Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa352bea-c7af-315a-86d7-abffc3b4ce27.roa
File: aa352bea-c7af-315a-86d7-abffc3b4ce27.roa (raw, json)
Hash identifier: YwSJgeRY7EOi5Mh05EIDchgWGmke+/tOfjmro9NMTFw=
Subject key identifier: 3E:94:7D:B6:FA:D4:D9:54:67:63:82:93:70:EE:53:99:E4:33:49:57
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858487ED38F5213F9E4D5E6C8DD00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa352bea-c7af-315a-86d7-abffc3b4ce27.roa
Signing time: Fri 10 Jan 2025 06:25:00 +0000
ROA not before: Fri 10 Jan 2025 06:25:00 +0000
ROA not after: Thu 10 Apr 2025 05:25:00 +0000
asID: 834
IP address blocks: 104.243.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:d3:8f:52:13:f9:e4:d5:e6:c8:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 10 06:25:00 2025 GMT
Not After : Apr 10 05:25:00 2025 GMT
Subject: CN=e07a5d28-dca6-42d5-9070-84ffd7f742f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:89:1c:94:25:05:c9:6b:2d:c7:0f:a6:88:
45:e7:72:8a:10:77:ae:f5:2b:9a:27:70:5c:2c:ec:
02:cf:95:f2:ac:70:2b:e3:35:16:31:69:3f:b6:4e:
fc:c8:28:2e:23:a8:65:e9:c4:52:df:31:e5:7a:05:
bd:29:33:1c:f8:b4:aa:26:6c:0c:fb:85:58:7c:b7:
f6:e7:20:61:c6:1f:a3:1d:a2:48:58:2d:0d:fb:20:
4a:10:2d:98:ee:12:c2:d7:05:9b:8e:e2:29:23:6c:
d5:f2:56:ab:2a:57:d7:8f:01:f9:05:de:0e:f1:06:
68:fc:c4:df:b3:6d:b7:c7:eb:77:20:d0:cc:11:92:
75:cf:63:d2:59:63:c3:47:3b:29:bd:24:06:8e:76:
e0:4d:ec:f0:ce:02:cf:8c:52:72:e8:c7:ca:e5:49:
8c:d9:cf:8a:bc:4d:50:be:19:21:f5:04:fb:59:d4:
53:0e:84:b4:64:0e:e8:47:2b:1e:d4:c6:ac:b0:8c:
27:c5:6d:f5:74:c5:7e:d7:00:82:c5:51:82:d1:26:
e6:09:ad:34:72:71:2a:ca:0a:1f:be:16:7f:4a:c0:
94:97:3c:1c:c5:36:02:8c:fc:f5:8d:a8:38:4f:79:
b5:fc:4f:f3:e4:86:1d:31:d6:55:81:7b:c5:9b:df:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:7D:B6:FA:D4:D9:54:67:63:82:93:70:EE:53:99:E4:33:49:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa352bea-c7af-315a-86d7-abffc3b4ce27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:cf:c3:09:50:fd:20:06:54:29:08:72:2b:8d:e9:47:04:41:
32:a0:8e:fe:06:62:6e:01:64:0d:72:ee:1b:c3:c1:10:09:70:
36:ff:1e:b2:8b:ed:1c:47:a2:35:91:4b:a1:e6:13:5d:eb:f9:
3d:24:09:75:54:07:7a:ce:cb:75:d8:7c:27:df:ff:79:e8:cb:
ce:f7:6b:4a:95:95:a1:4d:fa:08:5d:c7:ab:71:a3:47:a4:5f:
6d:3a:e1:c5:1d:03:f9:c4:ce:fa:4f:1e:79:c1:af:fb:65:ba:
c4:23:dc:df:be:b0:f5:ef:49:a4:a7:cd:5e:3f:c2:17:52:c3:
29:80:48:b3:b0:6e:9a:5d:5c:1d:fa:ef:07:ca:e4:c3:89:21:
08:77:ad:ad:1b:9e:28:f2:71:c5:d2:c0:0e:f0:55:fd:fd:f3:
17:54:90:f3:31:d3:0f:04:5f:09:3a:ad:8e:db:bd:47:6c:fe:
c7:a8:f2:02:3f:6e:7e:62:e9:25:bd:fe:c0:8a:d7:ba:6f:34:
4c:e3:fb:bd:6c:fd:70:12:5d:1f:6b:17:64:27:9c:9b:a7:da:
2a:f0:ee:69:d6:6d:2c:ec:4c:e8:6f:ce:04:13:67:73:3d:54:
8b:1d:85:78:3a:cf:e5:57:92:90:ec:41:76:3e:f2:3c:c3:d0:
15:f4:52:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+049SE/nk1ebI3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDExMDA2MjUwMFoXDTI1MDQxMDA1MjUwMFowLzEtMCsGA1UEAxMk
ZTA3YTVkMjgtZGNhNi00MmQ1LTkwNzAtODRmZmQ3Zjc0MmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNqJHJQlBclrLccPpohF53KKEHeu9SuaJ3Bc
LOwCz5XyrHAr4zUWMWk/tk78yCguI6hl6cRS3zHlegW9KTMc+LSqJmwM+4VYfLf2
5yBhxh+jHaJIWC0N+yBKEC2Y7hLC1wWbjuIpI2zV8larKlfXjwH5Bd4O8QZo/MTf
s223x+t3INDMEZJ1z2PSWWPDRzspvSQGjnbgTezwzgLPjFJy6MfK5UmM2c+KvE1Q
vhkh9QT7WdRTDoS0ZA7oRyse1MassIwnxW31dMV+1wCCxVGC0SbmCa00cnEqygof
vhZ/SsCUlzwcxTYCjPz1jag4T3m1/E/z5IYdMdZVgXvFm99svwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6Ufbb61NlUZ2OCk3DuU5nkM0lXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWEzNTJiZWEtYzdhZi0z
MTVhLTg2ZDctYWJmZmMzYjRjZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7PwwlQ/SAGVCkIciuN6UcEQTKgjv4GYm4BZA1y7hvDwRAJcDb/HrKL
7RxHojWRS6HmE13r+T0kCXVUB3rOy3XYfCff/3noy873a0qVlaFN+ghdx6txo0ek
X2064cUdA/nEzvpPHnnBr/tlusQj3N++sPXvSaSnzV4/whdSwymASLOwbppdXB36
7wfK5MOJIQh3ra0bnijyccXSwA7wVf398xdUkPMx0w8EXwk6rY7bvUds/seo8gI/
bn5i6SW9/sCK17pvNEzj+71s/XASXR9rF2QnnJun2irw7mnWbSzsTOhvzgQTZ3M9
VIsdhXg6z+VXkpDsQXY+8jzD0BX0Unk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:47 2025 by rpki-client