Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa
File: 8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa (raw, json)
Hash identifier: J6a6mVCB8ZgsdeYi0AuS3pJGvrm/qahZ5PTDnCZyeTs=
Subject key identifier: E1:DF:EB:8B:66:1C:7D:2F:EE:06:03:41:42:84:F5:40:FD:A4:8E:59
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B199AA2046B5CE150380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.104.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b1:99:aa:20:46:b5:ce:15:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=3e552c01-3584-4998-a945-8bf0624202b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:af:73:c5:f7:96:8a:9f:2b:52:71:16:75:
aa:f4:b2:d0:0f:be:9f:52:f5:2f:1d:61:7b:4c:7d:
97:d9:54:a7:c6:70:fd:e2:30:f0:cd:b4:c4:14:42:
ff:c1:8e:eb:9f:57:3a:ca:79:9e:37:bf:ac:ad:ce:
7c:5c:85:a2:66:39:4d:a8:2d:90:8b:e9:7c:83:5c:
fb:d7:07:a0:b0:4b:e0:bd:a9:4d:4c:57:4f:cf:fa:
a7:c6:5e:46:89:9d:66:41:4d:60:5a:25:50:ba:90:
1b:19:0d:1f:12:ec:b5:9c:86:0f:88:72:c6:4b:52:
2a:92:9a:9f:ba:5e:2e:34:4b:ce:12:e7:d3:20:6d:
bf:1c:0e:30:3c:33:86:35:39:38:3c:da:8d:e6:07:
25:94:11:27:df:6a:f1:04:23:fb:ba:89:ac:23:4f:
75:2a:96:64:13:5d:a6:e7:24:da:08:7a:f9:74:87:
d3:e0:28:1c:d8:f0:5b:b6:88:29:e3:cd:45:42:94:
c9:6f:b6:c4:11:cd:32:e0:76:7c:01:b9:e4:66:06:
68:11:c3:54:9f:37:36:b0:34:21:46:9c:39:a5:c5:
f0:e6:96:29:10:1d:af:2c:26:31:ea:64:36:a7:cc:
85:2f:6c:06:c4:84:62:72:d7:03:54:bd:9f:2e:12:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:EB:8B:66:1C:7D:2F:EE:06:03:41:42:84:F5:40:FD:A4:8E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c88a335-da1e-3dec-b58f-ce2820f2f8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.104.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:c9:5b:d0:9b:24:11:90:4e:a3:61:1b:7b:44:12:ad:fc:9b:
d4:b3:75:05:82:ca:44:e0:5d:2d:89:6b:82:80:11:fc:d9:bd:
27:6f:a0:1b:ea:8c:db:9c:f5:b0:2e:d2:44:73:2f:92:79:59:
3b:44:39:0c:42:1e:05:64:c0:60:45:95:53:9a:16:2b:cc:69:
78:b4:fe:c7:8c:67:b3:a2:1b:44:1d:03:11:bf:20:d5:df:63:
38:5a:ec:6b:a9:4b:e0:4d:98:8e:84:2b:f6:6d:c4:c6:19:ee:
8a:3a:e3:1d:81:78:55:bb:33:9f:81:78:88:2f:cd:38:d2:ab:
d3:da:8b:b0:a3:52:4b:9e:de:09:c2:f6:69:60:b5:f8:ee:62:
68:a9:06:aa:ec:12:20:cb:7c:71:54:ca:a3:37:c7:d8:10:c9:
b1:cc:32:f8:e8:3c:ae:55:d6:b4:63:a3:35:4e:c5:82:5f:b6:
1c:c0:2d:f0:06:5b:f5:95:72:d8:42:2b:2c:c3:fc:f5:39:97:
76:73:0d:fb:36:12:0b:14:e9:b5:f1:7a:b5:ac:55:5c:1f:16:
70:59:c0:d8:6d:72:03:0a:8e:df:3f:5c:d6:2e:1f:55:a6:f7:
99:bd:c5:2b:fd:6a:dd:8f:c4:f4:fe:dd:5d:27:9b:ca:63:a6:
7f:88:80:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1bGZqiBGtc4VA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
M2U1NTJjMDEtMzU4NC00OTk4LWE5NDUtOGJmMDYyNDIwMmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQivc8X3loqfK1JxFnWq9LLQD76fUvUvHWF7
TH2X2VSnxnD94jDwzbTEFEL/wY7rn1c6ynmeN7+src58XIWiZjlNqC2Qi+l8g1z7
1wegsEvgvalNTFdPz/qnxl5GiZ1mQU1gWiVQupAbGQ0fEuy1nIYPiHLGS1Iqkpqf
ul4uNEvOEufTIG2/HA4wPDOGNTk4PNqN5gcllBEn32rxBCP7uomsI091KpZkE12m
5yTaCHr5dIfT4Cgc2PBbtogp481FQpTJb7bEEc0y4HZ8AbnkZgZoEcNUnzc2sDQh
Rpw5pcXw5pYpEB2vLCYx6mQ2p8yFL2wGxIRictcDVL2fLhIq2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHf64tmHH0v7gYDQUKE9UD9pI5ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM4OGEzMzUtZGExZS0z
ZGVjLWI1OGYtY2UyODIwZjJmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGj0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3JW9CbJBGQTqNhG3tEEq38m9SzdQWCykTgXS2Ja4KAEfzZvSdvoBvq
jNuc9bAu0kRzL5J5WTtEOQxCHgVkwGBFlVOaFivMaXi0/seMZ7OiG0QdAxG/INXf
Yzha7GupS+BNmI6EK/ZtxMYZ7oo64x2BeFW7M5+BeIgvzTjSq9Pai7CjUkue3gnC
9mlgtfjuYmipBqrsEiDLfHFUyqM3x9gQybHMMvjoPK5V1rRjozVOxYJfthzALfAG
W/WVcthCKyzD/PU5l3ZzDfs2EgsU6bXxerWsVVwfFnBZwNhtcgMKjt8/XNYuH1Wm
95m9xSv9at2PxPT+3V0nm8pjpn+IgCE=
-----END CERTIFICATE-----
Generated at Thu May 8 05:33:24 2025 by rpki-client