Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f520ba8-d076-34a1-9a68-595d21c9783b.roa
File: 8f520ba8-d076-34a1-9a68-595d21c9783b.roa (raw, json)
Hash identifier: RezEmzsOyVKk/04yKN7X0qsqD0bV+tTbJGf3Kv6C3cI=
Subject key identifier: C9:F7:90:99:D1:96:43:19:A7:1A:F2:14:09:79:CB:72:67:E5:4C:A9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A069E60D9B2586E5D6CAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f520ba8-d076-34a1-9a68-595d21c9783b.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.124.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:e6:0d:9b:25:86:e5:d6:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=e61b0e81-d8cb-4cc9-84fa-059f80ee3f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:30:db:e6:39:b4:6d:de:e8:e9:62:31:ce:
02:3d:5a:7d:ff:ad:5a:33:34:ce:e3:d3:66:7e:e3:
16:b8:3d:f0:aa:e7:70:d4:b6:bb:94:e3:df:e2:4f:
9e:db:0d:4c:82:5e:a9:aa:2e:8e:e1:48:90:6e:34:
f2:7d:dc:cd:e0:42:9c:da:03:27:60:c3:f0:0b:cc:
65:e0:a4:2b:10:08:97:55:9f:79:d3:43:f8:65:29:
e8:b7:6c:cb:bb:be:f5:3e:dc:62:59:62:46:a0:b2:
c7:53:75:87:42:e8:33:c2:01:89:bf:bd:9f:3b:35:
91:22:56:f6:38:7c:be:68:72:33:7e:98:f8:51:9d:
c8:22:1f:20:29:eb:18:3c:e8:aa:c3:92:17:c1:03:
b1:b2:5b:5c:ee:d8:21:e4:9a:39:df:a5:db:e6:57:
34:f9:c0:a3:39:0f:1b:28:43:be:9b:a7:93:2a:94:
57:47:a0:9c:aa:76:15:16:78:38:c6:5b:26:47:f3:
c9:ed:eb:34:77:36:3a:3b:e6:f3:44:03:36:61:3f:
bd:8d:27:89:b6:4e:23:eb:60:9c:d0:53:e5:54:10:
c9:15:ee:54:16:5c:a8:f9:33:47:eb:d2:07:b1:56:
19:e5:95:a5:cf:fd:83:3b:4b:e6:52:03:73:a9:13:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:90:99:D1:96:43:19:A7:1A:F2:14:09:79:CB:72:67:E5:4C:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f520ba8-d076-34a1-9a68-595d21c9783b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.124.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:10:eb:9c:2b:0a:cb:e3:39:90:02:e0:e1:2d:44:c9:cd:2b:
7c:5b:42:41:fa:26:9d:97:bf:fb:25:c4:f3:e1:8b:58:55:84:
98:28:10:7e:11:dc:ef:29:a0:4f:cd:0a:44:58:a2:6f:81:2e:
47:e8:8b:cb:90:e4:25:c7:e3:58:bd:90:22:8d:71:d8:1b:f0:
3b:bf:8d:2e:78:dc:f8:aa:77:8e:cd:00:5e:58:8e:3d:a1:83:
c0:a1:e3:3c:e2:b4:b0:a9:2c:ae:1d:c1:0c:9d:ef:dd:21:ce:
f0:9d:1b:58:2e:86:00:ef:77:10:f7:4b:e0:97:9d:21:0b:f5:
8c:b8:f8:9d:74:89:ff:97:92:c8:f8:2c:8a:55:d1:0f:3d:62:
8b:43:31:cb:7e:ee:91:f5:90:f4:78:6c:1e:08:f5:86:1c:6d:
70:ad:a1:7d:c4:0e:db:c7:92:39:e1:3c:bd:56:a5:05:54:89:
5b:4d:fb:ba:79:b6:5b:c6:5f:43:23:42:f0:fb:97:6c:85:af:
65:52:60:ed:b0:9e:d7:5a:be:1e:37:8a:ee:1a:bb:2d:b9:29:
40:cc:c9:e7:37:09:dd:b7:2f:5a:83:19:67:71:61:b0:b9:0b:
e0:ef:a1:80:3f:28:02:71:34:29:f6:95:5f:c3:b6:41:20:00:
b2:07:bd:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGnmDZslhuXWysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTYxYjBlODEtZDhjYi00Y2M5LTg0ZmEtMDU5ZjgwZWUzZjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Uw2+Y5tG3e6OliMc4CPVp9/61aMzTO49Nm
fuMWuD3wqudw1La7lOPf4k+e2w1Mgl6pqi6O4UiQbjTyfdzN4EKc2gMnYMPwC8xl
4KQrEAiXVZ9500P4ZSnot2zLu771PtxiWWJGoLLHU3WHQugzwgGJv72fOzWRIlb2
OHy+aHIzfpj4UZ3IIh8gKesYPOiqw5IXwQOxsltc7tgh5Jo536Xb5lc0+cCjOQ8b
KEO+m6eTKpRXR6CcqnYVFng4xlsmR/PJ7es0dzY6O+bzRAM2YT+9jSeJtk4j62Cc
0FPlVBDJFe5UFlyo+TNH69IHsVYZ5ZWlz/2DO0vmUgNzqROBFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMn3kJnRlkMZpxryFAl5y3Jn5UypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY1MjBiYTgtZDA3Ni0z
NGExLTlhNjgtNTk1ZDIxYzk3ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHwMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4Q65wrCsvjOZAC4OEtRMnNK3xbQkH6Jp2Xv/slxPPhi1hVhJgoEH4R
3O8poE/NCkRYom+BLkfoi8uQ5CXH41i9kCKNcdgb8Du/jS543Piqd47NAF5Yjj2h
g8Ch4zzitLCpLK4dwQyd790hzvCdG1guhgDvdxD3S+CXnSEL9Yy4+J10if+Xksj4
LIpV0Q89YotDMct+7pH1kPR4bB4I9YYcbXCtoX3EDtvHkjnhPL1WpQVUiVtN+7p5
tlvGX0MjQvD7l2yFr2VSYO2wntdavh43iu4auy25KUDMyec3Cd23L1qDGWdxYbC5
C+DvoYA/KAJxNCn2lV/DtkEgALIHvTY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:19 2025 by rpki-client