Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa
File: af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa (raw, json)
Hash identifier: aLGndukcWGilxIYBN3GGiB+mPAwvNR1KE4L2CL4imxw=
Subject key identifier: BB:E2:BC:25:1C:C2:E8:2F:28:18:0D:37:2F:B3:F8:27:76:FC:8A:46
Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial: 010D0C9F432858487A208A5EB9A438A2C75F9B80
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20303
IP address blocks: 104.251.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8a:5e:b9:a4:38:a2:c7:5f:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=e600a719-88ce-4512-a2ea-4003c1edda08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:40:f8:de:17:76:fd:a1:50:60:4a:67:09:
37:e0:ce:79:89:7d:c4:8f:58:d9:23:9f:c6:9c:07:
a9:0c:e9:6b:9e:19:24:f8:90:95:53:13:81:08:31:
fa:19:34:46:69:b6:fc:23:96:86:62:3a:82:37:57:
36:6a:09:89:60:af:3d:3c:74:99:7c:40:2e:32:59:
5f:09:6c:7d:e9:1f:0c:a4:69:3c:ce:6f:7a:a2:7d:
6c:7c:40:f3:f9:35:5a:20:e9:cd:6b:89:cb:fd:4a:
b0:7f:31:77:bb:9c:cc:ff:63:4d:71:79:d7:aa:5c:
51:eb:93:76:ff:50:c6:a2:e1:12:36:ad:f2:ab:ea:
c8:eb:ec:1d:70:5e:60:88:05:a5:bc:0b:28:bc:ac:
c6:b0:71:4b:98:39:56:03:46:55:ca:b3:d1:95:0f:
eb:25:d4:60:4c:07:92:a2:bb:86:cb:7f:b7:82:70:
25:fe:b0:03:b6:25:5c:1a:c8:9c:ba:d3:e7:7c:7c:
31:43:fa:cb:2a:70:e2:53:83:95:90:19:c1:69:17:
ea:42:74:46:9f:19:91:35:5d:15:0f:66:d0:42:60:
c1:2e:39:b8:c4:a8:99:b6:3b:88:13:4a:df:60:f5:
c0:07:96:a6:58:73:cc:b0:cd:9c:77:3c:0c:af:3b:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:BC:25:1C:C2:E8:2F:28:18:0D:37:2F:B3:F8:27:76:FC:8A:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
X509v3 Authority Key Identifier:
keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:bd:d4:f1:b6:73:e1:5b:e1:5f:49:54:0b:4f:e4:19:d2:56:
c6:7d:d4:c2:c8:37:0c:cd:00:a6:f7:b6:f3:ba:07:ac:89:55:
1d:49:6f:e4:11:90:08:2b:28:d4:46:0f:c1:dd:02:23:0a:b2:
cf:ac:d2:05:93:c7:03:37:26:0c:7d:15:43:44:ef:5b:6f:07:
e5:22:ad:34:e5:b1:ae:41:ae:6d:51:b9:f5:b3:63:4e:8d:8d:
2e:89:84:ec:90:ef:d2:48:d1:99:7f:f0:9d:cd:0a:f9:0a:60:
11:0b:5f:6e:32:de:05:16:22:ee:4e:bf:98:a4:12:6d:9f:16:
a2:ea:2f:55:14:75:4a:18:29:f5:ea:a7:7e:60:90:db:b2:58:
92:0e:13:d8:88:9e:79:83:6d:1d:cd:8d:ea:1b:92:9d:39:34:
7e:f3:75:83:92:29:f0:90:e8:b4:be:38:78:54:a4:99:65:6d:
17:7a:35:5c:f9:3c:4d:0e:ec:06:04:6e:6e:8f:82:de:2d:b7:
f4:09:e0:26:00:61:d4:4b:7d:b3:25:90:70:00:dd:f2:e1:6d:
b9:89:f1:d0:7a:cd:37:40:98:c4:e6:da:18:eb:5f:18:a8:a7:
ac:49:d6:d1:43:fa:57:c4:6a:00:3d:c6:da:2b:e0:60:c7:c4:
20:1b:d5:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIpeuaQ4osdfm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1
NWVmMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ZTYwMGE3MTktODhjZS00NTEyLWEyZWEtNDAwM2MxZWRkYTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrNA+N4Xdv2hUGBKZwk34M55iX3Ej1jZI5/G
nAepDOlrnhkk+JCVUxOBCDH6GTRGabb8I5aGYjqCN1c2agmJYK89PHSZfEAuMllf
CWx96R8MpGk8zm96on1sfEDz+TVaIOnNa4nL/UqwfzF3u5zM/2NNcXnXqlxR65N2
/1DGouESNq3yq+rI6+wdcF5giAWlvAsovKzGsHFLmDlWA0ZVyrPRlQ/rJdRgTAeS
oruGy3+3gnAl/rADtiVcGsicutPnfHwxQ/rLKnDiU4OVkBnBaRfqQnRGnxmRNV0V
D2bQQmDBLjm4xKiZtjuIE0rfYPXAB5amWHPMsM2cdzwMrzuiTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvivCUcwugvKBgNNy+z+Cd2/IpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy
ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvYWY4ZDg0ZmEtYmE2My0z
ZWI5LTk3YzEtY2E0M2UxZWVhMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll
MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm
NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm
MjUwZjU1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAi91PG2c+Fb4V9JVAtP5BnSVsZ91MLINwzNAKb3tvO6B6yJVR1Jb+QR
kAgrKNRGD8HdAiMKss+s0gWTxwM3Jgx9FUNE71tvB+UirTTlsa5Brm1RufWzY06N
jS6JhOyQ79JI0Zl/8J3NCvkKYBELX24y3gUWIu5Ov5ikEm2fFqLqL1UUdUoYKfXq
p35gkNuyWJIOE9iInnmDbR3Njeobkp05NH7zdYOSKfCQ6LS+OHhUpJllbRd6NVz5
PE0O7AYEbm6Pgt4tt/QJ4CYAYdRLfbMlkHAA3fLhbbmJ8dB6zTdAmMTm2hjrXxio
p6xJ1tFD+lfEagA9xtor4GDHxCAb1Tk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:19 2025 by rpki-client