Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dfc86871-8cb0-3e1c-9b02-3cfef6c95980.roa
File: dfc86871-8cb0-3e1c-9b02-3cfef6c95980.roa (raw, json)
Hash identifier: oQ2x2o3c9eH99p1OFORQ0Ke4t0j8bGUzZo3AwxLzzEQ=
Subject key identifier: 45:28:5E:D7:B0:AB:6B:DD:03:8D:F7:0B:DE:AC:8C:8D:BE:18:8A:E4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489220EA56682FE0882F5AF1E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dfc86871-8cb0-3e1c-9b02-3cfef6c95980.roa
Signing time: Fri 17 Jan 2025 04:21:14 +0000
ROA not before: Fri 17 Jan 2025 04:21:14 +0000
ROA not after: Thu 17 Apr 2025 03:21:14 +0000
asID: 214025
IP address blocks: 104.243.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:92:20:ea:56:68:2f:e0:88:2f:5a:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 17 04:21:14 2025 GMT
Not After : Apr 17 03:21:14 2025 GMT
Subject: CN=40c5ae95-7833-4fc4-ad2b-03b83db61f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:2a:43:16:72:a9:b0:8e:b8:77:15:85:ca:
fa:4a:3c:bb:2b:5a:2a:02:5e:b1:64:1a:7d:c7:5e:
dc:4a:af:d6:ed:24:c7:06:18:f9:82:ab:b5:a7:f7:
bf:a4:3a:1d:7d:76:04:74:2a:db:dd:a0:8b:9f:28:
6f:6c:e9:fc:36:64:3e:f8:db:d6:c6:b7:eb:16:38:
72:f8:aa:85:f8:42:5f:73:2a:b3:eb:9a:c3:1f:b5:
e3:59:95:14:30:9c:c8:82:91:bd:79:4a:d1:8c:62:
06:f1:ab:8b:88:7c:cb:34:6b:2b:d1:6a:72:74:b5:
00:c3:87:c8:43:12:f6:db:50:35:7c:8a:cb:1c:0e:
07:9b:c4:ed:35:18:ae:08:4f:01:fc:c1:78:e5:fc:
6d:3a:4c:cd:fe:00:a1:ae:b4:16:b7:71:31:9e:ea:
96:c8:69:0b:a4:b2:4b:30:53:3f:a9:b8:2c:09:88:
06:6a:1b:7d:4d:b2:ab:0c:d9:b7:ce:58:5b:67:4b:
d0:4a:f5:a4:91:6b:9e:43:bd:cf:4e:d5:fc:47:e3:
51:4f:62:4d:e6:a7:96:3a:d5:f8:4e:04:c9:36:99:
d8:05:5b:84:71:dc:94:a9:0b:a3:92:83:37:da:11:
6a:db:9b:4b:a1:48:10:a3:c3:74:1e:95:d5:cd:f5:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:5E:D7:B0:AB:6B:DD:03:8D:F7:0B:DE:AC:8C:8D:BE:18:8A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dfc86871-8cb0-3e1c-9b02-3cfef6c95980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:2a:88:40:a8:4c:14:23:71:1f:60:2d:ab:5e:9c:14:e6:39:
07:79:07:0f:03:a9:d9:89:92:a8:83:c4:c9:2d:46:10:07:d1:
0d:39:cc:be:99:ee:0f:8d:c2:c7:16:69:9c:0f:83:74:19:ea:
dc:94:98:88:3f:f0:23:5a:79:7c:34:1d:d3:31:ca:8d:ea:a4:
0b:52:e9:55:b5:af:3e:5c:eb:83:27:43:2d:e5:4c:cf:65:72:
43:66:f4:3c:90:08:bb:a9:80:e7:35:9a:57:62:f9:6b:2d:05:
7c:a6:1d:4b:70:b9:e4:83:0f:8a:13:3c:27:d3:5e:db:a9:c3:
32:a5:f7:04:4b:e5:46:f3:70:99:f0:0d:68:e6:38:35:cc:23:
af:7a:4e:44:57:f2:37:53:f4:3f:7b:b5:51:9e:06:97:a1:66:
98:58:9b:bc:ae:0e:f6:22:91:3b:ff:64:47:77:88:a4:f6:81:
49:9b:49:01:c9:31:e6:ec:89:48:74:b4:bd:0b:83:dc:5d:3d:
22:ec:e2:f2:49:cc:db:03:ab:63:c7:b5:68:c8:de:3f:52:e1:
e8:bb:0e:0c:40:be:b8:f4:9d:77:b3:cc:56:1e:12:e4:00:b2:
6a:7b:1d:c6:96:37:f7:e3:b5:02:b3:03:3b:7f:d9:82:66:b2:
bc:98:97:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiSIOpWaC/giC9a8eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDExNzA0MjExNFoXDTI1MDQxNzAzMjExNFowLzEtMCsGA1UEAxMk
NDBjNWFlOTUtNzgzMy00ZmM0LWFkMmItMDNiODNkYjYxZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP8qQxZyqbCOuHcVhcr6Sjy7K1oqAl6xZBp9
x17cSq/W7STHBhj5gqu1p/e/pDodfXYEdCrb3aCLnyhvbOn8NmQ++NvWxrfrFjhy
+KqF+EJfcyqz65rDH7XjWZUUMJzIgpG9eUrRjGIG8auLiHzLNGsr0WpydLUAw4fI
QxL221A1fIrLHA4Hm8TtNRiuCE8B/MF45fxtOkzN/gChrrQWt3ExnuqWyGkLpLJL
MFM/qbgsCYgGaht9TbKrDNm3zlhbZ0vQSvWkkWueQ73PTtX8R+NRT2JN5qeWOtX4
TgTJNpnYBVuEcdyUqQujkoM32hFq25tLoUgQo8N0HpXVzfXv5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUoXtewq2vdA433C96sjI2+GIrkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGZjODY4NzEtOGNiMC0z
ZTFjLTliMDItM2NmZWY2Yzk1OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEqiECoTBQjcR9gLatenBTmOQd5Bw8DqdmJkqiDxMktRhAH0Q05zL6Z
7g+NwscWaZwPg3QZ6tyUmIg/8CNaeXw0HdMxyo3qpAtS6VW1rz5c64MnQy3lTM9l
ckNm9DyQCLupgOc1mldi+WstBXymHUtwueSDD4oTPCfTXtupwzKl9wRL5UbzcJnw
DWjmODXMI696TkRX8jdT9D97tVGeBpehZphYm7yuDvYikTv/ZEd3iKT2gUmbSQHJ
MebsiUh0tL0Lg9xdPSLs4vJJzNsDq2PHtWjI3j9S4ei7DgxAvrj0nXezzFYeEuQA
smp7HcaWN/fjtQKzAzt/2YJmsryYlwo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:44 2025 by rpki-client