Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5114264b-2172-30fc-8c76-661c5adb97a8.roa
File: 5114264b-2172-30fc-8c76-661c5adb97a8.roa (raw, json)
Hash identifier: l0eng3Xr4fb5LNULlsstsxM1urdApbEdOCHQyFI0APE=
Subject key identifier: 93:9C:51:43:8D:BA:5D:2C:E7:CA:88:F4:2A:EC:C3:BB:0F:83:AE:D9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243F8A7D7E8A28E37974780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5114264b-2172-30fc-8c76-661c5adb97a8.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f8:a7:d7:e8:a2:8e:37:97:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=d886c3d3-a155-4e69-9db8-fb559991b6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:2a:ce:66:6c:7d:31:23:1e:e9:53:d3:1c:
34:3c:88:60:0b:77:b9:ef:fb:48:dc:2a:14:d0:24:
df:f2:e2:c4:4f:8a:86:a1:b8:59:6e:10:95:c0:03:
3f:da:4b:93:e8:c1:f6:16:cd:18:f6:17:bc:18:17:
24:3c:19:fd:e9:bf:d1:10:d0:74:71:34:e4:ca:11:
a2:63:e9:0c:3f:1f:bb:1f:db:d4:c6:fe:70:cb:3f:
19:3c:42:63:a3:26:2e:28:53:00:52:91:5e:8d:b8:
ca:cb:ea:54:cc:65:b6:62:7b:36:ef:3c:7b:e4:d1:
e1:fb:4b:20:80:1d:e1:b3:6c:73:58:aa:49:1c:bb:
df:c7:99:26:ae:f7:41:9f:05:10:05:25:14:06:f6:
dd:5b:99:e0:ac:76:00:43:9b:1e:1a:80:69:b0:3e:
f1:f6:81:32:21:13:ee:e4:53:f1:3e:11:84:d5:39:
b3:a6:b9:82:b2:a5:9f:7f:54:60:ca:70:50:76:75:
52:c9:6a:81:ad:42:ea:c1:81:89:f8:13:35:0a:17:
f5:66:ca:32:9f:d1:4e:fb:7b:2a:99:5d:e9:ab:21:
f1:45:33:25:3f:8a:1a:c5:e5:56:aa:ce:47:a3:7f:
aa:cb:90:17:ad:56:d0:b5:b8:3f:a0:2f:34:0f:df:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:51:43:8D:BA:5D:2C:E7:CA:88:F4:2A:EC:C3:BB:0F:83:AE:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5114264b-2172-30fc-8c76-661c5adb97a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:d4:4d:21:40:3d:02:61:d9:4f:f8:17:ce:27:80:d6:45:f5:
42:f6:9c:8d:dd:52:ec:de:af:9d:0e:64:1a:ff:59:57:14:de:
2d:e8:fe:2d:ca:1b:c8:1e:bc:02:dd:09:51:0e:4d:8b:4c:e0:
b9:40:dd:f4:a9:23:58:3f:e6:38:fb:a7:a8:8c:f7:4b:e0:62:
e0:e1:c8:31:02:5b:88:8c:48:b9:07:d0:c7:75:b8:09:d8:19:
6c:6a:bb:db:e1:9c:9a:d2:b2:c2:86:c4:1c:d2:d5:fa:3e:98:
bd:e1:0a:55:fe:42:32:ac:e1:48:88:80:ac:4a:7d:bb:fa:52:
66:1f:5b:91:88:30:f6:c0:5b:73:be:45:8e:56:d8:35:c4:e6:
49:e9:2b:f3:e5:25:4e:7b:9f:f6:e9:43:3b:86:16:d6:82:dd:
43:3f:4e:c4:e2:8c:73:91:48:5c:fd:4d:fd:eb:14:2e:fa:99:
c2:e5:80:1e:e2:02:c9:03:ed:82:05:ba:ad:ae:3a:ed:d8:2b:
bd:e5:b2:fd:d2:26:3c:b9:99:ca:c5:d1:56:a6:ab:ab:30:46:
9e:76:86:21:4a:1d:ca:d9:ba:e4:d9:26:43:97:90:8b:f4:96:
b3:6a:7e:c6:f9:84:32:fb:23:70:de:90:e1:bc:15:f5:8b:46:
2e:10:e2:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/in1+iijjeXR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDg4NmMzZDMtYTE1NS00ZTY5LTlkYjgtZmI1NTk5OTFiNmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BEqzmZsfTEjHulT0xw0PIhgC3e57/tI3CoU
0CTf8uLET4qGobhZbhCVwAM/2kuT6MH2Fs0Y9he8GBckPBn96b/RENB0cTTkyhGi
Y+kMPx+7H9vUxv5wyz8ZPEJjoyYuKFMAUpFejbjKy+pUzGW2Yns27zx75NHh+0sg
gB3hs2xzWKpJHLvfx5kmrvdBnwUQBSUUBvbdW5ngrHYAQ5seGoBpsD7x9oEyIRPu
5FPxPhGE1TmzprmCsqWff1RgynBQdnVSyWqBrULqwYGJ+BM1Chf1Zsoyn9FO+3sq
mV3pqyHxRTMlP4oaxeVWqs5Ho3+qy5AXrVbQtbg/oC80D98xbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOcUUONul0s58qI9Crsw7sPg67ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTExNDI2NGItMjE3Mi0z
MGZjLThjNzYtNjYxYzVhZGI5N2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaEboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLUTSFAPQJh2U/4F84ngNZF9UL2nI3dUuzer50OZBr/WVcU3i3o/i3K
G8gevALdCVEOTYtM4LlA3fSpI1g/5jj7p6iM90vgYuDhyDECW4iMSLkH0Md1uAnY
GWxqu9vhnJrSssKGxBzS1fo+mL3hClX+QjKs4UiIgKxKfbv6UmYfW5GIMPbAW3O+
RY5W2DXE5knpK/PlJU57n/bpQzuGFtaC3UM/TsTijHORSFz9Tf3rFC76mcLlgB7i
AskD7YIFuq2uOu3YK73lsv3SJjy5mcrF0Vamq6swRp52hiFKHcrZuuTZJkOXkIv0
lrNqfsb5hDL7I3DekOG8FfWLRi4Q4qg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:53:40 2025 by rpki-client