Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88874443-cba6-3b78-8c2b-32d340791de0.roa
File: 88874443-cba6-3b78-8c2b-32d340791de0.roa (raw, json)
Hash identifier: GdoryD7p4uPu7AUkCB/bXKSh6hoVYLcSvQVuS1lQhDY=
Subject key identifier: 62:FE:81:EA:94:09:EE:A7:7D:5C:4F:DA:77:F0:DD:23:1E:CC:F3:25
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBD7CDC6BB1760175FA500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88874443-cba6-3b78-8c2b-32d340791de0.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.155.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d7:cd:c6:bb:17:60:17:5f:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=2a60f479-8cbb-4658-98fc-d60ae52036f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:c8:71:84:b4:ff:ac:33:69:f9:7c:8a:a7:
fe:74:b8:b3:b9:78:df:de:40:9d:1c:f2:ba:1e:f4:
eb:01:0f:38:50:27:0a:3d:cc:4e:dc:fe:52:32:60:
5a:e1:20:8d:72:fd:3b:d2:8e:3e:a3:17:ce:62:d2:
0c:78:1d:1f:1b:85:e9:bf:ab:03:30:8c:f5:1f:45:
49:a3:e3:91:e1:64:1e:18:9e:75:b8:07:c8:4e:02:
19:ea:c7:1d:b4:8b:89:cf:1c:a5:aa:0a:bb:fb:e6:
5b:85:ec:52:c8:61:b6:cd:96:09:a6:b6:8f:29:c9:
0d:00:35:c9:e2:be:28:7d:1a:6f:d0:0b:d8:ee:1d:
cf:52:30:a1:78:4f:37:3d:85:be:7a:d0:ba:48:9a:
98:78:a9:98:26:94:fc:47:9c:fb:6d:99:9d:a0:c9:
27:79:a8:61:58:c7:ac:84:5b:8d:c8:9d:02:98:50:
61:94:07:8f:56:45:31:c6:f3:48:51:43:28:ef:db:
07:df:b1:4f:ef:ad:3a:97:76:55:ee:12:c6:41:1f:
89:e8:8f:c1:03:1d:3b:18:ae:1a:b5:ee:ac:63:f0:
31:e4:e5:ed:2f:cd:53:a3:64:00:29:9c:bf:a1:d1:
24:35:9b:db:bb:74:c0:21:76:cb:5b:86:4d:9f:e2:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:81:EA:94:09:EE:A7:7D:5C:4F:DA:77:F0:DD:23:1E:CC:F3:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88874443-cba6-3b78-8c2b-32d340791de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:02:3a:5a:2c:3a:ac:b9:05:34:4a:d7:32:0e:85:8a:ec:0a:
76:4a:b6:70:8e:f3:74:a9:21:c3:30:44:d7:9f:1d:8a:73:f9:
8f:54:b4:fe:31:a3:ef:85:a9:7a:3c:5b:28:fa:5c:4e:6c:f6:
43:76:3f:7f:13:ae:cf:80:89:f3:71:71:31:e7:37:a8:2d:50:
6f:3b:77:c4:9e:28:86:86:15:69:d7:97:13:a2:af:d8:d8:8f:
b8:79:12:c6:9d:1b:0b:79:04:80:bb:96:31:2c:d0:85:e2:e8:
6e:b6:ba:a1:be:df:0b:f9:2c:cb:79:6d:43:d1:69:05:17:28:
9e:a6:ce:46:c1:8c:66:f1:ce:e5:72:74:36:d0:dc:4d:07:6e:
0c:0e:a5:00:8d:07:78:d4:00:09:2d:06:c8:95:8e:db:f6:4a:
43:c3:56:4c:46:9b:28:09:fc:60:2a:1b:1c:91:3c:59:b9:52:
73:aa:30:0b:b0:ef:60:0d:35:9c:bb:f3:11:86:16:37:07:82:
f4:bb:28:1e:81:db:c6:77:0d:b7:df:5e:78:62:99:d0:82:53:
a6:84:dd:b8:3e:3b:ba:e9:25:9a:a7:19:de:e1:ef:74:1a:20:
8c:00:ce:fa:69:33:7e:38:7e:3c:4a:81:97:5a:23:46:b6:a0:
31:95:1b:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69fNxrsXYBdfpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MmE2MGY0NzktOGNiYi00NjU4LTk4ZmMtZDYwYWU1MjAzNmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK7IcYS0/6wzafl8iqf+dLizuXjf3kCdHPK6
HvTrAQ84UCcKPcxO3P5SMmBa4SCNcv070o4+oxfOYtIMeB0fG4Xpv6sDMIz1H0VJ
o+OR4WQeGJ51uAfITgIZ6scdtIuJzxylqgq7++ZbhexSyGG2zZYJpraPKckNADXJ
4r4ofRpv0AvY7h3PUjCheE83PYW+etC6SJqYeKmYJpT8R5z7bZmdoMkneahhWMes
hFuNyJ0CmFBhlAePVkUxxvNIUUMo79sH37FP7606l3ZV7hLGQR+J6I/BAx07GK4a
te6sY/Ax5OXtL81To2QAKZy/odEkNZvbu3TAIXbLW4ZNn+IemwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGL+geqUCe6nfVxP2nfw3SMezPMlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODg4NzQ0NDMtY2JhNi0z
Yjc4LThjMmItMzJkMzQwNzkxZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcCOlosOqy5BTRK1zIOhYrsCnZKtnCO83SpIcMwRNefHYpz+Y9UtP4x
o++FqXo8Wyj6XE5s9kN2P38Trs+AifNxcTHnN6gtUG87d8SeKIaGFWnXlxOir9jY
j7h5EsadGwt5BIC7ljEs0IXi6G62uqG+3wv5LMt5bUPRaQUXKJ6mzkbBjGbxzuVy
dDbQ3E0HbgwOpQCNB3jUAAktBsiVjtv2SkPDVkxGmygJ/GAqGxyRPFm5UnOqMAuw
72ANNZy78xGGFjcHgvS7KB6B28Z3DbffXnhimdCCU6aE3bg+O7rpJZqnGd7h73Qa
IIwAzvppM344fjxKgZdaI0a2oDGVGxQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:06 2025 by rpki-client