Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa
File: bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa (raw, json)
Hash identifier: nPgRxFxN0m6CFHDTvn+vAzDe8s568GEHg2Xv2m/0u7M=
Subject key identifier: 66:53:52:BD:6C:C7:BF:A8:88:11:65:ED:44:16:9F:AE:F9:0D:1C:EA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584849457C3685E0587F30A61E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.80.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:7c:36:85:e0:58:7f:30:a6:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=cb37b436-f330-468b-8d41-9c9c510b0877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:6a:2c:d5:09:ea:ae:09:13:05:f6:25:d6:
0c:9a:b1:9b:51:ff:0b:b5:b0:9f:6c:b1:83:c8:a0:
f9:af:98:e4:b3:ad:c5:ed:da:eb:d5:b1:88:c2:cd:
87:cd:79:a6:91:f2:ec:40:5e:15:dc:c0:b7:6e:fa:
39:db:65:13:d5:6a:1e:95:4b:ae:e9:d5:d7:af:85:
34:91:da:47:64:e3:81:5f:f9:e4:7c:80:0b:36:2e:
d0:57:50:6a:5a:02:fb:92:2c:d7:90:51:0b:81:ea:
ee:1f:36:56:c9:33:60:b8:8b:d3:26:c8:68:2c:59:
38:b8:75:84:87:c4:a6:fb:68:f8:c5:e3:b4:df:e7:
36:4e:5c:fd:5e:71:6d:27:34:0b:dd:cd:1e:8c:84:
dc:c8:67:73:57:0d:f8:02:4c:2d:b2:68:8d:3c:a8:
d7:c4:66:dd:a8:f7:50:04:aa:97:3d:dd:3b:5a:30:
3a:43:d6:b2:45:37:68:d6:4b:0b:f2:f9:99:37:84:
38:a8:6f:ac:fa:bd:49:7b:22:fc:15:23:4c:90:32:
44:02:f9:59:fd:99:50:f0:41:61:23:c0:31:26:16:
ee:d8:d9:a6:78:9a:99:e6:e4:19:9d:f7:d4:0b:47:
7f:8a:fe:7d:20:5b:87:fb:6b:71:6c:87:c4:6c:87:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:52:BD:6C:C7:BF:A8:88:11:65:ED:44:16:9F:AE:F9:0D:1C:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.80.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:91:a5:7c:c9:03:66:ba:69:18:c6:18:41:31:d2:4e:46:1f:
1c:f8:c8:ea:c0:80:56:3b:2a:b3:c5:0c:45:ce:17:18:b0:f4:
68:8a:16:35:76:26:7c:3b:05:7d:36:34:2d:7d:26:d7:a5:48:
75:41:d9:13:1f:72:a2:8d:09:73:97:bf:26:6b:0c:58:9c:f8:
88:36:b2:3b:93:3e:65:9f:50:00:84:04:8c:df:b2:62:aa:4d:
1a:0f:88:34:83:f3:8b:d6:af:da:41:9e:9d:54:19:40:ca:9f:
82:0b:08:9c:dd:8e:6a:a7:03:76:96:cf:77:1f:d3:a7:df:25:
19:0d:12:4d:79:ba:43:a7:1d:47:2c:90:66:d9:e8:87:63:e7:
5d:52:09:eb:5f:ec:3f:0a:fe:ef:5b:1c:cd:5f:76:f1:aa:09:
2f:cc:e1:94:4a:ba:41:b5:75:6f:db:38:5d:5c:56:e2:ea:9d:
0b:c5:27:3e:74:21:51:f4:dd:1e:18:0c:5f:80:65:8c:fb:22:
53:d1:87:60:71:e7:31:3f:05:5f:9b:ce:46:6f:3a:42:9d:e2:
1a:2b:96:da:3e:53:da:80:83:56:d1:c5:8a:61:89:15:80:c2:
b6:df:0e:b7:e2:e6:4f:ab:59:b6:80:6a:04:d1:39:e4:88:0e:
92:56:f4:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRXw2heBYfzCmHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
Y2IzN2I0MzYtZjMzMC00NjhiLThkNDEtOWM5YzUxMGIwODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLJqLNUJ6q4JEwX2JdYMmrGbUf8LtbCfbLGD
yKD5r5jks63F7drr1bGIws2HzXmmkfLsQF4V3MC3bvo522UT1WoelUuu6dXXr4U0
kdpHZOOBX/nkfIALNi7QV1BqWgL7kizXkFELgeruHzZWyTNguIvTJshoLFk4uHWE
h8Sm+2j4xeO03+c2Tlz9XnFtJzQL3c0ejITcyGdzVw34AkwtsmiNPKjXxGbdqPdQ
BKqXPd07WjA6Q9ayRTdo1ksL8vmZN4Q4qG+s+r1JeyL8FSNMkDJEAvlZ/ZlQ8EFh
I8AxJhbu2NmmeJqZ5uQZnffUC0d/iv59IFuH+2txbIfEbIf+1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZTUr1sx7+oiBFl7UQWn675DRzqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmIzZTc5OTgtMmRjMC0z
MWQ5LTg3MTItNTgyYjZhMjliZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCRpXzJA2a6aRjGGEEx0k5GHxz4yOrAgFY7KrPFDEXOFxiw9GiKFjV2
Jnw7BX02NC19JtelSHVB2RMfcqKNCXOXvyZrDFic+Ig2sjuTPmWfUACEBIzfsmKq
TRoPiDSD84vWr9pBnp1UGUDKn4ILCJzdjmqnA3aWz3cf06ffJRkNEk15ukOnHUcs
kGbZ6Idj511SCetf7D8K/u9bHM1fdvGqCS/M4ZRKukG1dW/bOF1cVuLqnQvFJz50
IVH03R4YDF+AZYz7IlPRh2Bx5zE/BV+bzkZvOkKd4horlto+U9qAg1bRxYphiRWA
wrbfDrfi5k+rWbaAagTROeSIDpJW9EE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:50 2025 by rpki-client