Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa
File: a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa (raw, json)
Hash identifier: PeqJGRtOgyoBY8khUc3ZuhhOLEARY4CxxdKyNRhH2Qw=
Subject key identifier: 92:7C:C6:07:B7:ED:5C:57:7C:50:5D:0B:7D:F3:27:4D:BE:5B:4A:CA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848573ADEFED35E4C9E14FC1E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 16625
IP address blocks: 104.109.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:de:fe:d3:5e:4c:9e:14:fc:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=745f089b-bc32-4554-bba6-c6165c24d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:c6:00:3b:13:54:69:6d:89:1c:8b:ea:77:
7b:ff:7d:76:3b:d1:f2:7b:f6:7b:78:76:9f:55:16:
6a:f8:a0:38:d0:dc:96:aa:a8:01:ee:78:b8:0d:6b:
9b:73:6b:e6:68:34:3d:46:5d:db:b4:d5:7d:1b:ec:
3e:bd:a4:a8:62:5a:a8:49:88:e8:63:d1:66:88:7d:
ef:04:5e:ed:ba:87:f7:bf:57:71:c6:20:52:0c:33:
51:dd:2f:56:b9:8f:49:dd:b3:64:b5:36:89:38:e9:
26:9e:ef:1f:7a:66:05:da:1d:05:17:0e:39:3e:98:
f6:fd:44:64:b0:d3:c7:d5:c5:8e:e0:ce:70:df:29:
fd:2b:20:93:c6:67:d7:e8:82:f3:7a:6b:ec:bf:51:
80:68:9b:1c:21:cb:82:21:c7:28:d5:98:38:b8:8e:
3e:7e:da:f9:02:04:af:91:e9:f6:8a:b9:7d:4b:75:
2e:ac:ea:a5:9a:a9:71:52:90:7d:65:40:9b:d7:ee:
b8:4c:17:c5:5f:fb:65:20:04:af:0d:0e:4f:08:82:
b3:83:c1:45:78:b8:94:81:f1:03:35:f8:10:20:3f:
db:77:1e:64:b4:9e:4e:9e:30:30:0b:ac:13:ab:78:
17:b5:85:5e:e2:6c:cf:9b:b7:98:76:d1:3e:48:44:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:C6:07:B7:ED:5C:57:7C:50:5D:0B:7D:F3:27:4D:BE:5B:4A:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8b45b42-ec63-3d32-aca7-8cc9586be0ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.109.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:b0:b7:57:b0:58:79:1b:bd:e9:21:95:aa:ea:41:eb:e3:ba:
4c:5b:a7:fd:05:2a:72:ec:63:3e:ee:b9:bb:f9:2b:af:d4:2d:
07:30:0f:c1:4d:6c:58:18:69:49:85:0c:30:91:52:1e:34:0c:
ca:bd:e8:6a:88:93:12:24:e1:38:b0:df:7f:4c:c2:d5:7b:40:
c8:36:ae:c2:0f:d3:08:e5:80:24:b8:66:a6:8c:25:c5:f5:f0:
d5:d8:1c:30:6f:31:48:a5:32:28:5c:df:e0:7a:a7:bb:80:8f:
72:a9:6b:9e:52:0e:dc:64:1a:dc:7f:df:a6:b7:2c:ce:77:ae:
09:d7:e6:d3:71:f7:24:26:41:ea:80:29:50:ba:50:02:5f:a9:
3b:f5:0b:5c:c7:f0:ae:d2:47:57:98:61:84:59:cb:94:e7:fc:
a3:23:2e:4b:b0:2e:a7:94:df:31:a0:b9:ab:d7:e8:92:56:11:
72:9d:4a:83:19:76:da:1f:6a:28:ba:60:00:63:5e:55:a4:ce:
ff:2f:be:c2:90:95:88:58:a6:fd:04:b0:1c:72:f6:f4:e1:d1:
30:63:f7:af:cb:63:2f:50:04:e1:55:57:17:92:54:d5:7d:6d:
e4:e0:90:3a:e2:a7:8e:13:89:63:7d:fe:66:52:71:b5:58:8d:
27:29:62:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOt7+015MnhT8HgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
NzQ1ZjA4OWItYmMzMi00NTU0LWJiYTYtYzYxNjVjMjRkOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/bGADsTVGltiRyL6nd7/312O9Hye/Z7eHaf
VRZq+KA40NyWqqgB7ni4DWubc2vmaDQ9Rl3btNV9G+w+vaSoYlqoSYjoY9FmiH3v
BF7tuof3v1dxxiBSDDNR3S9WuY9J3bNktTaJOOkmnu8femYF2h0FFw45Ppj2/URk
sNPH1cWO4M5w3yn9KyCTxmfX6ILzemvsv1GAaJscIcuCIcco1Zg4uI4+ftr5AgSv
ken2irl9S3UurOqlmqlxUpB9ZUCb1+64TBfFX/tlIASvDQ5PCIKzg8FFeLiUgfED
NfgQID/bdx5ktJ5OnjAwC6wTq3gXtYVe4mzPm7eYdtE+SERRdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJ8xge37VxXfFBdC33zJ02+W0rKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYThiNDViNDItZWM2My0z
ZDMyLWFjYTctOGNjOTU4NmJlMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaG34MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImwt1ewWHkbvekhlarqQevjukxbp/0FKnLsYz7uubv5K6/ULQcwD8FN
bFgYaUmFDDCRUh40DMq96GqIkxIk4Tiw339MwtV7QMg2rsIP0wjlgCS4ZqaMJcX1
8NXYHDBvMUilMihc3+B6p7uAj3Kpa55SDtxkGtx/36a3LM53rgnX5tNx9yQmQeqA
KVC6UAJfqTv1C1zH8K7SR1eYYYRZy5Tn/KMjLkuwLqeU3zGguavX6JJWEXKdSoMZ
dtofaii6YABjXlWkzv8vvsKQlYhYpv0EsBxy9vTh0TBj96/LYy9QBOFVVxeSVNV9
beTgkDrip44TiWN9/mZScbVYjScpYtw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:05 2025 by rpki-client