Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
File: 285ac7ac-6745-33d7-9dce-52cc8033ef65.roa (raw, json)
Hash identifier: ZxmkzB1ELPXZEX7qt91k/cBQq/51FmnnAXJXFIyeHs4=
Subject key identifier: 46:42:50:95:A1:95:9D:D6:D9:07:2A:FE:F5:58:87:8A:6C:E5:21:E1
Certificate issuer: /CN=15364252-9e65-4f74-ba62-8a3b8ccc7e5f
Certificate serial: 010D0C9F432858481C9A81DFF877D8EDC04A2CC0
Authority key identifier: 7A:1A:42:77:DE:20:1B:27:E2:1E:42:FE:C8:06:B1:0E:0E:FB:A9:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 63275
IP address blocks: 104.237.96.0/20 maxlen: 24
169.197.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:81:df:f8:77:d8:ed:c0:4a:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15364252-9e65-4f74-ba62-8a3b8ccc7e5f
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=f4db30f5-bcb8-4f20-8f12-19977de1ef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:0f:47:c6:43:ad:9c:16:e6:c9:2c:c0:37:
97:fc:8f:1f:99:60:dc:32:3c:ff:f4:97:74:38:2f:
d4:ed:c8:c6:2d:c4:71:52:ba:ef:aa:bf:7d:f5:13:
91:a6:d9:5a:10:fa:b1:fd:f6:bc:ea:47:f9:13:37:
01:f9:99:9a:02:4d:d6:62:de:f7:bd:42:c9:a6:66:
f6:73:f9:9c:53:63:93:7d:98:bb:ae:de:87:49:e4:
e2:1a:54:90:af:72:32:bf:9a:7a:02:8d:67:c2:a6:
64:ee:56:28:1a:37:4b:44:71:ce:0d:e0:7f:b8:bb:
ff:41:56:c9:b7:c6:63:81:0d:14:ba:95:a9:18:97:
45:06:74:25:af:10:35:ec:c8:e4:f1:64:90:65:37:
c8:8d:b6:b8:1d:ef:86:37:66:df:ff:68:a8:5e:42:
8e:b0:53:b6:de:3e:60:c6:95:bf:33:9d:41:b0:0c:
48:f8:b9:e1:e5:07:3c:eb:12:b0:63:f6:5c:9d:6f:
30:84:80:81:f0:ef:c2:04:08:67:1b:09:af:5e:18:
f7:3f:e0:9a:79:21:fb:c4:49:28:ad:ae:2a:bc:0b:
13:ac:a3:bc:1f:15:cc:c1:d5:43:1e:81:6c:7e:f5:
9a:db:eb:93:20:89:c3:6a:dd:6d:81:42:cc:87:89:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:50:95:A1:95:9D:D6:D9:07:2A:FE:F5:58:87:8A:6C:E5:21:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.crl
X509v3 Authority Key Identifier:
keyid:7A:1A:42:77:DE:20:1B:27:E2:1E:42:FE:C8:06:B1:0E:0E:FB:A9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.96.0/20
169.197.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:59:6c:43:52:d1:85:f3:e6:6a:41:8a:7a:89:2c:f3:35:fd:
2f:61:39:03:b9:a5:97:36:e8:ef:a0:d6:e9:a8:e6:d3:58:09:
17:00:1d:8c:50:c8:02:e7:51:1c:7a:c2:7f:6b:bf:eb:ff:3a:
d0:af:21:92:04:c5:62:96:43:ed:68:40:7f:a2:a0:17:6b:ec:
df:15:d3:ea:d5:5f:d7:84:15:f2:4b:d7:97:1b:fd:c7:c3:8a:
35:6f:ec:a6:02:94:2d:50:7c:74:df:3a:83:ea:8b:e4:92:6e:
d6:03:58:bd:03:f7:bb:f5:1c:a9:5d:a0:7e:f8:b3:d4:c1:96:
aa:2a:13:2d:68:f1:03:82:97:20:63:f6:44:ea:04:80:ab:27:
71:23:52:b0:04:77:56:3b:6c:f0:95:93:dd:26:16:a5:8c:82:
e0:cc:ff:1f:22:7c:97:7f:4b:f6:ed:82:b7:d7:38:1a:21:90:
8b:ca:77:f1:63:52:24:d5:bd:b0:d1:39:b2:a4:8e:68:7c:b2:
16:8d:5b:1b:58:82:e0:49:93:a5:da:02:4f:78:72:80:d3:0f:
01:52:db:eb:00:d3:28:9c:d7:f6:99:7d:61:31:21:69:43:7e:
4f:b5:33:f3:ff:db:6a:90:ba:ae:fe:55:43:10:c1:ad:d1:05:
e7:19:72:ab
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgcmoHf+HfY7cBKLMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUzNjQyNTItOWU2NS00Zjc0LWJhNjItOGEzYjhjY2M3
ZTVmMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ZjRkYjMwZjUtYmNiOC00ZjIwLThmMTItMTk5NzdkZTFlZjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQwPR8ZDrZwW5skswDeX/I8fmWDcMjz/9Jd0
OC/U7cjGLcRxUrrvqr999RORptlaEPqx/fa86kf5EzcB+ZmaAk3WYt73vULJpmb2
c/mcU2OTfZi7rt6HSeTiGlSQr3Iyv5p6Ao1nwqZk7lYoGjdLRHHODeB/uLv/QVbJ
t8ZjgQ0UupWpGJdFBnQlrxA17Mjk8WSQZTfIjba4He+GN2bf/2ioXkKOsFO23j5g
xpW/M51BsAxI+Lnh5Qc86xKwY/ZcnW8whICB8O/CBAhnGwmvXhj3P+CaeSH7xEko
ra4qvAsTrKO8HxXMwdVDHoFsfvWa2+uTIInDat1tgULMh4nOKQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEZCUJWhlZ3W2Qcq/vVYh4ps5SHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNTM2
NDI1Mi05ZTY1LTRmNzQtYmE2Mi04YTNiOGNjYzdlNWYvMjg1YWM3YWMtNjc0NS0z
M2Q3LTlkY2UtNTJjYzgwMzNlZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTUzNjQyNTItOWU2NS00Zjc0LWJh
NjItOGEzYjhjY2M3ZTVmLzE1MzY0MjUyLTllNjUtNGY3NC1iYTYyLThhM2I4Y2Nj
N2U1Zi5jcmwwHwYDVR0jBBgwFoAUehpCd94gGyfiHkL+yAaxDg77qUAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xNTM2NDI1Mi05ZTY1LTRmNzQtYmE2Mi04YTNi
OGNjYzdlNWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaO1gAwQB
qcVIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAK1ZbENS0YXz5mpBinqJLPM1/S9hOQO5pZc26O+g1umo5tNY
CRcAHYxQyALnURx6wn9rv+v/OtCvIZIExWKWQ+1oQH+ioBdr7N8V0+rVX9eEFfJL
15cb/cfDijVv7KYClC1QfHTfOoPqi+SSbtYDWL0D97v1HKldoH74s9TBlqoqEy1o
8QOClyBj9kTqBICrJ3EjUrAEd1Y7bPCVk90mFqWMguDM/x8ifJd/S/btgrfXOBoh
kIvKd/FjUiTVvbDRObKkjmh8shaNWxtYguBJk6XaAk94coDTDwFS2+sA0yic1/aZ
fWExIWlDfk+1M/P/22qQuq7+VUMQwa3RBecZcqs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:32 2025 by rpki-client