Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6298df44-d409-34fd-b61b-fb3ebe1676f4.roa
File: 6298df44-d409-34fd-b61b-fb3ebe1676f4.roa (raw, json)
Hash identifier: RjxA7LTl2RzxuYswSwUePL7y4BCnfEX7OaA9eSD4Tgk=
Subject key identifier: 0F:3E:BB:CC:90:D3:6C:EA:0F:23:E7:10:EA:EF:BF:7F:C2:CC:24:4A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243F9129FE2B34739A6C340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6298df44-d409-34fd-b61b-fb3ebe1676f4.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.72.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f9:12:9f:e2:b3:47:39:a6:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=57524bc3-6d25-4875-ac39-a96a10b23234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:b9:0a:ff:25:ba:d3:82:1a:74:41:e3:8f:
7e:cb:1a:78:1e:fe:ab:f1:2e:3d:09:5d:04:89:85:
5e:ad:3b:39:af:e0:38:57:d8:88:b1:5f:3f:34:10:
74:fa:91:a7:b9:57:14:34:30:fa:e7:70:89:01:6f:
91:08:9d:77:85:a7:37:5c:8f:4e:68:4b:a9:2c:ce:
4a:a9:16:cc:42:c5:30:80:42:48:ef:dc:43:83:2a:
15:23:b8:b9:7f:d0:4b:6e:f2:89:3e:80:77:c3:a3:
d5:df:78:7d:7a:d0:4e:32:a1:2f:ac:b8:ef:ec:92:
cb:da:5d:b0:9a:21:96:a2:7d:51:3b:c2:67:42:ce:
e1:a0:ad:4b:c3:03:be:37:f4:56:e5:3f:4d:ad:3d:
09:b8:e9:a7:36:b8:60:0f:02:cd:84:47:d0:05:57:
37:d9:de:04:01:38:2d:1d:73:84:ad:1a:ca:dd:84:
1a:05:e4:a0:72:98:a2:39:76:19:a8:f4:85:35:40:
19:da:66:11:65:a7:2a:f8:d5:37:0e:2a:0f:70:fc:
6d:94:fc:94:be:92:b9:1a:50:f5:53:f8:e8:e5:44:
9f:65:2c:b1:35:1c:8e:2d:80:81:f3:46:55:27:f7:
11:e0:63:80:21:f7:a7:a2:5c:ef:97:46:76:53:71:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:BB:CC:90:D3:6C:EA:0F:23:E7:10:EA:EF:BF:7F:C2:CC:24:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6298df44-d409-34fd-b61b-fb3ebe1676f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.72.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:8f:d3:a5:91:7c:f9:a1:4f:28:8d:14:3a:60:86:20:4c:7b:
a9:16:16:17:ff:41:a5:6d:4d:ec:79:d0:8b:ed:77:a0:f4:73:
31:51:13:bf:f1:f2:b9:c6:c9:4e:42:fa:47:5f:67:44:e1:d3:
e8:73:c1:e0:9b:41:3a:55:41:0e:69:5d:39:a9:00:fc:35:b7:
bf:6b:81:50:a7:98:41:63:06:01:a1:cf:a4:78:a4:a4:4f:56:
42:cc:87:5e:3f:7a:23:eb:ad:67:cf:10:e0:64:69:45:07:8a:
0e:87:bc:22:31:9a:f5:c9:f9:8e:25:4f:ea:9c:11:68:0e:74:
e0:74:02:57:19:93:b0:4f:b0:86:8d:79:3c:6c:2d:d1:e4:d0:
97:9e:96:3d:76:e0:33:e8:0a:4a:a8:bb:cf:fa:7b:c0:4d:20:
53:b8:ec:2e:39:16:e8:11:6f:20:35:da:f8:b9:18:1a:c7:53:
9a:a3:fc:c9:1e:fb:58:ff:47:2f:e0:b0:e6:f6:e6:57:7d:68:
f2:04:7a:dc:90:fc:19:39:e4:3d:55:a4:31:60:ad:e5:9c:bb:
1f:90:7e:f4:de:cd:93:e5:0f:06:a6:16:18:52:41:07:84:1a:
43:be:d7:12:c0:35:41:bb:ee:2b:e7:b9:a2:d0:db:18:fb:fc:
97:de:0c:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/kSn+KzRzmmw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NTc1MjRiYzMtNmQyNS00ODc1LWFjMzktYTk2YTEwYjIzMjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHC5Cv8lutOCGnRB449+yxp4Hv6r8S49CV0E
iYVerTs5r+A4V9iIsV8/NBB0+pGnuVcUNDD653CJAW+RCJ13hac3XI9OaEupLM5K
qRbMQsUwgEJI79xDgyoVI7i5f9BLbvKJPoB3w6PV33h9etBOMqEvrLjv7JLL2l2w
miGWon1RO8JnQs7hoK1LwwO+N/RW5T9NrT0JuOmnNrhgDwLNhEfQBVc32d4EATgt
HXOErRrK3YQaBeSgcpiiOXYZqPSFNUAZ2mYRZacq+NU3DioPcPxtlPyUvpK5GlD1
U/jo5USfZSyxNRyOLYCB80ZVJ/cR4GOAIfenolzvl0Z2U3G75QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8+u8yQ02zqDyPnEOrvv3/CzCRKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjI5OGRmNDQtZDQwOS0z
NGZkLWI2MWItZmIzZWJlMTY3NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEhPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaP06WRfPmhTyiNFDpghiBMe6kWFhf/QaVtTex50Ivtd6D0czFRE7/x
8rnGyU5C+kdfZ0Th0+hzweCbQTpVQQ5pXTmpAPw1t79rgVCnmEFjBgGhz6R4pKRP
VkLMh14/eiPrrWfPEOBkaUUHig6HvCIxmvXJ+Y4lT+qcEWgOdOB0AlcZk7BPsIaN
eTxsLdHk0Jeelj124DPoCkqou8/6e8BNIFO47C45FugRbyA12vi5GBrHU5qj/Mke
+1j/Ry/gsOb25ld9aPIEetyQ/Bk55D1VpDFgreWcux+QfvTezZPlDwamFhhSQQeE
GkO+1xLANUG77ivnuaLQ2xj7/JfeDJM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:39 2025 by rpki-client