Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1401cd7a-df60-3f44-aec6-753188289ce0.roa
File: 1401cd7a-df60-3f44-aec6-753188289ce0.roa (raw, json)
Hash identifier: iLmJMfZVrcrrcEkPlFVR6ALvNJv+yrFdEUd+jgTGV4Q=
Subject key identifier: 67:84:86:DC:7A:5C:85:DB:99:36:EB:BC:57:CA:AF:7C:C7:7F:3E:A6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489220202133EA402E9BB7BA00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1401cd7a-df60-3f44-aec6-753188289ce0.roa
Signing time: Fri 17 Jan 2025 04:19:38 +0000
ROA not before: Fri 17 Jan 2025 04:19:38 +0000
ROA not after: Thu 17 Apr 2025 03:19:38 +0000
asID: 214654
IP address blocks: 104.243.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:92:20:20:21:33:ea:40:2e:9b:b7:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 17 04:19:38 2025 GMT
Not After : Apr 17 03:19:38 2025 GMT
Subject: CN=8f5719b2-5e88-4fbe-99ea-44c442f9defa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:3d:20:c6:23:46:e1:e3:a1:65:b5:0c:db:
9a:61:31:08:4d:13:bc:31:3b:61:af:16:b9:68:79:
86:53:f3:2f:97:79:49:18:64:3f:9d:58:f4:ac:4b:
20:06:75:7f:94:b4:29:c6:fa:69:6a:c8:d1:e9:8d:
a4:da:d4:b8:be:26:c6:fa:42:81:b6:76:39:59:4b:
f8:a8:75:83:50:e8:77:df:34:72:71:cf:6f:d6:48:
1f:58:31:32:84:05:54:1b:52:47:19:ac:aa:11:ff:
00:85:52:06:ad:84:c9:1e:5b:84:22:4e:b1:51:dd:
09:b5:91:9c:3e:53:e7:70:07:18:60:2c:2f:39:75:
e8:33:0d:ef:74:70:e3:ea:ca:25:2f:09:d2:9e:77:
13:1a:cd:90:f6:6d:04:f7:99:84:ba:94:e8:7d:25:
5c:24:8f:f7:04:bf:93:f7:3c:40:ec:55:39:39:8f:
7c:db:b8:c4:35:e9:ae:5f:b5:26:32:51:97:52:98:
e4:74:75:28:70:49:14:bd:c3:12:46:31:6c:ce:66:
e1:c2:18:c8:38:73:2f:66:4f:22:d6:72:9b:84:89:
bf:ac:cd:51:43:c3:71:9e:89:f0:1a:f8:0b:da:50:
eb:cf:c0:5e:2e:7c:db:16:3a:37:c5:ae:e7:d6:4c:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:86:DC:7A:5C:85:DB:99:36:EB:BC:57:CA:AF:7C:C7:7F:3E:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1401cd7a-df60-3f44-aec6-753188289ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:11:ef:25:e4:6d:58:13:be:b4:ee:24:ea:05:8f:24:28:b8:
a3:f5:16:4d:26:86:4e:ff:95:e8:dc:d3:60:1f:d1:9d:da:7b:
f4:8c:e4:a8:c9:5c:39:52:0b:aa:2a:23:68:e8:49:d4:16:0b:
f9:68:6e:83:d0:da:29:39:e6:3c:5f:ec:14:d0:3a:a7:04:ad:
a1:4c:ae:6d:09:cb:8c:ac:95:68:30:1c:32:9c:0d:c6:31:3d:
57:04:c0:8a:84:20:0c:2c:2a:34:f2:cd:1b:1e:a0:45:da:a6:
84:a5:57:b1:fa:b7:36:2d:4c:22:2a:19:14:48:43:77:42:97:
72:35:7b:0a:6a:f8:8c:06:e3:b5:62:2a:00:5d:e0:6a:8b:b8:
b9:a3:12:bd:f7:49:06:98:81:eb:b4:cb:99:11:bb:33:a4:3a:
e9:c1:88:f9:a1:98:e0:30:31:3c:7a:53:69:02:62:27:e5:03:
eb:bb:98:c9:a2:b5:5d:94:5b:40:fc:ab:78:05:5b:0f:cc:54:
59:20:e1:94:85:38:f0:20:77:9a:be:bf:04:be:ff:98:be:63:
1a:69:41:fa:e0:b1:3f:09:41:a7:a6:b1:01:77:3b:52:ed:3a:
e7:78:36:25:2e:cb:63:ec:2d:74:28:01:e3:65:ba:59:d6:cc:
c3:df:39:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiSICAhM+pALpu3ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDExNzA0MTkzOFoXDTI1MDQxNzAzMTkzOFowLzEtMCsGA1UEAxMk
OGY1NzE5YjItNWU4OC00ZmJlLTk5ZWEtNDRjNDQyZjlkZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRo9IMYjRuHjoWW1DNuaYTEITRO8MTthrxa5
aHmGU/Mvl3lJGGQ/nVj0rEsgBnV/lLQpxvppasjR6Y2k2tS4vibG+kKBtnY5WUv4
qHWDUOh33zRycc9v1kgfWDEyhAVUG1JHGayqEf8AhVIGrYTJHluEIk6xUd0JtZGc
PlPncAcYYCwvOXXoMw3vdHDj6solLwnSnncTGs2Q9m0E95mEupTofSVcJI/3BL+T
9zxA7FU5OY9827jENemuX7UmMlGXUpjkdHUocEkUvcMSRjFszmbhwhjIOHMvZk8i
1nKbhIm/rM1RQ8NxnonwGvgL2lDrz8BeLnzbFjo3xa7n1kzTxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeEhtx6XIXbmTbrvFfKr3zHfz6mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQwMWNkN2EtZGY2MC0z
ZjQ0LWFlYzYtNzUzMTg4Mjg5Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIR7yXkbVgTvrTuJOoFjyQouKP1Fk0mhk7/lejc02Af0Z3ae/SM5KjJ
XDlSC6oqI2joSdQWC/loboPQ2ik55jxf7BTQOqcEraFMrm0Jy4yslWgwHDKcDcYx
PVcEwIqEIAwsKjTyzRseoEXapoSlV7H6tzYtTCIqGRRIQ3dCl3I1ewpq+IwG47Vi
KgBd4GqLuLmjEr33SQaYgeu0y5kRuzOkOunBiPmhmOAwMTx6U2kCYiflA+u7mMmi
tV2UW0D8q3gFWw/MVFkg4ZSFOPAgd5q+vwS+/5i+YxppQfrgsT8JQaemsQF3O1Lt
Oud4NiUuy2PsLXQoAeNlulnWzMPfOfk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:00 2025 by rpki-client