Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87ca0279-a527-3589-af6c-5a9ff6385b05.roa
File: 87ca0279-a527-3589-af6c-5a9ff6385b05.roa (raw, json)
Hash identifier: 120D6J7Fg2kxtOqv0V6d4rMRB4KEAHuaX8U0Y8fbCRw=
Subject key identifier: 21:6F:04:89:C0:DB:3B:23:C0:7A:DA:73:E4:95:33:49:5E:E1:D9:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243FA2232154068FA0BEC30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87ca0279-a527-3589-af6c-5a9ff6385b05.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.75.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:fa:22:32:15:40:68:fa:0b:ec:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=b170dca1-d229-40b7-9379-085240b3dd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:43:86:02:51:b4:45:1f:a9:89:7f:55:dd:
71:af:34:d4:1b:9b:9b:43:07:6d:49:14:ff:8e:ed:
f1:a3:f1:9e:eb:7b:18:63:a2:94:26:24:1a:a9:d7:
10:b0:db:59:97:62:0d:48:f2:4d:f0:e0:b0:f1:f0:
5e:9f:6e:e7:b8:f2:1b:54:81:21:66:b3:3c:df:ec:
ec:07:3e:d8:d4:12:92:6a:41:81:ac:73:f8:67:c2:
6c:36:aa:80:14:29:fa:40:b2:c3:08:dd:7f:e1:af:
00:a9:b8:23:2e:6a:b1:44:d9:f5:78:c0:f9:46:13:
70:06:cb:43:3f:e6:3f:a0:6c:5c:da:3f:24:97:56:
d2:d6:a6:5e:40:dd:fc:81:41:8d:7d:b2:10:e2:cd:
c3:be:a3:0b:23:95:24:24:50:75:a2:b7:1c:32:c9:
0b:a8:23:c0:e9:70:c3:35:81:1b:6e:4f:f7:b6:42:
03:eb:9e:99:f4:55:48:d9:b7:0b:78:1b:01:4c:3a:
37:e9:37:ab:7c:95:28:97:94:b5:16:fd:52:c5:ae:
f1:dd:33:73:fa:b6:62:25:c9:8e:9c:3b:48:2a:39:
c4:ce:e6:6d:d7:d8:33:58:df:c6:25:95:3d:c2:bf:
d3:de:75:47:49:2c:ec:3b:61:64:87:3e:1e:09:fe:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:04:89:C0:DB:3B:23:C0:7A:DA:73:E4:95:33:49:5E:E1:D9:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87ca0279-a527-3589-af6c-5a9ff6385b05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.75.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:6f:a1:67:4f:03:2a:c9:cb:e2:b8:2f:e6:3f:66:7d:a0:50:
e0:d1:ed:a3:c3:ff:fe:a0:1c:4b:63:c7:87:ec:24:9c:e6:99:
b3:ee:86:00:ae:1c:fc:a0:48:8e:78:c4:84:1d:ef:7c:b8:6e:
e9:df:37:80:f5:49:35:fe:91:9a:a4:46:46:ff:a0:15:55:e8:
1c:0d:2c:a9:36:db:e1:95:05:a6:24:ab:74:1f:90:34:83:ae:
a2:c9:04:7d:e0:1f:06:a2:51:7f:42:a7:49:b8:4e:80:95:be:
44:e7:9d:a8:8f:a5:4b:3b:20:e1:c9:c1:09:0e:1f:2e:5f:da:
9b:53:34:9b:ab:7f:b3:eb:f8:9e:b3:0e:9f:76:40:76:aa:f5:
3b:b9:e6:38:a0:91:63:fb:ab:c6:eb:c1:2a:f1:4c:2e:ff:d8:
c4:c1:58:8a:7e:37:f8:ca:41:ac:1e:c5:1d:4d:ef:0d:57:6c:
71:27:a8:13:45:52:5f:d8:cc:2a:61:9c:f9:cc:be:e3:9a:cc:
66:db:30:b9:eb:6c:de:df:43:d1:76:76:9f:53:31:d9:f0:84:
f2:48:44:1e:8c:0b:68:93:ac:ad:f9:f2:d5:7a:c3:8a:af:fa:
d7:1c:3e:6c:11:76:42:c4:b4:de:df:7a:00:eb:0f:88:09:d2:
91:20:a0:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/oiMhVAaPoL7DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
YjE3MGRjYTEtZDIyOS00MGI3LTkzNzktMDg1MjQwYjNkZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthRDhgJRtEUfqYl/Vd1xrzTUG5ubQwdtSRT/
ju3xo/Ge63sYY6KUJiQaqdcQsNtZl2INSPJN8OCw8fBen27nuPIbVIEhZrM83+zs
Bz7Y1BKSakGBrHP4Z8JsNqqAFCn6QLLDCN1/4a8AqbgjLmqxRNn1eMD5RhNwBstD
P+Y/oGxc2j8kl1bS1qZeQN38gUGNfbIQ4s3DvqMLI5UkJFB1orccMskLqCPA6XDD
NYEbbk/3tkID656Z9FVI2bcLeBsBTDo36TerfJUol5S1Fv1Sxa7x3TNz+rZiJcmO
nDtIKjnEzuZt19gzWN/GJZU9wr/T3nVHSSzsO2Fkhz4eCf4dKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFvBInA2zsjwHrac+SVM0le4dk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdjYTAyNzktYTUyNy0z
NTg5LWFmNmMtNWE5ZmY2Mzg1YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEtYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElvoWdPAyrJy+K4L+Y/Zn2gUODR7aPD//6gHEtjx4fsJJzmmbPuhgCu
HPygSI54xIQd73y4bunfN4D1STX+kZqkRkb/oBVV6BwNLKk22+GVBaYkq3QfkDSD
rqLJBH3gHwaiUX9Cp0m4ToCVvkTnnaiPpUs7IOHJwQkOHy5f2ptTNJurf7Pr+J6z
Dp92QHaq9Tu55jigkWP7q8brwSrxTC7/2MTBWIp+N/jKQawexR1N7w1XbHEnqBNF
Ul/YzCphnPnMvuOazGbbMLnrbN7fQ9F2dp9TMdnwhPJIRB6MC2iTrK358tV6w4qv
+tccPmwRdkLEtN7fegDrD4gJ0pEgoHc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:59 2025 by rpki-client