Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa
File: 11f297f1-e2e1-3d90-99a4-085567eae50e.roa (raw, json)
Hash identifier: gbzRS9tQE8d2p0uiJuorpteuiT7+RiEHvnfaY1/GoCQ=
Subject key identifier: 5E:AA:EE:65:B0:C0:79:87:A0:F5:11:5B:D8:76:F3:9F:8C:75:65:12
Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial: 010D0C9F43285848F4F6A23830EB1704FCA2B4C0
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 201814
IP address blocks: 104.245.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a2:38:30:eb:17:04:fc:a2:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d854a291-cda7-464d-91fd-1159b61737fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:7b:f3:b5:9d:fe:1e:75:4e:b6:d6:2a:87:
fb:8b:2c:a3:f0:98:c4:37:3b:6a:52:b2:86:5c:4f:
c5:42:ac:bb:a9:4a:f4:8c:03:70:28:14:e5:0f:82:
89:62:94:c3:6b:65:f3:34:f0:3f:0d:48:2e:dd:17:
e2:f2:79:1e:d6:27:05:f5:43:c9:f8:d1:6f:3c:84:
cd:2b:bc:96:24:8a:13:a2:99:0e:de:06:52:ca:81:
22:e3:90:2c:7f:4d:72:07:9d:3e:bf:51:28:1e:70:
18:2e:26:f4:c1:af:6d:0d:58:5b:1f:8a:24:65:14:
95:60:a6:b4:c3:8a:cd:6a:33:40:3c:f8:cd:93:9d:
7f:d3:cc:f3:7d:02:34:90:62:80:88:5b:f6:bd:46:
15:1b:b5:c3:7b:36:2b:5d:d9:e3:f3:26:61:f7:1d:
28:0e:13:35:bb:4b:c2:9e:a1:f5:56:13:df:d6:82:
4a:70:07:77:69:e9:ce:a9:e1:1d:ef:50:fe:e4:6a:
22:60:b9:a5:6e:14:9c:71:41:00:e7:7f:81:63:00:
33:8f:ed:85:76:41:e5:9f:56:18:fd:ad:79:f1:22:
99:13:8c:28:f9:92:5f:c5:30:96:99:8a:0a:37:45:
b2:75:01:7c:4f:d2:58:22:f6:7e:8d:2b:85:b1:b0:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:EE:65:B0:C0:79:87:A0:F5:11:5B:D8:76:F3:9F:8C:75:65:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
X509v3 Authority Key Identifier:
keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:17:51:e7:e1:87:67:52:00:24:6d:fa:78:09:2f:e0:8e:3b:
64:18:a4:61:d4:a2:4a:76:59:9b:e4:9b:65:13:62:50:30:7e:
12:0c:f2:00:61:22:71:2e:1b:54:cf:44:7c:9f:6c:c7:8e:58:
b1:df:e2:40:e4:11:87:c0:7c:4e:2d:9e:6f:a1:5f:32:ef:4f:
9b:ad:f7:cd:d8:5c:c3:b3:82:58:5f:42:50:53:e0:aa:e4:a6:
e0:03:74:cd:ce:e2:ca:ef:24:c8:32:a4:1e:09:1e:a6:42:b1:
0b:05:e3:42:d1:a2:59:f6:9b:7f:ee:41:0b:86:19:a3:cf:67:
38:32:2b:82:ef:dc:86:13:cf:23:4a:ae:58:70:e7:91:93:f2:
88:f2:61:4d:67:dd:3f:6d:04:ab:9e:0f:e2:ea:37:e1:49:3a:
52:f8:a8:a1:9a:6d:4b:69:2f:4a:e3:6c:f4:45:ce:f2:99:87:
e1:7a:4c:59:65:f9:f5:6c:08:04:02:67:21:70:27:c4:23:72:
95:8e:a7:37:23:27:b9:7a:f6:26:6a:5b:e5:cc:c3:f6:fa:72:
7d:89:14:90:81:ab:f6:d5:6a:e1:aa:41:49:3b:a3:fb:e2:a4:
44:60:03:ed:70:10:43:40:60:cb:9a:37:c8:d4:72:ab:4b:3a:
d8:3e:e7:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qI4MOsXBPyitMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky
Yjg2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZDg1NGEyOTEtY2RhNy00NjRkLTkxZmQtMTE1OWI2MTczN2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxot787Wd/h51TrbWKof7iyyj8JjENztqUrKG
XE/FQqy7qUr0jANwKBTlD4KJYpTDa2XzNPA/DUgu3Rfi8nke1icF9UPJ+NFvPITN
K7yWJIoTopkO3gZSyoEi45Asf01yB50+v1EoHnAYLib0wa9tDVhbH4okZRSVYKa0
w4rNajNAPPjNk51/08zzfQI0kGKAiFv2vUYVG7XDezYrXdnj8yZh9x0oDhM1u0vC
nqH1VhPf1oJKcAd3aenOqeEd71D+5GoiYLmlbhSccUEA53+BYwAzj+2FdkHln1YY
/a158SKZE4wo+ZJfxTCWmYoKN0WydQF8T9JYIvZ+jSuFsbAdsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6q7mWwwHmHoPURW9h285+MdWUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh
YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMTFmMjk3ZjEtZTJlMS0z
ZDkwLTk5YTQtMDg1NTY3ZWFlNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5
YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5
MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy
Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPX1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMAXUefhh2dSACRt+ngJL+COO2QYpGHUokp2WZvkm2UTYlAwfhIM8gBh
InEuG1TPRHyfbMeOWLHf4kDkEYfAfE4tnm+hXzLvT5ut983YXMOzglhfQlBT4Krk
puADdM3O4srvJMgypB4JHqZCsQsF40LRoln2m3/uQQuGGaPPZzgyK4Lv3IYTzyNK
rlhw55GT8ojyYU1n3T9tBKueD+LqN+FJOlL4qKGabUtpL0rjbPRFzvKZh+F6TFll
+fVsCAQCZyFwJ8QjcpWOpzcjJ7l69iZqW+XMw/b6cn2JFJCBq/bVauGqQUk7o/vi
pERgA+1wEENAYMuaN8jUcqtLOtg+590=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:49 2025 by rpki-client