Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa
File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json)
Hash identifier: w/aJ6piWa1d4BRCZf3+8gSqrDwHvdmcxp7c/dCI3i+4=
Subject key identifier: 9F:AB:43:21:76:0F:C4:8E:B8:03:C9:2F:39:D6:96:30:62:CD:00:2D
Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial: 010D0C9F432858487FB5D5D9903D6F095D4F7300
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 14445
IP address blocks: 104.249.136.0/24 maxlen: 24
104.249.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d5:d9:90:3d:6f:09:5d:4f:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=3ffaa6e3-f09e-442f-afcc-0b2ec10352b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:c5:af:63:f1:ec:c2:9f:95:a3:ef:13:95:
e7:8d:37:e5:71:77:ab:9c:a2:c7:80:93:2c:63:ab:
9d:08:92:69:88:ab:0c:0a:2c:18:f3:03:5d:a8:e5:
28:b5:f7:3c:35:72:c6:28:26:f0:9b:84:27:bd:56:
f5:1e:f0:a9:01:ac:49:a6:27:f0:ab:ba:e4:c5:3e:
c2:7d:88:34:82:c0:d5:9a:41:69:f8:3c:db:8c:cb:
cb:81:be:ec:4f:f4:17:53:1e:ed:e4:0d:cc:b0:2d:
ed:f6:0c:06:85:05:70:f5:d5:63:14:89:4f:12:31:
bb:14:94:bf:a8:74:c8:87:ac:00:78:9f:bd:91:5a:
23:5c:5f:ea:6b:9b:9d:67:37:d1:24:81:90:ac:5d:
d8:ff:b8:ee:c1:7f:d0:4d:fd:4f:17:74:f1:53:29:
f0:d5:e5:c4:c3:3b:05:f2:d9:7a:a0:9d:c7:7f:c2:
cf:e8:49:0e:81:57:4c:42:32:ba:5a:02:f3:5b:86:
72:8c:bc:17:ec:97:ba:7d:40:30:f7:fb:f5:2c:ba:
16:af:48:a3:2f:b2:f8:56:28:1c:bf:91:f7:78:5a:
7b:45:1f:df:bd:42:c9:85:cc:a6:77:fb:cd:b2:ab:
a9:81:5b:12:31:a4:d1:15:b9:13:ec:fe:47:fa:dd:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:43:21:76:0F:C4:8E:B8:03:C9:2F:39:D6:96:30:62:CD:00:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
X509v3 Authority Key Identifier:
keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.136.0/24
104.249.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:5b:e9:9a:ce:21:eb:98:4b:48:cd:87:7e:f5:90:ca:d2:16:
56:23:10:ef:e4:26:2a:5d:16:7e:74:31:b2:1b:5c:a1:7a:59:
e0:45:39:ff:d7:39:0a:ce:73:8c:2d:27:94:9a:7b:71:22:67:
f2:52:f9:a9:9c:48:98:03:52:95:39:ff:26:24:98:6e:5f:b5:
d1:4c:80:66:1c:84:f9:2c:c8:27:28:ba:7e:d1:2a:70:9c:b4:
f1:1c:60:d0:44:6b:dc:1a:53:1b:94:10:f8:21:3d:ac:a4:cf:
bc:58:30:20:7a:55:50:19:a3:b8:6e:ee:7c:f6:c4:d0:51:88:
de:d7:f2:9f:b2:68:38:b7:e1:20:c9:ae:c9:53:a7:60:94:58:
33:38:8f:d4:5e:58:96:08:3e:1c:ce:2f:4a:bc:6b:16:0d:e7:
d2:eb:e7:8d:76:82:59:d2:44:77:4f:03:b0:25:c6:c4:2d:b0:
b1:cb:6e:17:55:f3:86:8f:e0:e5:35:f9:3d:ff:19:b3:e3:2d:
ee:b3:5e:e8:84:cb:42:1b:6f:49:70:24:6b:fb:9d:37:ab:66:
7f:f9:66:fd:44:4c:0f:47:e8:ba:7e:f2:a8:45:e0:66:04:5f:
2b:01:96:41:f2:d4:ee:cb:90:cc:51:cf:fb:c3:b1:e1:02:cf:
cb:68:00:5a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEh/tdXZkD1vCV1PcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3
MTBhMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
M2ZmYWE2ZTMtZjA5ZS00NDJmLWFmY2MtMGIyZWMxMDM1MmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8XFr2Px7MKflaPvE5XnjTflcXernKLHgJMs
Y6udCJJpiKsMCiwY8wNdqOUotfc8NXLGKCbwm4QnvVb1HvCpAaxJpifwq7rkxT7C
fYg0gsDVmkFp+DzbjMvLgb7sT/QXUx7t5A3MsC3t9gwGhQVw9dVjFIlPEjG7FJS/
qHTIh6wAeJ+9kVojXF/qa5udZzfRJIGQrF3Y/7juwX/QTf1PF3TxUynw1eXEwzsF
8tl6oJ3Hf8LP6EkOgVdMQjK6WgLzW4ZyjLwX7Je6fUAw9/v1LLoWr0ijL7L4Vigc
v5H3eFp7RR/fvULJhcymd/vNsqupgVsSMaTRFbkT7P5H+t2VJQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJ+rQyF2D8SOuAPJLznWljBizQAtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz
ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMDAyZTIyMGQtNTU2Ny0z
M2VmLWJkOTItMjhkODlkZmU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx
MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0
NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz
YjU4NDcxMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPmIAwQA
aPmLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIZb6ZrOIeuYS0jNh371kMrSFlYjEO/kJipdFn50MbIbXKF6
WeBFOf/XOQrOc4wtJ5Sae3EiZ/JS+amcSJgDUpU5/yYkmG5ftdFMgGYchPksyCco
un7RKnCctPEcYNBEa9waUxuUEPghPaykz7xYMCB6VVAZo7hu7nz2xNBRiN7X8p+y
aDi34SDJrslTp2CUWDM4j9ReWJYIPhzOL0q8axYN59Lr5412glnSRHdPA7AlxsQt
sLHLbhdV84aP4OU1+T3/GbPjLe6zXuiEy0Ibb0lwJGv7nTerZn/5Zv1ETA9H6Lp+
8qhF4GYEXysBlkHy1O7LkMxRz/vDseECz8toAFo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:58:48 2025 by rpki-client