Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/07a82516-8e0d-3a66-b041-ecf6a8380adf.roa
File: 07a82516-8e0d-3a66-b041-ecf6a8380adf.roa (raw, json)
Hash identifier: Qe8UFRVvXwFl9uUqq9Df3TkQj0y3zcZg02fPH8rF/ig=
Subject key identifier: 07:4D:57:ED:09:E7:58:72:32:0F:78:C6:C6:2E:94:22:AF:9B:B4:A5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848B1B8D454F37EBFFB9D0BD480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/07a82516-8e0d-3a66-b041-ecf6a8380adf.roa
Signing time: Tue 28 Jan 2025 11:57:22 +0000
ROA not before: Tue 28 Jan 2025 11:57:22 +0000
ROA not after: Mon 28 Apr 2025 10:57:22 +0000
asID: 208485
IP address blocks: 104.250.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:b8:d4:54:f3:7e:bf:fb:9d:0b:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 28 11:57:22 2025 GMT
Not After : Apr 28 10:57:22 2025 GMT
Subject: CN=7f1e4d3b-4014-480b-8002-33d449062b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:78:a5:cf:9e:c7:f5:d8:57:50:b3:78:dc:
51:a9:85:33:46:1e:f6:87:d7:17:6d:5c:41:2c:7c:
16:3f:c4:0d:ab:63:bb:26:87:17:48:53:31:2c:87:
cf:11:a6:05:c9:7e:6a:a9:d4:ae:25:c8:3d:14:17:
06:be:fa:e0:b2:01:b2:5d:e9:79:2c:64:cc:e6:a4:
ee:a3:8a:b3:30:a3:b5:00:6f:0d:f3:a9:df:48:90:
15:91:e2:55:28:42:86:87:5d:32:31:a8:e0:fc:9c:
fb:12:87:e6:0e:b8:e5:fe:c4:f5:56:6d:40:25:d8:
1f:f5:3d:ef:a1:70:42:13:04:d9:2e:c4:59:64:89:
54:45:08:04:4b:38:58:19:52:d2:04:23:b7:42:ee:
1c:7f:7d:51:0e:b3:62:0e:e8:58:22:3d:1e:12:27:
55:d8:14:a3:36:6b:20:2f:3c:1a:2b:9a:f1:11:2f:
7c:e3:50:59:3a:67:1f:23:79:15:1d:c6:b7:41:02:
6e:c0:52:a5:c0:c8:ed:8f:f6:96:2c:75:78:d1:8f:
42:ce:4f:a9:bf:fc:9d:54:b4:23:09:96:70:3d:b0:
b9:df:56:9f:9b:03:4c:c9:ee:7c:d3:c7:4d:ff:77:
d9:7d:66:73:a1:01:4f:be:92:89:18:52:4d:e3:49:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:57:ED:09:E7:58:72:32:0F:78:C6:C6:2E:94:22:AF:9B:B4:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/07a82516-8e0d-3a66-b041-ecf6a8380adf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:bb:8a:74:61:1a:e7:cd:24:ec:54:4f:57:55:ea:29:3b:32:
8d:d2:02:80:39:15:d7:9f:9a:df:29:87:c5:8c:78:88:fb:f1:
07:bb:ea:f7:bf:3b:df:76:b9:30:76:75:39:dc:a2:63:63:29:
17:39:97:7c:25:78:81:2e:71:7a:40:fe:68:9c:19:6c:2c:eb:
91:23:fc:02:3d:df:cf:a9:23:c4:11:59:58:1c:03:70:93:e2:
79:d9:f8:5a:b9:04:63:f9:90:93:90:d3:1b:24:f9:2d:23:d0:
66:0f:6c:00:62:40:9c:7b:05:76:96:fe:35:62:1f:71:76:0a:
4a:89:38:ee:3d:84:6d:de:a9:c2:e8:ea:9a:06:34:ca:d3:1a:
48:c6:08:95:d0:86:2c:13:9c:50:1f:bf:eb:63:05:a3:eb:1b:
28:83:c5:de:1d:08:df:79:fe:0c:8e:f5:b8:e6:c0:f6:c9:fd:
c0:bd:5a:bc:ac:df:d5:18:2e:c6:a3:b9:c7:c4:7d:7f:84:3b:
f8:47:72:37:7a:2e:2e:f1:c5:10:ab:33:83:7b:d0:f7:3c:59:
23:0a:fc:67:a3:c3:a0:fd:32:1b:8b:14:e6:e8:77:66:28:8e:
45:b7:b9:52:96:6c:dd:0c:81:e0:e0:63:1d:bb:9a:1d:30:bd:
f6:6a:89:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEixuNRU836/+50L1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyODExNTcyMloXDTI1MDQyODEwNTcyMlowLzEtMCsGA1UEAxMk
N2YxZTRkM2ItNDAxNC00ODBiLTgwMDItMzNkNDQ5MDYyYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUl4pc+ex/XYV1CzeNxRqYUzRh72h9cXbVxB
LHwWP8QNq2O7JocXSFMxLIfPEaYFyX5qqdSuJcg9FBcGvvrgsgGyXel5LGTM5qTu
o4qzMKO1AG8N86nfSJAVkeJVKEKGh10yMajg/Jz7EofmDrjl/sT1Vm1AJdgf9T3v
oXBCEwTZLsRZZIlURQgESzhYGVLSBCO3Qu4cf31RDrNiDuhYIj0eEidV2BSjNmsg
LzwaK5rxES9841BZOmcfI3kVHca3QQJuwFKlwMjtj/aWLHV40Y9Czk+pv/ydVLQj
CZZwPbC531afmwNMye5808dN/3fZfWZzoQFPvpKJGFJN40kR8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdNV+0J51hyMg94xsYulCKvm7SlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDdhODI1MTYtOGUwZC0z
YTY2LWIwNDEtZWNmNmE4MzgwYWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGy7inRhGufNJOxUT1dV6ik7Mo3SAoA5Fdefmt8ph8WMeIj78Qe76ve/
O992uTB2dTncomNjKRc5l3wleIEucXpA/micGWws65Ej/AI938+pI8QRWVgcA3CT
4nnZ+Fq5BGP5kJOQ0xsk+S0j0GYPbABiQJx7BXaW/jViH3F2CkqJOO49hG3eqcLo
6poGNMrTGkjGCJXQhiwTnFAfv+tjBaPrGyiDxd4dCN95/gyO9bjmwPbJ/cC9Wrys
39UYLsajucfEfX+EO/hHcjd6Li7xxRCrM4N70Pc8WSMK/Gejw6D9MhuLFObod2Yo
jkW3uVKWbN0MgeDgYx27mh0wvfZqiQg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:38 2025 by rpki-client