Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa
File: b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa (raw, json)
Hash identifier: 58CNr6AuvAZ0J61f25rLd1AlxoLKQ8fv9kab0J8o/Dw=
Subject key identifier: 05:85:D7:60:D6:C1:84:6E:E2:14:54:98:A8:3F:FB:FB:9D:D6:85:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584937D9416D531045322C1D3DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.107.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:41:6d:53:10:45:32:2c:1d:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=b8aea211-99f5-4033-af36-cfc05d845e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:cb:34:a3:94:2a:0c:23:bd:40:26:21:5e:
39:92:ae:4e:3a:ff:b8:43:86:7c:ca:c0:e3:80:b5:
71:32:f9:b1:2d:6d:3e:91:01:93:36:05:b0:dd:86:
fa:5b:ba:18:1f:b2:3d:57:32:88:d9:44:4b:95:59:
5f:67:37:ed:8a:3a:ea:38:bf:c9:df:f5:31:ec:0e:
91:10:06:f2:82:b6:e5:4c:23:40:01:65:94:22:9b:
78:9c:ba:ab:82:ba:12:53:be:08:7a:0c:b0:15:22:
02:0c:04:b8:6b:5c:7e:6f:1b:12:81:4a:76:1a:0a:
45:d5:d0:17:fb:62:25:d4:ec:c1:85:3d:cd:94:9a:
02:79:5a:1e:e5:91:15:96:04:c7:5b:f6:45:94:a8:
f9:c6:01:c1:a3:27:29:8b:ed:5a:71:52:ac:79:b2:
47:c1:ac:d2:95:7e:2d:37:a8:62:a4:1c:50:36:24:
1f:a4:79:30:51:f9:1d:4a:13:13:bd:bb:76:e5:d3:
aa:34:c8:22:7c:6a:1d:2f:8d:92:1f:8d:eb:3f:0b:
78:44:a6:c2:9d:1e:5f:e0:51:73:0f:c8:09:8a:2e:
fb:01:88:d4:c1:a7:b6:6c:a0:29:28:2e:f3:86:aa:
05:2e:9f:c2:b4:41:b0:ab:bf:50:40:4a:19:48:16:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:D7:60:D6:C1:84:6E:E2:14:54:98:A8:3F:FB:FB:9D:D6:85:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.107.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:88:a1:4f:61:3d:37:89:31:0e:b0:a3:d8:b3:6d:fc:0a:29:
a4:42:78:78:a5:55:f6:bb:34:3b:b4:2b:9b:d5:0b:b4:30:b0:
93:eb:08:17:72:d1:98:a2:76:3a:35:c5:2a:38:12:39:26:0c:
44:5c:0e:cd:34:9e:ff:be:3b:bf:71:97:f2:0f:93:9a:fe:da:
46:60:08:36:38:78:50:68:09:09:1a:e1:76:5f:4d:8a:db:78:
10:44:45:db:b5:74:c6:49:19:2a:99:7b:65:1b:14:fc:4e:c6:
0c:2c:12:c9:54:39:82:6c:b1:b3:f1:56:da:68:05:ab:9f:2f:
9f:db:9c:99:76:e3:60:ad:a3:54:97:f2:3c:72:6b:cc:ef:26:
fd:1b:b7:a5:b4:1b:a6:3d:e0:1d:dd:c6:8a:86:bc:6a:86:e0:
be:21:aa:97:3f:5f:08:72:fc:16:b5:0b:43:55:42:5d:f0:23:
f9:38:69:e0:bb:55:fe:f4:53:a0:3b:4d:57:56:af:0a:ae:34:
2f:e9:8d:9c:09:51:48:86:8b:7e:cd:0b:cd:db:75:49:70:e9:
3a:40:ab:26:7c:99:27:27:33:91:8d:08:30:12:cf:de:13:14:
af:fd:ca:59:84:64:8f:b7:89:34:f7:9f:3d:8e:c8:4b:1e:61:
3e:18:b5:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32UFtUxBFMiwdPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
YjhhZWEyMTEtOTlmNS00MDMzLWFmMzYtY2ZjMDVkODQ1ZTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHLNKOUKgwjvUAmIV45kq5OOv+4Q4Z8ysDj
gLVxMvmxLW0+kQGTNgWw3Yb6W7oYH7I9VzKI2URLlVlfZzftijrqOL/J3/Ux7A6R
EAbygrblTCNAAWWUIpt4nLqrgroSU74IegywFSICDAS4a1x+bxsSgUp2GgpF1dAX
+2Il1OzBhT3NlJoCeVoe5ZEVlgTHW/ZFlKj5xgHBoycpi+1acVKsebJHwazSlX4t
N6hipBxQNiQfpHkwUfkdShMTvbt25dOqNMgifGodL42SH43rPwt4RKbCnR5f4FFz
D8gJii77AYjUwae2bKApKC7zhqoFLp/CtEGwq79QQEoZSBb66wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWF12DWwYRu4hRUmKg/+/ud1oX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFhMGE3ZGYtNmIxZi0z
NzYwLThiYTItYzk5ZjFiOGEyMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGugMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6IoU9hPTeJMQ6wo9izbfwKKaRCeHilVfa7NDu0K5vVC7QwsJPrCBdy
0Ziidjo1xSo4EjkmDERcDs00nv++O79xl/IPk5r+2kZgCDY4eFBoCQka4XZfTYrb
eBBERdu1dMZJGSqZe2UbFPxOxgwsEslUOYJssbPxVtpoBaufL5/bnJl242Cto1SX
8jxya8zvJv0bt6W0G6Y94B3dxoqGvGqG4L4hqpc/Xwhy/Ba1C0NVQl3wI/k4aeC7
Vf70U6A7TVdWrwquNC/pjZwJUUiGi37NC83bdUlw6TpAqyZ8mScnM5GNCDASz94T
FK/9ylmEZI+3iTT3nz2OyEseYT4Ytc8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:11 2025 by rpki-client