Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dce555a-58cb-3527-ae36-42f40f14ff8d.roa
File: 7dce555a-58cb-3527-ae36-42f40f14ff8d.roa (raw, json)
Hash identifier: +iL1MbExgE1xdLCMbN0DXYoPWBm+vC45M4FCzM9GgvI=
Subject key identifier: 6F:01:E6:8B:FB:DF:3D:DF:72:6A:BA:C5:F1:31:0B:EF:BE:7C:90:0D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC2D27BFF986241E0AA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dce555a-58cb-3527-ae36-42f40f14ff8d.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.97.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c2:d2:7b:ff:98:62:41:e0:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=3a731167-a6ad-447e-9503-fab1f1712b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:1b:e1:84:79:db:76:0f:21:ec:f7:90:17:
92:8d:79:3c:63:2f:e2:40:29:54:b8:86:37:e6:1a:
e0:f6:63:f6:d9:4f:5c:bb:49:c2:f7:b0:7c:97:5f:
64:4c:90:e1:48:2e:81:76:d1:f6:eb:ed:c8:8d:9a:
a3:ba:f4:c2:cd:57:9f:89:65:7b:5a:3c:e7:70:65:
79:67:dc:a9:57:b9:ef:5e:00:27:12:aa:8e:83:d0:
e7:32:bb:df:16:0f:87:3a:a6:ec:02:79:5b:47:a4:
6a:64:0f:39:6d:8a:f2:74:db:82:56:b3:5f:95:96:
36:bd:67:18:09:94:56:58:19:78:e1:09:22:79:99:
df:32:c4:93:02:2b:92:d3:cb:d6:80:90:a1:6b:72:
6d:3c:fd:99:d4:38:e5:71:d9:16:74:98:5c:58:3b:
b0:71:7c:1d:d0:42:df:31:a7:7b:03:d2:4f:24:33:
45:f3:9d:5e:c6:8c:a3:e5:72:f8:72:c1:e5:5c:a2:
c7:b0:d1:a8:9b:2a:26:8b:55:d5:62:a0:55:48:2d:
4e:e6:84:dc:46:7a:00:77:11:13:de:24:d1:5d:3b:
bb:b2:e2:b8:21:9b:cb:e7:b0:c2:e4:50:51:41:38:
af:5d:15:46:d8:31:f9:ed:a8:97:80:8d:f8:69:1a:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:E6:8B:FB:DF:3D:DF:72:6A:BA:C5:F1:31:0B:EF:BE:7C:90:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dce555a-58cb-3527-ae36-42f40f14ff8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.97.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:65:f6:f8:c8:68:d1:5b:6e:54:68:9d:39:28:3f:d5:dc:ef:
c8:3f:8c:49:de:cc:91:8f:c7:dc:9a:c1:11:43:fe:0e:23:0f:
a4:14:31:cb:9a:02:7e:01:fa:df:80:70:66:e0:6b:00:e0:57:
06:af:96:41:b7:7b:a9:e2:24:aa:7a:67:0f:da:d9:92:bd:ac:
27:01:d3:1f:45:cb:33:9c:0c:11:ca:85:b3:04:d3:fb:7a:70:
ee:a4:0f:62:04:81:ac:ff:62:5d:5f:47:3e:aa:98:d3:66:4c:
20:4e:7a:8a:4f:ed:42:93:71:0d:6a:75:55:47:7d:82:b2:85:
14:cd:ee:9e:fe:cf:bb:6a:1a:41:42:0c:15:07:cd:a3:ee:6a:
21:25:4b:9b:e3:a9:a6:aa:c0:c7:89:41:7a:ad:ef:f1:1c:32:
c4:86:81:a8:62:0e:c2:00:91:f2:74:bb:44:40:f1:2b:ac:45:
81:92:51:3e:fc:c1:46:6a:d1:0b:af:b9:a8:11:38:bb:a0:fb:
b8:d3:e5:2d:c2:a6:cc:dd:35:92:91:c6:a9:98:56:4c:d0:b4:
8c:d1:e6:d5:10:99:4d:e9:43:e0:8f:b6:20:1f:62:9b:ad:3e:
69:c2:44:df:83:f5:d6:53:98:fa:9c:5b:6f:19:2a:c6:ac:d7:
fe:a8:e3:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DsLSe/+YYkHgqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
M2E3MzExNjctYTZhZC00NDdlLTk1MDMtZmFiMWYxNzEyYjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN0b4YR523YPIez3kBeSjXk8Yy/iQClUuIY3
5hrg9mP22U9cu0nC97B8l19kTJDhSC6BdtH26+3IjZqjuvTCzVefiWV7WjzncGV5
Z9ypV7nvXgAnEqqOg9DnMrvfFg+HOqbsAnlbR6RqZA85bYrydNuCVrNflZY2vWcY
CZRWWBl44QkieZnfMsSTAiuS08vWgJCha3JtPP2Z1DjlcdkWdJhcWDuwcXwd0ELf
Mad7A9JPJDNF851exoyj5XL4csHlXKLHsNGomyomi1XVYqBVSC1O5oTcRnoAdxET
3iTRXTu7suK4IZvL57DC5FBRQTivXRVG2DH57aiXgI34aRpETQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8B5ov73z3fcmq6xfExC+++fJANMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RjZTU1NWEtNThjYi0z
NTI3LWFlMzYtNDJmNDBmMTRmZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGFWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdl9vjIaNFbblRonTkoP9Xc78g/jEnezJGPx9yawRFD/g4jD6QUMcua
An4B+t+AcGbgawDgVwavlkG3e6niJKp6Zw/a2ZK9rCcB0x9FyzOcDBHKhbME0/t6
cO6kD2IEgaz/Yl1fRz6qmNNmTCBOeopP7UKTcQ1qdVVHfYKyhRTN7p7+z7tqGkFC
DBUHzaPuaiElS5vjqaaqwMeJQXqt7/EcMsSGgahiDsIAkfJ0u0RA8SusRYGSUT78
wUZq0QuvuagROLug+7jT5S3CpszdNZKRxqmYVkzQtIzR5tUQmU3pQ+CPtiAfYput
PmnCRN+D9dZTmPqcW28ZKsas1/6o40Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:09 2025 by rpki-client