Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d61ebfc5-50ff-376c-8e99-08e5ca8732a7.roa
File: d61ebfc5-50ff-376c-8e99-08e5ca8732a7.roa (raw, json)
Hash identifier: SdSZcdw4HJRM9C69btwCXtkyUsKD2FaY7aC6YV7Rrjs=
Subject key identifier: 24:BE:C0:2A:4B:78:35:3D:8A:1D:2A:35:5E:8D:B6:37:5C:35:50:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5BAD311012811341048C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d61ebfc5-50ff-376c-8e99-08e5ca8732a7.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.104.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ba:d3:11:01:28:11:34:10:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=b32953c1-be43-4058-a024-0ce6ab1ddb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:75:02:65:05:a0:3d:7a:7e:31:83:f5:85:
7d:91:de:53:42:c6:b2:0f:cb:95:28:28:0f:8a:0e:
70:0f:62:2a:8f:10:08:37:f9:83:db:a9:1c:83:56:
cc:de:20:94:22:57:1b:53:26:cf:5b:00:fa:63:bf:
40:77:0b:46:07:13:b8:91:74:27:49:6a:f9:25:c7:
d7:02:25:35:ef:af:9b:64:ee:55:90:3e:d4:4d:55:
78:cb:08:ff:59:12:38:56:00:a9:a4:a6:f0:d2:7f:
93:d8:24:76:2d:1f:3c:85:86:a2:82:e6:bf:8e:60:
04:b8:9b:66:b5:8b:95:e9:95:81:ea:b5:ac:f3:a1:
ca:b8:28:0c:8f:14:d0:c0:5c:6c:02:28:a7:3e:74:
ac:28:35:fb:60:be:c8:99:de:c0:5d:02:6b:96:cc:
de:d2:e5:38:78:56:df:e4:a0:56:3c:54:52:3c:6a:
c5:d7:18:61:86:32:09:1d:69:d6:3b:ed:97:1f:78:
ff:ae:7b:87:2c:64:04:ab:4f:41:ce:fa:d8:ed:fb:
eb:1c:ea:75:c2:d8:e5:96:a3:0a:69:b0:9a:9f:cc:
ff:cc:3c:29:d2:71:3f:61:11:92:36:2c:49:3b:cc:
f6:d7:9b:0c:cb:7a:85:59:88:56:88:44:d9:40:0b:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:C0:2A:4B:78:35:3D:8A:1D:2A:35:5E:8D:B6:37:5C:35:50:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d61ebfc5-50ff-376c-8e99-08e5ca8732a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.104.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:15:4e:29:90:58:ee:f9:9c:3b:00:38:c1:73:ed:67:63:54:
33:40:86:24:63:f3:f9:73:77:85:48:79:41:6c:a8:54:a5:60:
7a:a2:9e:7b:e3:07:41:19:72:ec:08:e4:14:d8:19:8a:98:55:
83:85:63:f4:12:e8:06:8a:fa:4e:84:9f:71:3f:11:91:00:73:
f5:26:ef:97:f1:92:f2:b7:2a:b4:9d:43:a5:a8:05:78:de:e2:
73:12:89:4f:da:a9:a4:86:30:bc:a4:42:57:61:df:52:09:b0:
c4:85:04:22:b3:eb:e8:54:a8:7c:fe:f0:1e:20:82:a0:dd:c0:
ba:e3:eb:15:9d:b3:2d:b6:2b:16:93:6a:2d:cc:60:52:2a:c4:
bf:e0:05:11:04:f7:bf:3c:7d:77:13:72:f3:2a:ad:0f:c6:55:
f7:81:4e:02:22:e1:75:2c:d5:0e:aa:c9:22:8d:ed:52:02:a9:
d6:84:d7:e7:bc:93:56:34:b0:32:94:8c:d7:64:d3:68:15:de:
9a:b2:db:c7:40:3e:f2:c0:ab:79:36:5c:c1:16:ef:dd:74:5e:
0d:e2:53:fc:de:d4:01:38:6b:b7:80:3f:82:ab:28:d6:bb:bd:
80:a0:7b:ac:49:b2:c8:97:9e:d8:ba:03:42:02:05:49:ed:8e:
4e:43:f7:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1brTEQEoETQQSMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YjMyOTUzYzEtYmU0My00MDU4LWEwMjQtMGNlNmFiMWRkYjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTl1AmUFoD16fjGD9YV9kd5TQsayD8uVKCgP
ig5wD2IqjxAIN/mD26kcg1bM3iCUIlcbUybPWwD6Y79AdwtGBxO4kXQnSWr5JcfX
AiU176+bZO5VkD7UTVV4ywj/WRI4VgCppKbw0n+T2CR2LR88hYaigua/jmAEuJtm
tYuV6ZWB6rWs86HKuCgMjxTQwFxsAiinPnSsKDX7YL7Imd7AXQJrlsze0uU4eFbf
5KBWPFRSPGrF1xhhhjIJHWnWO+2XH3j/rnuHLGQEq09BzvrY7fvrHOp1wtjllqMK
abCan8z/zDwp0nE/YRGSNixJO8z215sMy3qFWYhWiETZQAsM6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCS+wCpLeDU9ih0qNV6NtjdcNVAZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDYxZWJmYzUtNTBmZi0z
NzZjLThlOTktMDhlNWNhODczMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIVTimQWO75nDsAOMFz7WdjVDNAhiRj8/lzd4VIeUFsqFSlYHqinnvj
B0EZcuwI5BTYGYqYVYOFY/QS6AaK+k6En3E/EZEAc/Um75fxkvK3KrSdQ6WoBXje
4nMSiU/aqaSGMLykQldh31IJsMSFBCKz6+hUqHz+8B4ggqDdwLrj6xWdsy22KxaT
ai3MYFIqxL/gBREE9788fXcTcvMqrQ/GVfeBTgIi4XUs1Q6qySKN7VICqdaE1+e8
k1Y0sDKUjNdk02gV3pqy28dAPvLAq3k2XMEW7910Xg3iU/ze1AE4a7eAP4KrKNa7
vYCge6xJssiXnti6A0ICBUntjk5D990=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:01 2025 by rpki-client