Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38daecd4-2426-33e4-8f06-f9e56aa08755.roa
File: 38daecd4-2426-33e4-8f06-f9e56aa08755.roa (raw, json)
Hash identifier: UylMZXl/1bqePmPgH0ARj2518GRjiAVgcUmrrjp8SIY=
Subject key identifier: F1:80:EA:4C:15:4C:FC:7B:2D:55:8C:3B:D7:42:DD:63:4A:B8:72:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E8638B2AF5DCEC7133480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38daecd4-2426-33e4-8f06-f9e56aa08755.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 20940
IP address blocks: 104.115.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:86:38:b2:af:5d:ce:c7:13:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=87ae3543-810a-443d-b8f9-b2c381d0f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:35:8f:88:5c:a5:e5:b5:64:86:e1:12:d3:
ff:ff:fa:06:48:3a:29:5a:4c:62:aa:d5:9c:1d:c1:
fd:be:ef:af:72:cd:f9:9c:28:29:4f:13:d9:1f:29:
8c:d7:91:cb:10:e6:de:27:22:46:91:2a:d3:9b:6c:
71:a0:14:09:48:a0:45:db:48:84:75:18:0f:34:da:
88:25:ca:30:5a:f7:34:02:35:c0:47:9e:27:0d:a8:
f3:32:e9:0b:7c:71:aa:a8:3d:52:ec:bf:da:b6:83:
ab:ce:dc:29:b7:d3:e0:62:67:22:1f:89:6d:cd:25:
13:16:1d:16:e8:20:47:78:f1:af:d7:3c:bb:f6:b8:
e5:71:61:8b:27:52:e1:24:6b:3c:28:75:2f:29:b8:
2b:dd:6c:16:99:53:71:13:91:91:dc:ad:ad:e1:6b:
48:04:7b:28:0a:10:67:fb:6f:b7:48:d3:d4:72:bf:
79:10:0d:39:6e:1a:ab:a0:ca:df:32:c3:91:80:12:
ac:6a:2e:e2:2d:bd:57:57:da:a9:70:a7:f0:02:ad:
80:eb:5e:f8:a8:01:f2:33:a4:a6:71:05:ca:5f:06:
54:8c:ce:65:46:33:58:e8:70:c4:4a:cf:e1:ab:f6:
1c:36:b4:83:46:74:3f:20:d2:fe:d8:88:8f:6d:28:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:80:EA:4C:15:4C:FC:7B:2D:55:8C:3B:D7:42:DD:63:4A:B8:72:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38daecd4-2426-33e4-8f06-f9e56aa08755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.115.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4c:ad:c6:02:f4:cf:5a:36:8b:c8:20:1f:2f:e5:67:f8:4d:
e9:a1:af:01:66:00:1d:12:98:82:4f:76:47:e4:18:e2:ee:bc:
9f:f0:33:e6:21:5a:03:98:64:06:c4:d5:f9:13:1c:0f:3b:b2:
ec:7b:fb:1b:88:f8:ee:64:69:15:e1:a5:07:4b:50:2c:73:5e:
2c:0e:ff:7a:ba:9a:34:17:5d:a2:bc:66:bd:11:79:64:9f:4f:
bb:6c:08:a0:1c:6e:db:46:67:ea:41:0c:08:07:e1:be:fe:16:
79:3e:6c:26:7a:07:20:37:c1:1d:51:34:dd:b3:32:bc:8a:94:
f9:9d:57:0e:76:68:f5:a6:bc:b8:c8:bb:dd:a0:25:97:3f:a3:
3a:0e:e2:a5:ba:c4:46:7f:2d:9f:ce:28:24:6e:f2:1b:11:ca:
78:9f:2a:1f:7e:28:61:68:d5:aa:8d:1b:d8:65:d8:2d:7c:5b:
49:f9:b7:04:1c:9e:7d:24:92:5a:4a:e2:a0:cb:34:9a:32:94:
39:e4:17:4a:2a:d3:16:a1:79:cd:c0:6e:25:43:de:17:75:c3:
c6:bb:d2:88:f5:0e:21:72:26:5c:be:73:fc:11:84:1c:f2:13:
4c:25:8e:a7:9a:45:2c:92:1c:e6:70:96:e9:ae:c1:dc:00:c9:
4d:b7:f4:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PoY4sq9dzscTNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
ODdhZTM1NDMtODEwYS00NDNkLWI4ZjktYjJjMzgxZDBmOTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQ1j4hcpeW1ZIbhEtP///oGSDopWkxiqtWc
HcH9vu+vcs35nCgpTxPZHymM15HLEObeJyJGkSrTm2xxoBQJSKBF20iEdRgPNNqI
JcowWvc0AjXAR54nDajzMukLfHGqqD1S7L/atoOrztwpt9PgYmciH4ltzSUTFh0W
6CBHePGv1zy79rjlcWGLJ1LhJGs8KHUvKbgr3WwWmVNxE5GR3K2t4WtIBHsoChBn
+2+3SNPUcr95EA05bhqroMrfMsORgBKsai7iLb1XV9qpcKfwAq2A6174qAHyM6Sm
cQXKXwZUjM5lRjNY6HDESs/hq/YcNrSDRnQ/INL+2IiPbSiXFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGA6kwVTPx7LVWMO9dC3WNKuHJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzhkYWVjZDQtMjQyNi0z
M2U0LThmMDYtZjllNTZhYTA4NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHNRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtMrcYC9M9aNovIIB8v5Wf4TemhrwFmAB0SmIJPdkfkGOLuvJ/wM+Yh
WgOYZAbE1fkTHA87sux7+xuI+O5kaRXhpQdLUCxzXiwO/3q6mjQXXaK8Zr0ReWSf
T7tsCKAcbttGZ+pBDAgH4b7+Fnk+bCZ6ByA3wR1RNN2zMryKlPmdVw52aPWmvLjI
u92gJZc/ozoO4qW6xEZ/LZ/OKCRu8hsRynifKh9+KGFo1aqNG9hl2C18W0n5twQc
nn0kklpK4qDLNJoylDnkF0oq0xahec3AbiVD3hd1w8a70oj1DiFyJly+c/wRhBzy
E0wljqeaRSySHOZwlumuwdwAyU239Fo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:36 2025 by rpki-client