Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8eff89a-28a7-3429-abb9-5314d47fa013.roa
File: d8eff89a-28a7-3429-abb9-5314d47fa013.roa (raw, json)
Hash identifier: QyEcm4dBwabghENqwctZsCw4JtCxGYIUjzr/hKF7ck8=
Subject key identifier: 8D:3D:75:FB:8D:03:4D:65:E8:DD:27:B4:50:06:E0:C6:3B:7E:C8:FB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06A927B351A59A0F06D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8eff89a-28a7-3429-abb9-5314d47fa013.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.125.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:6a:92:7b:35:1a:59:a0:f0:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=1f30d728-fdcd-48b3-9fdf-8a9ca9957ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:99:1e:28:6e:93:af:3a:8f:4e:0e:a8:97:
10:f7:7a:37:06:db:55:a4:d8:07:bd:9c:d5:4b:63:
82:d6:4b:4e:9c:6a:9c:a5:46:d8:ff:64:1c:ac:1f:
76:e7:4b:30:02:98:90:49:70:47:84:29:52:a8:8a:
4f:c8:ce:89:38:1e:6d:47:49:d9:c8:3a:05:85:e0:
ea:25:50:c5:af:07:37:65:ec:d6:27:b8:06:af:c7:
38:3c:ac:8d:77:ac:85:87:7c:26:e2:8a:ab:13:8d:
4b:e9:f5:bf:5f:90:f6:32:da:73:ed:19:6d:1d:b9:
9a:25:9e:57:3c:88:b6:db:26:c4:f1:1a:9e:45:6a:
43:38:45:1e:21:0a:63:cc:66:39:e2:f2:1d:92:0f:
c8:f9:d0:c0:a7:0c:d5:4b:35:82:e4:b5:55:3b:7a:
0f:21:cb:73:b7:0b:35:12:06:c0:52:35:95:78:6c:
e6:4a:9c:a8:74:1d:47:46:14:9c:fc:16:70:6b:1b:
a0:7c:79:79:eb:5f:f0:40:67:d3:81:ac:c6:55:cf:
98:a2:47:ff:e7:26:37:24:6d:7a:c3:c3:21:13:9f:
21:20:26:e1:c4:8b:a0:86:00:62:50:d4:f5:33:d6:
e4:ef:36:3d:ec:b7:9c:a2:e3:67:5a:90:a7:e1:51:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:75:FB:8D:03:4D:65:E8:DD:27:B4:50:06:E0:C6:3B:7E:C8:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8eff89a-28a7-3429-abb9-5314d47fa013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.125.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:66:af:22:65:6e:9a:ee:fb:c2:9d:9b:88:b0:be:e4:50:c6:
dd:80:93:94:58:0f:c7:43:58:d3:39:08:2c:9e:19:4d:e5:83:
34:66:50:e7:58:b2:c9:2f:bb:09:d4:e8:30:dd:05:c9:87:1e:
c0:df:bb:38:2b:8a:2b:46:44:17:72:79:c7:da:f4:74:78:72:
0a:77:16:36:2b:6e:3f:d5:72:c2:90:12:85:e4:34:84:4b:e5:
4e:9d:e6:2f:ec:19:a0:52:3b:22:7f:9b:15:cf:60:33:34:6b:
c2:0d:cb:97:b2:1d:37:88:16:97:21:56:d5:b9:a9:86:af:5c:
8c:32:f8:79:b1:40:3a:09:a7:29:c0:50:80:cd:27:e2:66:a6:
0e:cd:83:96:6e:87:88:4f:70:81:cd:07:f1:89:df:59:f6:88:
fc:0f:10:ca:31:e2:3e:08:30:47:dc:4c:bc:07:13:81:b2:c9:
c0:65:8c:25:64:12:00:ec:03:bb:69:43:12:e0:71:c1:ed:6b:
65:34:a8:ce:da:e7:09:ae:b9:a7:b8:21:d9:47:68:bb:a6:e2:
46:23:96:6e:a0:72:8f:39:59:08:46:6f:2b:46:d4:f9:fb:fd:
ad:a6:da:d5:16:37:35:5e:59:10:3f:58:81:bd:f6:e0:f7:1b:
ec:61:77:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGqSezUaWaDwbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MWYzMGQ3MjgtZmRjZC00OGIzLTlmZGYtOGE5Y2E5OTU3ZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvmZHihuk686j04OqJcQ93o3BttVpNgHvZzV
S2OC1ktOnGqcpUbY/2QcrB9250swApiQSXBHhClSqIpPyM6JOB5tR0nZyDoFheDq
JVDFrwc3ZezWJ7gGr8c4PKyNd6yFh3wm4oqrE41L6fW/X5D2Mtpz7RltHbmaJZ5X
PIi22ybE8RqeRWpDOEUeIQpjzGY54vIdkg/I+dDApwzVSzWC5LVVO3oPIctztws1
EgbAUjWVeGzmSpyodB1HRhSc/BZwaxugfHl561/wQGfTgazGVc+Yokf/5yY3JG16
w8MhE58hICbhxIughgBiUNT1M9bk7zY97LecouNnWpCn4VEJPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI09dfuNA01l6N0ntFAG4MY7fsj7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhlZmY4OWEtMjhhNy0z
NDI5LWFiYjktNTMxNGQ0N2ZhMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaH3cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJmryJlbpru+8Kdm4iwvuRQxt2Ak5RYD8dDWNM5CCyeGU3lgzRmUOdY
sskvuwnU6DDdBcmHHsDfuzgriitGRBdyecfa9HR4cgp3FjYrbj/VcsKQEoXkNIRL
5U6d5i/sGaBSOyJ/mxXPYDM0a8INy5eyHTeIFpchVtW5qYavXIwy+HmxQDoJpynA
UIDNJ+Jmpg7Ng5Zuh4hPcIHNB/GJ31n2iPwPEMox4j4IMEfcTLwHE4GyycBljCVk
EgDsA7tpQxLgccHta2U0qM7a5wmuuae4IdlHaLum4kYjlm6gco85WQhGbytG1Pn7
/a2m2tUWNzVeWRA/WIG99uD3G+xhd1U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:38 2025 by rpki-client