Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c1effc-782f-3079-9213-cd817776b0c7.roa
File: f4c1effc-782f-3079-9213-cd817776b0c7.roa (raw, json)
Hash identifier: 1iIqPjJ5MpoyaZJTbIUWDD1tS87m+8JTNAp8Pa87mqc=
Subject key identifier: A6:D7:0F:92:52:49:BE:BF:5A:A9:8B:26:8C:DC:0A:5D:8B:85:1E:5D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A068616533B549B04CB380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c1effc-782f-3079-9213-cd817776b0c7.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.121.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:68:61:65:33:b5:49:b0:4c:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=e79e3f6d-23b1-4a5a-834b-90c5f24350e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:cb:ae:93:4b:8e:34:e6:da:13:94:90:4b:
e7:05:0d:0e:83:16:9f:31:54:ce:e0:75:82:98:c7:
47:55:e0:f5:ba:f6:bf:fe:4f:3f:2b:4a:1a:b7:4e:
4d:8a:f4:14:13:77:95:c4:ea:e5:68:09:65:ba:81:
8b:ce:b8:36:53:98:d1:eb:bf:ec:ff:18:68:f3:50:
2b:20:18:c0:08:6a:16:6a:20:0a:63:d1:00:f2:63:
1c:7c:84:a7:4b:87:26:19:5d:b2:7a:6c:6d:62:d9:
c5:44:58:f5:73:7e:98:a2:05:17:83:44:30:22:70:
9d:40:41:9b:2a:ae:82:2c:27:d5:31:d6:86:f4:56:
73:87:2f:51:fe:b4:18:a4:93:89:7f:15:d2:9e:42:
27:8f:ab:2f:0e:1d:bd:90:d8:6b:b4:a1:2f:01:f5:
bd:f7:de:fe:8d:7c:d4:e4:f2:1b:32:fd:61:dc:a4:
89:3a:b7:78:cd:53:0d:65:66:6f:03:f6:8b:58:c3:
52:0b:75:d9:ab:1e:4f:25:25:99:31:44:3a:48:61:
b9:54:62:a5:d9:d7:4a:d1:d1:fb:40:5b:67:a7:53:
c1:4c:71:fc:1c:11:8c:31:9f:5f:79:be:93:41:de:
25:01:5e:19:10:a5:13:f3:a1:4b:14:c0:9e:4a:3e:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:0F:92:52:49:BE:BF:5A:A9:8B:26:8C:DC:0A:5D:8B:85:1E:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c1effc-782f-3079-9213-cd817776b0c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.121.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:de:f6:49:d8:0f:cd:aa:82:73:11:2f:e1:c6:c7:a9:d0:c3:
56:f9:7d:a9:be:fd:80:ae:ca:59:3f:04:71:a6:90:82:fc:8d:
40:78:77:d8:c1:38:57:37:20:61:a1:66:72:bf:91:ff:15:ca:
6d:39:1d:47:5b:b1:b4:e3:7a:05:de:c5:93:b8:7e:7f:9e:65:
4a:18:25:86:f1:37:9c:40:62:72:75:d6:3a:6d:69:62:ab:82:
8f:e5:fd:45:ca:51:a0:ec:05:7f:65:6f:d0:b0:e9:0e:4b:8d:
10:8a:c9:04:e4:47:5c:0b:85:82:90:7f:2f:b2:77:03:e7:1b:
93:27:df:1a:58:a5:02:25:84:38:08:37:73:71:39:9d:36:92:
e7:bc:d1:66:e4:0d:26:c5:de:e4:bb:de:cf:1f:79:e8:37:38:
9a:e4:17:5d:67:67:e6:df:3e:af:eb:f1:63:bf:03:97:01:14:
70:20:31:c1:bb:a7:9b:54:93:38:a9:b2:c0:03:b5:49:91:be:
33:cf:4b:b6:04:88:79:41:bb:ac:58:34:38:55:8a:de:05:d2:
79:d9:07:bc:d8:7b:f3:69:16:9f:81:56:a0:ec:d5:e9:9d:a8:
21:c0:c8:51:bb:ed:c5:9d:45:ed:49:d5:ee:b1:17:6c:08:93:
ee:9d:e1:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGhhZTO1SbBMs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTc5ZTNmNmQtMjNiMS00YTVhLTgzNGItOTBjNWYyNDM1MGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqDLrpNLjjTm2hOUkEvnBQ0OgxafMVTO4HWC
mMdHVeD1uva//k8/K0oat05NivQUE3eVxOrlaAlluoGLzrg2U5jR67/s/xho81Ar
IBjACGoWaiAKY9EA8mMcfISnS4cmGV2yemxtYtnFRFj1c36YogUXg0QwInCdQEGb
Kq6CLCfVMdaG9FZzhy9R/rQYpJOJfxXSnkInj6svDh29kNhrtKEvAfW9997+jXzU
5PIbMv1h3KSJOrd4zVMNZWZvA/aLWMNSC3XZqx5PJSWZMUQ6SGG5VGKl2ddK0dH7
QFtnp1PBTHH8HBGMMZ9feb6TQd4lAV4ZEKUT86FLFMCeSj4WIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbXD5JSSb6/WqmLJozcCl2LhR5dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjRjMWVmZmMtNzgyZi0z
MDc5LTkyMTMtY2Q4MTc3NzZiMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHlMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADe9knYD82qgnMRL+HGx6nQw1b5fam+/YCuylk/BHGmkIL8jUB4d9jB
OFc3IGGhZnK/kf8Vym05HUdbsbTjegXexZO4fn+eZUoYJYbxN5xAYnJ11jptaWKr
go/l/UXKUaDsBX9lb9Cw6Q5LjRCKyQTkR1wLhYKQfy+ydwPnG5Mn3xpYpQIlhDgI
N3NxOZ02kue80WbkDSbF3uS73s8feeg3OJrkF11nZ+bfPq/r8WO/A5cBFHAgMcG7
p5tUkzipssADtUmRvjPPS7YEiHlBu6xYNDhVit4F0nnZB7zYe/NpFp+BVqDs1emd
qCHAyFG77cWdRe1J1e6xF2wIk+6d4c4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:43:58 2025 by rpki-client