Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa
File: 800d7b08-0479-3bdf-801f-2e9c0c33474e.roa (raw, json)
Hash identifier: uMKIuYjI5uXk8fiSZuYEA3UXirkTfTZ0Z+JFgjE/7Tc=
Subject key identifier: 79:58:80:0C:24:1A:E0:65:E5:66:CA:53:17:D1:8E:A7:C3:9B:77:E7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B3A6F79553BFEF5A3F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.84.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b3:a6:f7:95:53:bf:ef:5a:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=00fffa65-5e32-4081-8b9b-89d60765f753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:70:66:72:e3:78:15:ff:26:35:c8:1e:a3:
12:37:68:cb:9a:e6:4c:95:17:f2:38:06:11:39:8f:
00:05:4e:f4:6a:f9:4a:d6:f7:4d:0c:74:9a:1a:2e:
73:24:15:0f:d1:ca:d7:cd:f6:ae:ef:94:e5:87:8c:
b5:fc:ee:f1:45:cf:bc:3b:fe:11:29:7a:60:c7:49:
45:09:8c:15:59:64:6d:ca:8c:59:74:6b:df:69:3d:
73:14:ca:c4:cc:76:df:d2:aa:73:35:91:d6:ed:15:
0b:db:d1:ae:2e:51:35:cb:41:7c:73:2d:a7:18:85:
3c:13:f8:5c:7c:b6:80:6b:3a:d4:62:e4:00:fe:ca:
ab:c5:51:47:d9:aa:f2:78:22:89:14:3d:77:2b:31:
89:1e:13:c9:d0:a6:14:80:81:18:60:52:85:f9:40:
a5:57:bc:d7:90:64:61:9b:e4:72:c0:8b:bb:da:86:
4e:5c:1c:fd:7e:75:0d:92:9d:2c:41:f7:71:b3:17:
80:78:fb:15:f1:d6:ec:38:0d:de:cb:95:2d:c9:0f:
dd:97:9b:29:af:e7:e4:43:58:33:6b:9b:d5:87:ab:
3f:bb:29:35:4e:87:37:d7:de:6b:bd:c7:78:30:a4:
4d:fd:4f:2f:20:6f:64:cf:b6:95:9f:4c:bd:b1:e0:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:80:0C:24:1A:E0:65:E5:66:CA:53:17:D1:8E:A7:C3:9B:77:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.84.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:57:ca:df:c1:38:37:1c:5f:58:de:b2:67:65:8e:0d:47:e1:
b5:f4:45:50:03:f7:fc:b4:2e:97:0f:a9:ae:45:06:dc:a8:a1:
60:e1:48:41:3a:43:c5:48:64:2d:52:ce:35:66:3f:79:f7:74:
3b:52:e5:dc:5d:a1:27:df:cf:c8:1b:15:fe:92:ea:f9:74:a0:
1d:58:15:ba:c8:f3:38:ac:97:4f:fc:b0:54:2a:5a:1e:b3:69:
35:fe:8d:01:00:df:10:84:d4:0c:82:69:1d:40:51:50:1c:7e:
11:f0:6b:dd:03:79:14:fc:3b:a4:36:f8:45:00:47:6d:21:9b:
28:2b:1c:c2:be:6c:f4:df:05:30:4f:e8:83:23:b2:9a:f6:e8:
cd:63:44:c1:df:a6:3a:bd:b7:cf:04:37:9d:51:41:2c:ad:02:
29:75:71:b5:0a:ae:fe:6b:65:20:9a:1f:37:54:50:d5:85:d6:
c4:9c:5d:d0:ae:27:b9:ce:b8:dd:27:8c:ea:f9:6b:a0:3c:11:
b0:df:f3:e4:b7:19:ee:4a:bb:52:67:80:66:e9:cb:1b:c0:74:
87:31:57:03:56:0a:ea:63:28:d0:a9:b8:3b:68:cd:ff:43:93:
b9:6b:2d:67:04:2f:ee:3f:09:d7:ff:d3:4f:fd:fd:8d:1e:bb:
87:08:45:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1bOm95VTv+9aP0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MDBmZmZhNjUtNWUzMi00MDgxLThiOWItODlkNjA3NjVmNzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnNwZnLjeBX/JjXIHqMSN2jLmuZMlRfyOAYR
OY8ABU70avlK1vdNDHSaGi5zJBUP0crXzfau75Tlh4y1/O7xRc+8O/4RKXpgx0lF
CYwVWWRtyoxZdGvfaT1zFMrEzHbf0qpzNZHW7RUL29GuLlE1y0F8cy2nGIU8E/hc
fLaAazrUYuQA/sqrxVFH2aryeCKJFD13KzGJHhPJ0KYUgIEYYFKF+UClV7zXkGRh
m+RywIu72oZOXBz9fnUNkp0sQfdxsxeAePsV8dbsOA3ey5UtyQ/dl5spr+fkQ1gz
a5vVh6s/uyk1Toc3195rvcd4MKRN/U8vIG9kz7aVn0y9seBmEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlYgAwkGuBl5WbKUxfRjqfDm3fnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODAwZDdiMDgtMDQ3OS0z
YmRmLTgwMWYtMmU5YzBjMzM0NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVXyt/BODccX1jesmdljg1H4bX0RVAD9/y0LpcPqa5FBtyooWDhSEE6
Q8VIZC1SzjVmP3n3dDtS5dxdoSffz8gbFf6S6vl0oB1YFbrI8zisl0/8sFQqWh6z
aTX+jQEA3xCE1AyCaR1AUVAcfhHwa90DeRT8O6Q2+EUAR20hmygrHMK+bPTfBTBP
6IMjspr26M1jRMHfpjq9t88EN51RQSytAil1cbUKrv5rZSCaHzdUUNWF1sScXdCu
J7nOuN0njOr5a6A8EbDf8+S3Ge5Ku1JngGbpyxvAdIcxVwNWCupjKNCpuDtozf9D
k7lrLWcEL+4/Cdf/00/9/Y0eu4cIRQM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:20 2025 by rpki-client