Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cc8a0931-9632-32ea-a21b-05a0a56abebb.roa
File: cc8a0931-9632-32ea-a21b-05a0a56abebb.roa (raw, json)
Hash identifier: gHVSe/6A3KsfgzX/e+OHWOWYFHhPfo4tC22BeBbXOqU=
Subject key identifier: 8C:96:FB:5E:58:E5:EF:B0:86:87:18:E1:14:D0:97:7D:68:78:13:16
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848BFEBCAA498E94205594C3AE0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cc8a0931-9632-32ea-a21b-05a0a56abebb.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 104.237.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ca:a4:98:e9:42:05:59:4c:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3089c9c4-c3a1-481e-9fde-cd29a0c87171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:73:be:b0:a1:08:e6:7b:cc:8f:c3:f2:55:
b4:44:c8:82:29:fa:eb:65:b5:b4:e0:e7:dc:e6:ef:
b2:08:79:27:b8:91:9b:4c:a7:7a:51:de:74:80:0c:
1d:17:7c:e4:d8:d2:12:d6:f0:f8:00:8b:86:eb:55:
e5:97:4e:df:6c:6e:04:1a:e2:8a:5d:2a:76:34:ca:
d5:7b:2d:08:20:b6:1c:98:18:3b:b5:a9:91:e3:78:
20:bc:79:7a:54:56:71:99:51:71:dd:5e:b3:7a:94:
6d:a4:1e:20:31:26:70:a7:a0:9a:5f:3a:67:71:27:
78:71:9e:5c:e7:9b:49:99:c2:8c:22:bd:c2:9d:50:
af:cb:0a:7b:c5:c8:75:78:9a:ba:dd:4e:ff:9b:a2:
f9:32:12:ed:23:aa:2d:46:e3:13:3b:2c:0b:76:86:
74:de:b7:6a:5a:da:f5:bf:c5:d3:8d:a8:4a:a5:d5:
24:27:79:79:10:f3:81:83:32:30:a0:3b:2e:9f:50:
ac:15:4a:3a:56:0a:03:db:c3:ad:61:53:42:9d:5d:
b6:69:43:a5:9d:14:5e:01:91:7d:85:a1:89:90:cb:
e2:af:8b:79:63:89:f8:55:0e:b2:cf:42:40:fa:98:
14:ac:11:68:a9:65:3a:c1:c2:2b:50:b0:db:a0:61:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:FB:5E:58:E5:EF:B0:86:87:18:E1:14:D0:97:7D:68:78:13:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cc8a0931-9632-32ea-a21b-05a0a56abebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8c:f8:fb:b4:06:8f:52:0d:c6:5f:7c:1c:51:0f:4a:4a:f3:
aa:ac:8c:8e:88:48:04:b4:02:70:1e:6b:2a:10:c8:52:38:4e:
f2:1a:62:39:cb:e2:2f:a7:5e:2c:e7:3b:d7:37:86:00:f3:71:
1d:4a:fd:93:70:5c:55:7e:e0:f6:fe:c4:d4:a7:55:cd:a5:d1:
91:bd:eb:2b:b6:f1:b4:84:40:ea:87:95:4d:3d:74:b8:68:be:
27:d7:28:72:17:b3:f9:86:5b:d7:7d:cd:06:f0:10:e1:40:ae:
ad:7e:fd:f9:d4:ac:c5:34:13:f0:9e:fe:35:c9:1d:af:77:71:
e1:aa:34:27:5f:5b:e6:56:ab:ac:a9:6e:c1:78:c5:3d:65:b6:
a9:82:ee:f4:c6:4e:d7:16:e2:c4:d1:3f:98:8c:e7:84:2a:49:
19:68:57:bc:dd:d9:c7:6d:61:dd:c7:00:66:56:64:cb:4e:9d:
be:a7:5c:95:08:0e:68:19:4f:b4:99:79:b1:5a:8e:12:d8:7e:
5e:bf:16:d1:3e:33:c6:7a:9e:c9:07:af:bd:64:0e:de:d8:f7:
56:9f:d3:ca:8f:d3:40:bd:62:e7:5c:74:7e:d5:8c:10:ec:7b:
c2:d0:dc:4e:b1:0a:f7:e6:13:ac:1c:ab:cb:4b:d7:bc:52:cd:
65:e5:b4:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68qkmOlCBVlMOuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MzA4OWM5YzQtYzNhMS00ODFlLTlmZGUtY2QyOWEwYzg3MTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RpzvrChCOZ7zI/D8lW0RMiCKfrrZbW04Ofc
5u+yCHknuJGbTKd6Ud50gAwdF3zk2NIS1vD4AIuG61Xll07fbG4EGuKKXSp2NMrV
ey0IILYcmBg7tamR43ggvHl6VFZxmVFx3V6zepRtpB4gMSZwp6CaXzpncSd4cZ5c
55tJmcKMIr3CnVCvywp7xch1eJq63U7/m6L5MhLtI6otRuMTOywLdoZ03rdqWtr1
v8XTjahKpdUkJ3l5EPOBgzIwoDsun1CsFUo6VgoD28OtYVNCnV22aUOlnRReAZF9
haGJkMvir4t5Y4n4VQ6yz0JA+pgUrBFoqWU6wcIrULDboGEH2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyW+15Y5e+whocY4RTQl31oeBMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvY2M4YTA5MzEtOTYzMi0z
MmVhLWEyMWItMDVhMGE1NmFiZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGM+Pu0Bo9SDcZffBxRD0pK86qsjI6ISAS0AnAeayoQyFI4TvIaYjnL
4i+nXiznO9c3hgDzcR1K/ZNwXFV+4Pb+xNSnVc2l0ZG96yu28bSEQOqHlU09dLho
vifXKHIXs/mGW9d9zQbwEOFArq1+/fnUrMU0E/Ce/jXJHa93ceGqNCdfW+ZWq6yp
bsF4xT1ltqmC7vTGTtcW4sTRP5iM54QqSRloV7zd2cdtYd3HAGZWZMtOnb6nXJUI
DmgZT7SZebFajhLYfl6/FtE+M8Z6nskHr71kDt7Y91af08qP00C9YudcdH7VjBDs
e8LQ3E6xCvfmE6wcq8tL17xSzWXltFU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:44 2025 by rpki-client