Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa
File: 9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa (raw, json)
Hash identifier: LmXZXs/a3rpM5ITMM52W7E1ZJvEvUxfqyxJUoAF5U3Y=
Subject key identifier: AF:ED:0F:1B:AF:4A:5D:9B:4F:FB:B8:37:20:A9:BC:50:AC:2D:C8:E7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0A3E1BC23C7576E46000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.76.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0a:3e:1b:c2:3c:75:76:e4:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=72527665-75ad-4bee-96fe-8bf5d13ab9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:65:f1:3f:b5:81:7a:2c:fd:80:63:f6:a3:
53:7a:66:44:38:6f:43:bb:12:4b:e4:16:cd:7e:c4:
b6:4d:98:c9:35:5b:b8:5d:04:4d:fb:30:8e:83:33:
5f:12:7e:23:9c:91:2f:54:4e:3e:db:f2:f8:4b:73:
16:be:1b:78:b1:c0:bf:e4:3d:58:6d:bf:70:80:96:
b3:5e:ea:12:5a:92:9e:72:c9:5f:4d:8c:c6:0f:c1:
1d:93:7e:77:91:a3:f8:f9:fc:04:10:35:0c:b4:db:
39:09:5c:52:52:3e:78:f7:5c:db:2f:e8:3d:c8:14:
ab:51:55:2f:ca:70:27:a0:3f:9d:91:e7:5e:eb:73:
27:6b:f8:b6:1f:94:07:3e:84:10:5b:45:56:be:b8:
ac:87:76:cc:d9:91:52:4e:c8:e9:5c:40:0f:1d:cc:
4e:b1:e5:47:6a:fa:1e:19:a9:5f:5c:84:c6:c3:13:
e0:e6:26:e0:6c:0a:3c:19:61:4b:81:ef:fa:eb:68:
e8:8b:6d:a4:d2:d4:43:c3:31:6e:db:7d:b0:59:0f:
b8:fa:6d:02:94:9f:72:3e:e7:e7:3e:29:66:4e:3a:
c5:fe:bd:41:da:65:b9:71:17:fc:25:93:ae:1f:d3:
6a:d2:3a:a2:a7:fc:49:78:16:6f:14:d2:5c:0c:3e:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:0F:1B:AF:4A:5D:9B:4F:FB:B8:37:20:A9:BC:50:AC:2D:C8:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f40cd14-7d2d-35ce-a344-5a292fd3882e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.76.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:18:59:2f:a7:12:95:6c:a0:b8:9c:e4:c3:e5:7c:28:ad:a7:
9b:97:1e:6c:e2:48:c1:ef:77:42:15:58:b7:91:51:f8:43:e0:
8f:32:16:91:3e:5e:04:bb:63:7b:ee:12:8b:05:f7:7d:5d:e0:
1c:c9:9e:69:79:f7:f6:56:db:0d:e3:88:c7:94:15:82:51:9a:
a6:82:63:ac:7e:69:86:e4:5d:f0:6e:97:82:32:f3:20:b2:f5:
a5:0e:f8:6b:50:48:60:b4:33:9c:5a:8d:8e:11:38:aa:0d:77:
36:a0:07:54:64:b1:20:21:b5:dc:5b:7f:10:35:4a:d4:2f:e8:
fe:4b:25:df:2e:53:6d:a2:11:42:80:b0:51:e7:ad:e3:0c:52:
8a:82:bb:73:f7:a3:08:0f:22:a2:e5:18:68:53:2c:b4:53:2a:
48:0b:c4:9b:df:23:9d:79:63:48:2b:4e:3b:85:63:1c:68:9c:
0e:f3:0b:0c:75:cd:6a:20:e8:89:b9:ac:f8:4f:1d:52:ed:a2:
e8:1f:ce:f5:0e:a9:85:01:24:2d:01:c6:72:e0:98:21:a7:6a:
44:b1:83:89:23:71:20:eb:4d:b3:ff:59:9e:a6:ad:54:f6:a9:
c6:e7:38:d9:c5:e3:a5:8b:f2:98:bc:65:e8:fb:aa:ab:30:e9:
1f:27:f1:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCwo+G8I8dXbkYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzI1Mjc2NjUtNzVhZC00YmVlLTk2ZmUtOGJmNWQxM2FiOWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9l8T+1gXos/YBj9qNTemZEOG9DuxJL5BbN
fsS2TZjJNVu4XQRN+zCOgzNfEn4jnJEvVE4+2/L4S3MWvht4scC/5D1Ybb9wgJaz
XuoSWpKecslfTYzGD8Edk353kaP4+fwEEDUMtNs5CVxSUj5491zbL+g9yBSrUVUv
ynAnoD+dkede63Mna/i2H5QHPoQQW0VWvrish3bM2ZFSTsjpXEAPHcxOseVHavoe
GalfXITGwxPg5ibgbAo8GWFLge/662joi22k0tRDwzFu232wWQ+4+m0ClJ9yPufn
PilmTjrF/r1B2mW5cRf8JZOuH9Nq0jqip/xJeBZvFNJcDD7ULwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/tDxuvSl2bT/u4NyCpvFCsLcjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY0MGNkMTQtN2QyZC0z
NWNlLWEzNDQtNWEyOTJmZDM4ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEYWS+nEpVsoLic5MPlfCitp5uXHmziSMHvd0IVWLeRUfhD4I8yFpE+
XgS7Y3vuEosF931d4BzJnml59/ZW2w3jiMeUFYJRmqaCY6x+aYbkXfBul4Iy8yCy
9aUO+GtQSGC0M5xajY4ROKoNdzagB1RksSAhtdxbfxA1StQv6P5LJd8uU22iEUKA
sFHnreMMUoqCu3P3owgPIqLlGGhTLLRTKkgLxJvfI515Y0grTjuFYxxonA7zCwx1
zWog6Im5rPhPHVLtougfzvUOqYUBJC0BxnLgmCGnakSxg4kjcSDrTbP/WZ6mrVT2
qcbnONnF46WL8pi8Zej7qqsw6R8n8c8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:45 2025 by rpki-client