Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa
File: 37fd18e6-5f92-35f1-adf9-ba09addc6047.roa (raw, json)
Hash identifier: n2Siosd4bz7hzFZj9xiCxNJcjRynhwA7SAJnTYerqlI=
Subject key identifier: 01:C0:A8:0F:8E:22:64:86:9E:7D:42:68:D6:1A:C6:4B:54:2D:CC:6C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849287E5A1A4503D55092FB0EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 104.70.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:5a:1a:45:03:d5:50:92:fb:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=3107e7b0-ed49-476b-b4c1-8b019408d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:f5:54:e1:6b:86:31:ef:09:8b:4f:6d:cd:
c8:ec:14:1d:87:34:46:d4:ef:ac:a9:f8:13:f5:7a:
64:bc:09:31:de:46:29:eb:25:bb:39:19:40:89:57:
9e:70:d3:f6:91:6a:2e:87:fa:43:35:f1:1e:a7:16:
41:e3:0b:a1:50:0a:0f:c8:b9:54:ab:59:c5:da:8c:
37:e8:c6:05:de:32:c6:6e:0a:0b:c1:17:89:40:d1:
7b:3d:8f:59:20:68:ff:e8:8b:6e:00:35:e2:79:e0:
e4:21:0a:03:5a:00:61:d3:f4:db:7b:21:82:c0:46:
ce:4c:ed:eb:26:71:9a:7e:ef:14:51:6d:d9:06:88:
0d:e2:36:f5:70:98:3a:02:ce:2d:fd:4e:19:3c:6a:
2d:8f:ea:a6:39:1b:4c:bf:03:1a:9e:e7:bc:d2:e3:
5c:4d:2a:de:4b:7e:14:57:28:16:3c:82:d9:dc:11:
c7:a0:44:d4:36:a1:65:33:e5:be:6e:18:d2:bf:bd:
5a:ef:a3:ed:9d:a1:d1:0d:01:59:2d:b9:6a:38:ef:
ae:76:eb:a8:c9:6c:b9:18:0d:dd:99:83:03:1c:58:
d6:cd:cf:42:36:5c:df:81:97:d6:78:8c:22:4b:0e:
67:98:da:08:07:f1:45:38:9f:89:00:98:57:da:f7:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C0:A8:0F:8E:22:64:86:9E:7D:42:68:D6:1A:C6:4B:54:2D:CC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37fd18e6-5f92-35f1-adf9-ba09addc6047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:2c:a7:f9:11:78:7c:d6:41:8b:7e:cd:eb:63:31:28:25:b9:
0c:14:f7:78:5d:19:c2:28:4c:fd:42:86:e3:b4:52:25:7b:c7:
73:f7:6e:e2:6c:71:7a:85:4b:57:5b:de:28:e3:9c:5e:83:43:
b6:5e:c2:38:cc:6b:c6:89:d2:8e:00:a6:b1:26:3a:19:e5:2c:
b8:89:eb:4a:9c:76:c1:bf:2d:67:c7:10:db:ef:59:15:0a:59:
c9:89:59:c7:31:9b:5d:4e:72:b1:c3:f2:25:b4:c0:48:aa:0f:
08:09:27:95:11:c2:a3:45:5f:d3:95:24:54:d0:00:8d:29:cb:
52:bf:74:ff:a2:35:b8:ce:df:a4:39:50:17:22:ed:b6:08:15:
95:da:04:66:24:e2:88:d6:a3:4d:23:22:12:69:66:b8:21:95:
70:bb:f6:4a:bd:02:d3:60:ed:98:95:dd:0a:3a:dc:20:ce:e2:
9a:ff:94:9d:27:c6:0a:de:33:18:f0:7a:77:50:8e:da:61:65:
f6:1b:a9:aa:40:ad:e1:32:3a:c1:dc:73:58:f7:5d:c6:9b:6c:
a5:f5:87:b4:55:fe:e9:23:37:56:18:ee:e7:f3:02:95:20:37:
a3:96:4d:f6:bd:ab:3b:cc:cf:39:35:4c:41:ac:3f:40:ec:6b:
88:f1:c6:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofloaRQPVUJL7DsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MzEwN2U3YjAtZWQ0OS00NzZiLWI0YzEtOGIwMTk0MDhkODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUb1VOFrhjHvCYtPbc3I7BQdhzRG1O+sqfgT
9XpkvAkx3kYp6yW7ORlAiVeecNP2kWouh/pDNfEepxZB4wuhUAoPyLlUq1nF2ow3
6MYF3jLGbgoLwReJQNF7PY9ZIGj/6ItuADXieeDkIQoDWgBh0/TbeyGCwEbOTO3r
JnGafu8UUW3ZBogN4jb1cJg6As4t/U4ZPGotj+qmORtMvwManue80uNcTSreS34U
VygWPILZ3BHHoETUNqFlM+W+bhjSv71a76PtnaHRDQFZLblqOO+uduuoyWy5GA3d
mYMDHFjWzc9CNlzfgZfWeIwiSw5nmNoIB/FFOJ+JAJhX2vdLMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHAqA+OImSGnn1CaNYaxktULcxsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdmZDE4ZTYtNWY5Mi0z
NWYxLWFkZjktYmEwOWFkZGM2MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0sp/kReHzWQYt+zetjMSgluQwU93hdGcIoTP1ChuO0UiV7x3P3buJs
cXqFS1db3ijjnF6DQ7ZewjjMa8aJ0o4AprEmOhnlLLiJ60qcdsG/LWfHENvvWRUK
WcmJWccxm11OcrHD8iW0wEiqDwgJJ5URwqNFX9OVJFTQAI0py1K/dP+iNbjO36Q5
UBci7bYIFZXaBGYk4ojWo00jIhJpZrghlXC79kq9AtNg7ZiV3Qo63CDO4pr/lJ0n
xgreMxjwendQjtphZfYbqapAreEyOsHcc1j3XcabbKX1h7RV/ukjN1YY7ufzApUg
N6OWTfa9qzvMzzk1TEGsP0Dsa4jxxvY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:27 2025 by rpki-client