Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f5979b-5d1a-344f-97e6-07efba2985dd.roa
File: d6f5979b-5d1a-344f-97e6-07efba2985dd.roa (raw, json)
Hash identifier: fgt44fkk65sN1o6/LilsmZVhY2aalPry5lXEqatNujs=
Subject key identifier: 38:36:DE:95:4A:74:B1:6A:75:CF:56:B3:F8:16:3B:63:3F:D3:52:E3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584937D942D20745143FC8BC1280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f5979b-5d1a-344f-97e6-07efba2985dd.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.111.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:42:d2:07:45:14:3f:c8:bc:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=1a7a9b10-5a87-4ead-9470-c786997daab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:61:41:b6:3d:bd:80:f3:38:a4:bf:f1:c5:
f0:c4:c4:4b:96:9a:f9:40:b8:ad:b3:2a:14:9e:15:
70:26:27:81:07:1a:07:6e:b8:1d:ce:8a:8b:9d:a4:
6c:6d:a5:e8:5b:d1:1e:c1:83:7f:2b:14:ff:dc:d3:
ff:73:2d:39:40:82:f9:34:b0:e5:17:83:3c:06:00:
49:d9:92:f8:2a:a4:ae:b7:6a:eb:fb:e3:af:b1:6a:
11:32:79:67:12:73:ca:d9:05:50:fd:83:d3:82:ba:
0d:92:02:17:91:57:25:5a:7f:ae:41:cd:c3:50:21:
d5:cf:e6:ae:65:d7:00:76:40:11:de:60:3f:ad:47:
cd:45:c2:c4:36:34:ab:0e:af:e8:3b:d4:8a:7c:88:
32:d4:5a:29:c0:12:67:d1:4b:3f:68:66:4d:fe:00:
34:61:4c:c9:8f:ae:ea:73:91:49:1b:86:21:f5:a7:
be:5c:35:35:fb:f1:2e:6d:a3:97:33:8e:2b:03:24:
96:1d:9f:8f:bc:1b:c1:e9:c9:ff:a9:d1:19:3c:06:
2b:15:20:0b:ab:20:89:cc:da:11:ce:87:09:13:56:
49:d0:f9:12:25:23:c0:f8:e8:94:60:69:03:c4:d8:
fc:d6:46:3d:25:3d:46:d2:82:90:68:d3:50:e5:6e:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:DE:95:4A:74:B1:6A:75:CF:56:B3:F8:16:3B:63:3F:D3:52:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f5979b-5d1a-344f-97e6-07efba2985dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.111.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:9f:2e:77:19:4c:a7:c9:77:c7:62:00:b4:99:18:7d:9d:c7:
83:b6:cd:f8:fe:d0:b0:a0:a5:e4:f0:68:e4:7c:e0:08:23:9d:
24:8e:1c:d2:71:6b:a0:73:0f:39:4b:17:f2:85:b8:e5:48:47:
ae:3e:5f:c4:15:18:8d:20:b5:77:72:07:bc:ca:fa:da:95:bf:
ec:fb:12:26:d7:41:6e:74:20:ca:07:26:ee:af:13:1c:f9:49:
f7:1f:86:82:34:30:0f:3c:16:42:b9:a6:58:75:58:ea:9b:c8:
32:a2:f5:45:a8:e7:ef:ff:c6:98:22:5c:ff:63:58:7c:38:08:
4c:18:fa:b3:d9:31:4c:77:71:5a:bd:b5:2a:19:7c:80:a0:c3:
3d:5a:c1:f5:a4:91:36:a5:fa:f0:dc:bb:9d:d5:af:82:12:7f:
17:15:16:80:6e:8d:4f:6d:f0:c8:8b:b5:d8:88:c3:26:f9:a7:
02:a7:34:6c:30:09:7b:50:6e:38:cb:9d:53:71:c6:c6:05:56:
c5:e2:d2:90:bb:be:92:f2:cd:1b:c2:f0:11:4d:c9:58:52:29:
83:f3:0f:7a:e7:fa:00:c3:9b:47:9a:d5:61:e6:4b:8a:2a:e9:
fe:85:13:2c:f9:73:6a:40:96:c5:16:f5:d3:86:b4:b2:d7:d7:
d4:fc:79:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32ULSB0UUP8i8EoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MWE3YTliMTAtNWE4Ny00ZWFkLTk0NzAtYzc4Njk5N2RhYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ZhQbY9vYDzOKS/8cXwxMRLlpr5QLitsyoU
nhVwJieBBxoHbrgdzoqLnaRsbaXoW9EewYN/KxT/3NP/cy05QIL5NLDlF4M8BgBJ
2ZL4KqSut2rr++OvsWoRMnlnEnPK2QVQ/YPTgroNkgIXkVclWn+uQc3DUCHVz+au
ZdcAdkAR3mA/rUfNRcLENjSrDq/oO9SKfIgy1FopwBJn0Us/aGZN/gA0YUzJj67q
c5FJG4Yh9ae+XDU1+/EubaOXM44rAySWHZ+PvBvB6cn/qdEZPAYrFSALqyCJzNoR
zocJE1ZJ0PkSJSPA+OiUYGkDxNj81kY9JT1G0oKQaNNQ5W43EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDg23pVKdLFqdc9Ws/gWO2M/01LjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZmNTk3OWItNWQxYS0z
NDRmLTk3ZTYtMDdlZmJhMjk4NWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaG/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABufLncZTKfJd8diALSZGH2dx4O2zfj+0LCgpeTwaOR84AgjnSSOHNJx
a6BzDzlLF/KFuOVIR64+X8QVGI0gtXdyB7zK+tqVv+z7EibXQW50IMoHJu6vExz5
SfcfhoI0MA88FkK5plh1WOqbyDKi9UWo5+//xpgiXP9jWHw4CEwY+rPZMUx3cVq9
tSoZfICgwz1awfWkkTal+vDcu53Vr4ISfxcVFoBujU9t8MiLtdiIwyb5pwKnNGww
CXtQbjjLnVNxxsYFVsXi0pC7vpLyzRvC8BFNyVhSKYPzD3rn+gDDm0ea1WHmS4oq
6f6FEyz5c2pAlsUW9dOGtLLX19T8eSk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:44 2025 by rpki-client