ef:c5:d2:ce:77:9e:e9:80:99:1f:
e5:34:9d:f4:6c:18:e9:7f:67:8c:4c:6c:a4:ba:47:08:17:b0:
70:02:0d:5e:df:df:71:94:e8:8d:83:0b:f7:d2:be:31:8c:a2:
6e:87:57:86:ac:d8:6c:68:ea:ed:15:60:b2:77:90:ab:c0:31:
e5:8f:91:08:6b:c4:8c:8f:cf:a4:cb:40:f6:40:a1:66:66:f4:
dc:68:c9:68:b9:6a:6f:d8:10:1b:dd:de:75:ea:96:9c:db:18:
1c:27:32:c5:ab:2b:f4:70:ed:23:8a:1a:4a:2c:d4:7b:6d:42:
b1:3b:4b:7b:d0:4a:a0:b4:a7:ef:7b:27:2a:d2:b0:f8:62:1f:
e0:60:f8:d0:c0:42:d8:3f:4b:cb:09:0d:1f:a6:11:79:d3:82:
55:aa:70:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglOvnLfBTFL9iv6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
Yzg3NTI0MGUtZmY1My00ZmE5LThlNmItOTY0MTFlZDQ2MDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHcQb0bsDPohpLtLXSheLsyTZiC2O7nwx5Tj
A+KfKxQHmsM1nYnf5Avt2v/Ls4GOzOMV+iGCKtwFWSXieEAG5KbiOna+EwzcsJSO
mHTQGAvdHf13kLJPNXk2mdvXdp9xuVLLbDjSb08N4bZ7GTN9JqPep8p8wLOecGvK
7CvNTp3pc+L5aghYwl3x1wNt2xyLE1gUtcDMjkqDnw1FuoieNVq7E8iW28Px4K4z
a6EWtsCt3eDWt66mFqq4hjS+VqQK4e4D4rIj7clxi/QRKJenp2HMe3xqT9w/Phb3
8EI67TFUfRX7iQHpghilwXvQvKW2FMsE7kAZleV9MrpakAWU+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDakfNwCM3vr5z2MGPnWRMwJTBF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYWYwODcxZDUtZTBmYS0z
ODY1LThjZGYtYTM1OWQ3NzFkYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO20MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOl0XTaA9XOrlqrpVqV9O7eIpH8gYsisAKZ8f5vd6/G4zmYRrrrH9Fb
5uUvuQ40XLO12I4Md09u3ew55iP9nTiF0VxR4p6cGedZVJT3wndAJgmPukXJMkGq
Niuny/6oxukM78XSznee6YCZH+U0nfRsGOl/Z4xMbKS6RwgXsHACDV7f33GU6I2D
C/fSvjGMom6HV4as2Gxo6u0VYLJ3kKvAMeWPkQhrxIyPz6TLQPZAoWZm9NxoyWi5
am/YEBvd3nXqlpzbGBwnMsWrK/Rw7SOKGkos1HttQrE7S3vQSqC0p+97JyrSsPhi
H+Bg+NDAQtg/S8sJDR+mEXnTglWqcMQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:10 2025 by rpki-client