Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90fa1c17-e568-3c61-ad04-0d04a84853b0.roa
File: 90fa1c17-e568-3c61-ad04-0d04a84853b0.roa (raw, json)
Hash identifier: WsbMC2oqBxAJtZWQF734ojKzzavNSM3t/1Y8V3e4eAs=
Subject key identifier: 4C:4A:CE:D3:80:EE:A8:40:88:BC:BE:D0:8B:12:06:C6:AF:C2:C7:2A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AA245F338D3646A05538
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90fa1c17-e568-3c61-ad04-0d04a84853b0.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.89.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:aa:24:5f:33:8d:36:46:a0:55:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=c94fc031-f85e-47a4-b589-6af5f45d1ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:71:6e:4f:18:18:06:f0:31:4b:ea:ba:e9:
f9:cd:ac:46:af:32:48:d3:28:87:b4:34:90:2c:c8:
2b:c6:d9:be:7f:2a:91:fb:82:5b:e8:e3:eb:89:4e:
c9:d7:8f:5e:33:67:e4:a9:69:e7:8a:58:80:32:96:
aa:f8:f4:0a:4a:72:50:37:2f:88:07:1b:65:54:07:
90:26:cd:21:a3:7d:f1:6c:8b:aa:c7:41:6b:6c:b4:
89:51:0b:ea:5e:db:ea:53:8c:dd:77:8d:43:f5:7b:
b5:ba:87:de:9e:78:fc:14:cb:11:f5:f7:fc:6d:6f:
6f:34:7c:b9:66:6b:00:e2:b7:fc:69:5e:59:2e:e1:
35:ea:80:b5:c3:e2:85:ae:2b:91:c1:ee:db:d8:55:
85:3b:2f:7c:6c:9f:8f:dd:7b:63:48:bd:e0:8d:ff:
42:8d:3a:5c:38:25:c9:92:52:7b:fe:0b:73:d0:05:
98:bb:57:4b:99:6a:0d:a5:5f:8c:35:d3:6d:af:4b:
46:14:70:7d:64:d6:f1:c6:ea:7d:50:93:ee:15:c5:
69:81:c7:f0:4a:ca:6c:9b:67:ba:55:17:ab:22:35:
d4:a0:ac:5a:bd:8c:b3:5d:9c:23:13:0c:bc:c1:ed:
4d:95:d4:a4:2e:1c:13:53:85:e6:10:d6:fe:f4:bf:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:CE:D3:80:EE:A8:40:88:BC:BE:D0:8B:12:06:C6:AF:C2:C7:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90fa1c17-e568-3c61-ad04-0d04a84853b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.89.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:cc:c4:68:c8:70:83:e5:a7:fd:bb:ad:73:32:fe:bd:15:dc:
4b:a0:cf:ee:33:65:78:ec:4f:71:cb:b4:76:e1:39:34:63:1f:
9e:ec:9b:65:6a:5f:41:26:02:0f:f9:a6:cc:b4:e9:cf:8b:23:
9b:a1:6c:3c:d5:d0:d5:da:da:7b:53:73:49:2c:0c:f2:04:54:
3d:07:10:3e:4d:0f:ab:6c:60:f4:db:b7:d0:b5:27:e2:91:ce:
82:81:ad:a6:25:0e:ad:44:c2:f6:09:79:3e:fa:fa:72:89:52:
5d:04:a5:36:52:d6:af:92:74:86:79:1f:36:37:c8:f1:ea:43:
ee:b8:65:e3:be:91:78:01:72:c7:c7:f2:e1:ab:91:18:b9:f6:
3a:34:74:d8:72:87:51:2a:bd:8d:d6:89:b2:ef:a4:c3:83:ac:
a6:c1:42:75:d7:8c:4d:7c:a5:cf:88:28:75:52:34:e9:9f:aa:
23:49:bc:cb:fe:31:1c:b2:45:b0:2a:09:47:b9:42:86:c4:65:
ad:10:58:84:28:50:f8:3c:31:b5:9e:4f:e3:1b:b9:1c:ba:dd:
ac:61:99:96:6d:22:df:7a:77:76:2e:6b:73:ee:3b:e8:7b:3e:
34:37:4b:44:11:76:b8:09:1b:49:90:fe:3f:ee:30:ce:84:4a:
a3:fb:99:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1aokXzONNkagVTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
Yzk0ZmMwMzEtZjg1ZS00N2E0LWI1ODktNmFmNWY0NWQxY2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H5xbk8YGAbwMUvquun5zaxGrzJI0yiHtDSQ
LMgrxtm+fyqR+4Jb6OPriU7J149eM2fkqWnniliAMpaq+PQKSnJQNy+IBxtlVAeQ
Js0ho33xbIuqx0FrbLSJUQvqXtvqU4zdd41D9Xu1uofennj8FMsR9ff8bW9vNHy5
ZmsA4rf8aV5ZLuE16oC1w+KFriuRwe7b2FWFOy98bJ+P3XtjSL3gjf9CjTpcOCXJ
klJ7/gtz0AWYu1dLmWoNpV+MNdNtr0tGFHB9ZNbxxup9UJPuFcVpgcfwSspsm2e6
VRerIjXUoKxavYyzXZwjEwy8we1NldSkLhwTU4XmENb+9L/ptwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExKztOA7qhAiLy+0IsSBsavwscqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTBmYTFjMTctZTU2OC0z
YzYxLWFkMDQtMGQwNGE4NDg1M2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXMxGjIcIPlp/27rXMy/r0V3Eugz+4zZXjsT3HLtHbhOTRjH57sm2Vq
X0EmAg/5psy06c+LI5uhbDzV0NXa2ntTc0ksDPIEVD0HED5ND6tsYPTbt9C1J+KR
zoKBraYlDq1EwvYJeT76+nKJUl0EpTZS1q+SdIZ5HzY3yPHqQ+64ZeO+kXgBcsfH
8uGrkRi59jo0dNhyh1EqvY3WibLvpMODrKbBQnXXjE18pc+IKHVSNOmfqiNJvMv+
MRyyRbAqCUe5QobEZa0QWIQoUPg8MbWeT+MbuRy63axhmZZtIt96d3Yua3PuO+h7
PjQ3S0QRdrgJG0mQ/j/uMM6ESqP7mbc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:12 2025 by rpki-client