Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d3e3835-527a-3188-a480-c4c800dd1dbc.roa
File: 6d3e3835-527a-3188-a480-c4c800dd1dbc.roa (raw, json)
Hash identifier: 7XzlbPsLczNKRrsjxuEufsZQoFO5H+Z+jlDm4+r7GQI=
Subject key identifier: CB:71:AC:8F:15:A3:4E:C9:B1:88:65:3F:99:3C:AF:CC:09:7E:3B:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EB3BFCE6F31A3E68C7A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d3e3835-527a-3188-a480-c4c800dd1dbc.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.82.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b3:bf:ce:6f:31:a3:e6:8c:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=ee7e5310-7ee6-4dff-bb19-076a1f7503cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:53:90:9e:c5:2a:ce:ef:c8:39:ab:f4:dd:
8c:ed:e1:63:92:fe:17:34:a1:de:c5:58:e6:c4:28:
b0:e3:4c:36:e6:fe:c0:6c:bf:41:9a:d2:74:8f:53:
ec:ea:b0:80:1a:82:8e:0c:b0:6a:22:56:48:2b:67:
4e:e9:94:a2:e0:bd:7d:3c:b9:f9:14:b4:83:37:69:
06:61:d9:90:ae:5b:34:ea:a3:91:39:40:ba:0e:96:
79:15:51:39:e8:0a:ad:af:ca:d3:86:cb:9b:14:c5:
e6:ee:01:5e:61:64:a0:a8:cc:18:7c:28:51:f8:54:
d7:4d:eb:98:ae:18:27:12:02:1d:7b:3b:fa:41:b0:
bf:fa:ed:c9:7f:34:fd:57:5f:36:95:31:8d:bd:cf:
bb:69:a4:54:e6:1b:d3:2a:62:6a:c3:1f:8e:7e:e9:
eb:1d:c4:84:76:f8:6d:8e:04:cd:3a:73:96:22:dd:
24:eb:00:2e:5d:d0:6c:72:25:0c:3a:b0:24:b5:ad:
fd:f2:7a:bb:bb:3c:1b:db:18:4a:54:ab:2d:e4:43:
36:48:ce:0a:e5:26:97:ea:a0:48:32:f8:64:86:a2:
13:6a:b6:62:3a:81:63:ce:36:b2:6c:dc:27:f4:1b:
8b:53:14:79:27:ea:9d:0d:76:f9:bb:3d:e9:d2:e7:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:AC:8F:15:A3:4E:C9:B1:88:65:3F:99:3C:AF:CC:09:7E:3B:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d3e3835-527a-3188-a480-c4c800dd1dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.82.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:a6:e6:1c:b5:f8:84:f6:8b:7d:ff:cf:79:c1:99:99:a8:1e:
bf:b2:38:f2:1a:a2:ec:04:77:a0:11:ee:ac:ba:f2:7f:54:08:
56:6d:9e:e1:c1:04:e1:1f:6c:6e:b1:a7:d1:de:fb:e6:07:fc:
ef:ab:c2:7b:94:bd:48:82:44:35:08:6b:d6:70:e1:a7:09:bd:
a1:32:9e:0d:18:1c:82:64:c3:95:2d:e5:96:e1:d5:d3:5f:05:
35:db:19:a5:51:24:4e:37:bf:34:a9:68:d1:c9:35:fa:7f:07:
35:20:a3:c6:cc:d1:49:7f:43:70:ed:a9:b5:cf:e5:dd:c0:d1:
26:94:dd:ce:78:ac:01:fd:e9:cf:5b:ed:07:fb:06:19:56:2a:
09:61:9e:a9:a5:ed:bd:df:90:e1:30:e8:8c:19:9c:b7:34:06:
3b:7f:bd:b9:f1:cd:a7:d7:56:a0:b7:86:f6:18:5c:fd:e3:44:
ab:d0:3f:e3:40:cd:90:85:7d:88:80:63:92:06:26:27:2c:76:
c4:43:0b:11:d1:bf:93:22:f4:8c:af:54:50:2e:ee:b9:e4:d1:
d7:da:f2:8c:cf:03:19:4b:82:57:36:84:b6:5b:88:02:a5:e0:
4e:18:55:ef:e6:ae:54:e4:f6:4f:69:8f:c3:14:36:65:d0:5c:
10:62:a9:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrO/zm8xo+aMegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZWU3ZTUzMTAtN2VlNi00ZGZmLWJiMTktMDc2YTFmNzUwM2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V9TkJ7FKs7vyDmr9N2M7eFjkv4XNKHexVjm
xCiw40w25v7AbL9BmtJ0j1Ps6rCAGoKODLBqIlZIK2dO6ZSi4L19PLn5FLSDN2kG
YdmQrls06qOROUC6DpZ5FVE56Aqtr8rThsubFMXm7gFeYWSgqMwYfChR+FTXTeuY
rhgnEgIdezv6QbC/+u3JfzT9V182lTGNvc+7aaRU5hvTKmJqwx+OfunrHcSEdvht
jgTNOnOWIt0k6wAuXdBsciUMOrAkta398nq7uzwb2xhKVKst5EM2SM4K5SaX6qBI
MvhkhqITarZiOoFjzjaybNwn9BuLUxR5J+qdDXb5uz3p0udtHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtxrI8Vo07JsYhlP5k8r8wJfjsdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmQzZTM4MzUtNTI3YS0z
MTg4LWE0ODAtYzRjODAwZGQxZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaFJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISm5hy1+IT2i33/z3nBmZmoHr+yOPIaouwEd6AR7qy68n9UCFZtnuHB
BOEfbG6xp9He++YH/O+rwnuUvUiCRDUIa9Zw4acJvaEyng0YHIJkw5Ut5Zbh1dNf
BTXbGaVRJE43vzSpaNHJNfp/BzUgo8bM0Ul/Q3DtqbXP5d3A0SaU3c54rAH96c9b
7Qf7BhlWKglhnqml7b3fkOEw6IwZnLc0Bjt/vbnxzafXVqC3hvYYXP3jRKvQP+NA
zZCFfYiAY5IGJicsdsRDCxHRv5Mi9IyvVFAu7rnk0dfa8ozPAxlLglc2hLZbiAKl
4E4YVe/mrlTk9k9pj8MUNmXQXBBiqUw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:02 2025 by rpki-client