Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa
File: dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa (raw, json)
Hash identifier: lFDCSjf+1awM9DCdBRJirlKpp/D5913fab4VxcfVicc=
Subject key identifier: 5A:D1:8D:D0:65:B2:0A:26:00:1B:B8:1A:C9:A6:E3:C5:F3:29:85:71
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B525B72DDA9CA1D9A280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.89.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b5:25:b7:2d:da:9c:a1:d9:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=9fc0ec4e-ce89-4469-8877-22de4005d401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:65:57:52:9b:8c:de:7b:34:d2:46:38:e2:
d4:9c:b3:d5:73:bf:e3:7b:6e:57:db:16:a3:e5:f4:
f6:eb:ad:75:57:ba:b2:f9:a1:46:15:38:9d:72:6b:
32:1c:40:00:dc:7a:d8:4b:9c:78:85:e2:1b:77:2a:
e1:cd:97:83:af:a0:a0:ee:bd:20:70:6d:52:83:c0:
82:7a:21:8b:54:4b:6a:39:6d:1a:a2:b8:59:a5:e3:
55:cc:dd:12:c4:d3:37:58:5f:1a:e9:ae:ae:07:44:
1e:43:dc:d0:3e:ec:79:2d:e4:be:dc:4e:c6:62:b4:
f3:8a:63:18:ee:84:50:f5:98:4a:69:9c:2e:7e:20:
11:d5:39:c9:43:0b:24:ef:96:28:1b:7f:b6:1b:91:
69:b1:d9:75:16:90:89:59:7a:af:07:3e:86:3c:ca:
b4:71:38:4a:18:c7:df:a1:ec:86:64:d4:3a:eb:43:
e9:61:5c:32:84:68:2a:2e:a0:15:56:8e:19:77:e5:
71:de:02:32:05:49:ec:f9:a1:a9:27:07:4a:76:5b:
7a:98:b0:40:42:4d:86:b6:39:d1:9f:e4:80:10:6a:
b8:59:ce:54:e8:ce:27:9e:3f:f3:fb:38:13:f0:97:
01:e6:1d:f7:6e:72:45:e0:2e:65:aa:be:19:01:04:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:8D:D0:65:B2:0A:26:00:1B:B8:1A:C9:A6:E3:C5:F3:29:85:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.89.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:46:c4:dd:ff:3e:1e:38:c0:ec:e6:16:59:58:4c:c6:59:76:
be:b3:6a:4b:31:67:45:e5:fa:13:f3:54:7e:a5:ce:2a:e9:bc:
83:c8:a1:e6:23:18:cc:b5:9b:70:46:14:5e:d9:3c:ee:12:44:
73:26:ae:bc:f2:d4:9a:36:6c:ce:23:5a:aa:3f:02:3b:66:85:
86:26:57:84:83:6f:7c:98:a9:d0:17:38:14:82:61:52:30:b4:
fe:92:c6:eb:34:f0:46:42:99:d1:39:62:13:83:0f:c6:d7:0f:
f3:6d:51:43:e9:5b:ec:16:7f:d1:42:25:0c:33:84:4e:64:8c:
c8:b8:7a:0d:5d:f8:16:2c:35:01:7c:a2:92:a5:d8:3e:a2:3f:
be:df:db:4c:60:52:d5:2c:6c:26:66:8f:ea:c0:5a:24:07:43:
1b:5b:b5:d0:3e:5c:6c:20:af:1f:13:7e:b8:09:9f:60:b5:44:
1a:9a:a8:53:d8:ee:a0:46:67:ee:57:ac:88:54:d8:b1:f8:c7:
87:a5:99:79:fa:b6:da:66:14:17:9f:e5:06:b4:54:32:14:40:
0b:6c:82:93:84:4d:44:a8:41:da:83:00:37:7e:3a:41:0e:e0:
de:9c:22:4c:cf:c2:1e:1c:71:9a:70:ba:e5:eb:1a:f5:8b:8f:
34:e7:c6:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1bUlty3anKHZooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
OWZjMGVjNGUtY2U4OS00NDY5LTg4NzctMjJkZTQwMDVkNDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsplV1KbjN57NNJGOOLUnLPVc7/je25X2xaj
5fT26611V7qy+aFGFTidcmsyHEAA3HrYS5x4heIbdyrhzZeDr6Cg7r0gcG1Sg8CC
eiGLVEtqOW0aorhZpeNVzN0SxNM3WF8a6a6uB0QeQ9zQPux5LeS+3E7GYrTzimMY
7oRQ9ZhKaZwufiAR1TnJQwsk75YoG3+2G5Fpsdl1FpCJWXqvBz6GPMq0cThKGMff
oeyGZNQ660PpYVwyhGgqLqAVVo4Zd+Vx3gIyBUns+aGpJwdKdlt6mLBAQk2GtjnR
n+SAEGq4Wc5U6M4nnj/z+zgT8JcB5h33bnJF4C5lqr4ZAQQ6AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFrRjdBlsgomABu4Gsmm48XzKYVxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ5ZTNhNTEtZDZmYi0z
OWU3LTg5OWItNDdjOWE1MmJmYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFl0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5GxN3/Ph44wOzmFllYTMZZdr6zaksxZ0Xl+hPzVH6lzirpvIPIoeYj
GMy1m3BGFF7ZPO4SRHMmrrzy1Jo2bM4jWqo/AjtmhYYmV4SDb3yYqdAXOBSCYVIw
tP6Sxus08EZCmdE5YhODD8bXD/NtUUPpW+wWf9FCJQwzhE5kjMi4eg1d+BYsNQF8
opKl2D6iP77f20xgUtUsbCZmj+rAWiQHQxtbtdA+XGwgrx8TfrgJn2C1RBqaqFPY
7qBGZ+5XrIhU2LH4x4elmXn6ttpmFBef5Qa0VDIUQAtsgpOETUSoQdqDADd+OkEO
4N6cIkzPwh4ccZpwuuXrGvWLjzTnxv0=
-----END CERTIFICATE-----
Generated at Sat May 3 22:39:12 2025 by rpki-client