
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa
File: 0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa (raw, json)
Hash identifier: ETlIZw0iHcIB5M6DgxX/J3cPmSGVZFUGD7VyOaHL9Xg=
Subject key identifier: FE:EE:00:9A:C4:AC:5E:A6:A5:22:3C:B8:02:D6:F3:4E:0A:90:0B:02
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBACCEED14807D68606CE8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.154.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ac:ce:ed:14:80:7d:68:60:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=10854d8d-2da0-43a7-bbb4-40dcf6a7a963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:65:fb:d2:d1:c5:7c:88:1f:f1:3e:b0:98:
80:aa:bf:b0:42:84:42:64:4b:f4:c4:c0:a8:e8:58:
45:63:7c:bb:8a:c3:a0:bd:68:cd:1a:22:69:7b:47:
a6:9f:cf:63:06:be:75:d3:9f:cf:2b:d2:7a:e2:26:
a9:43:66:76:26:c8:e3:a3:c3:6f:b7:c4:3b:cd:1d:
9c:47:0c:70:20:7f:9d:fd:50:61:59:2b:58:1a:02:
38:04:48:73:64:f9:e9:56:e4:42:9c:60:f9:d5:ed:
07:48:4c:8e:eb:04:33:98:c7:21:dd:4b:af:c5:29:
15:34:88:18:c5:fd:13:4e:50:2f:2d:ec:86:02:7a:
8a:e0:99:81:71:e5:6b:76:ac:48:02:ff:4f:50:5e:
0b:95:6c:af:6c:db:9c:f8:b6:3a:89:76:05:3b:10:
79:1f:39:d3:64:d4:e6:d6:61:6b:e7:e0:c7:db:46:
4a:a5:96:72:8f:65:3b:e2:59:6e:a0:31:c1:f9:54:
6a:83:58:c7:06:f6:51:f4:e6:d3:ee:ae:c1:ae:87:
e2:17:70:48:a8:b1:d9:84:01:fe:2b:ef:f7:ce:c9:
71:8f:fe:18:54:1f:f6:e3:59:d1:43:b8:cd:ea:1e:
2b:db:0c:18:3b:e1:b3:6f:21:61:f8:f4:d8:e1:fb:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:00:9A:C4:AC:5E:A6:A5:22:3C:B8:02:D6:F3:4E:0A:90:0B:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:62:24:4a:15:fc:34:10:87:71:a5:0f:6b:05:cc:af:f5:b4:
18:a4:03:53:47:e7:e6:3a:4b:ab:d7:90:11:ea:c0:6b:0a:64:
2a:80:fe:64:a6:87:22:ac:8d:af:14:71:19:2d:3c:a9:d8:68:
ce:99:24:5a:73:2f:3a:fe:20:00:32:e9:01:5c:fe:b3:0c:8a:
18:22:ed:fb:5a:af:33:99:1e:d8:d0:01:ec:f8:43:52:ae:5d:
bd:bd:d8:1c:a7:74:18:15:66:d9:48:37:4c:5e:43:b0:31:9d:
c9:9d:f3:19:78:53:5a:55:60:ce:8d:75:3e:b1:59:64:dd:91:
95:02:80:70:10:34:c8:66:c6:d8:3a:4a:2c:02:6c:b9:f9:e0:
02:b0:f5:0b:2c:ad:69:92:ed:b3:25:38:79:9e:73:36:df:e1:
c0:88:bc:c0:35:c0:27:55:a5:eb:7e:27:07:b3:da:dd:a4:ef:
41:80:2c:4d:6f:b1:12:0b:33:f2:f5:8c:52:c1:d8:53:5b:e5:
42:6d:d6:78:ef:94:26:f3:c1:2c:ab:04:e6:6f:d0:c6:48:b0:
d7:76:87:66:d7:da:5b:f8:ed:74:9b:7d:3e:ed:cd:0a:50:4c:
17:26:fa:01:7e:b3:7b:20:71:3a:26:6e:12:46:4d:69:ea:81:
84:1d:38:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66zO7RSAfWhgbOgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MTA4NTRkOGQtMmRhMC00M2E3LWJiYjQtNDBkY2Y2YTdhOTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuZl+9LRxXyIH/E+sJiAqr+wQoRCZEv0xMCo
6FhFY3y7isOgvWjNGiJpe0emn89jBr5105/PK9J64iapQ2Z2Jsjjo8Nvt8Q7zR2c
RwxwIH+d/VBhWStYGgI4BEhzZPnpVuRCnGD51e0HSEyO6wQzmMch3UuvxSkVNIgY
xf0TTlAvLeyGAnqK4JmBceVrdqxIAv9PUF4LlWyvbNuc+LY6iXYFOxB5HznTZNTm
1mFr5+DH20ZKpZZyj2U74lluoDHB+VRqg1jHBvZR9ObT7q7BrofiF3BIqLHZhAH+
K+/3zslxj/4YVB/241nRQ7jN6h4r2wwYO+GzbyFh+PTY4furaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7uAJrErF6mpSI8uALW804KkAsCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQzZDYzY2EtNmE3YS0z
ZWFjLWI4ZmMtN2QzNjI4NTE0NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANiJEoV/DQQh3GlD2sFzK/1tBikA1NH5+Y6S6vXkBHqwGsKZCqA/mSm
hyKsja8UcRktPKnYaM6ZJFpzLzr+IAAy6QFc/rMMihgi7ftarzOZHtjQAez4Q1Ku
Xb292ByndBgVZtlIN0xeQ7Axncmd8xl4U1pVYM6NdT6xWWTdkZUCgHAQNMhmxtg6
SiwCbLn54AKw9QssrWmS7bMlOHmeczbf4cCIvMA1wCdVpet+Jwez2t2k70GALE1v
sRILM/L1jFLB2FNb5UJt1njvlCbzwSyrBOZv0MZIsNd2h2bX2lv47XSbfT7tzQpQ
TBcm+gF+s3sgcTombhJGTWnqgYQdOAw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:34 2025 by rpki-client