Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa
File: dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa (raw, json)
Hash identifier: RcHLIQe8fnxK4t3ydV3jHYZ5PLZkXnZQ75R51DoerEM=
Subject key identifier: 9F:1B:A4:FF:79:AF:9F:E9:69:50:3E:2F:9E:B4:B2:3C:25:D9:73:CD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC0546B6B144097E0C1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.89.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c0:54:6b:6b:14:40:97:e0:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=0e7cb65c-4368-474c-8aa2-a3695b0c7d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:31:bb:10:f3:1f:30:5d:a9:45:35:bb:f0:
5f:59:29:91:a5:91:ca:04:05:2a:46:76:44:71:d6:
61:4d:91:f7:16:72:54:c1:ae:01:03:a3:42:ca:d7:
c4:92:e9:23:45:ca:81:28:78:24:8b:20:dd:62:37:
97:95:78:fe:ab:2f:b8:e8:63:f5:07:7e:0d:08:4f:
d6:b0:86:d5:06:aa:cb:71:0f:6b:5a:ad:88:a6:3d:
3f:19:e9:ba:ed:ad:a2:e7:65:45:b5:18:a3:9b:31:
58:1c:ed:cc:ce:80:44:b7:82:d4:c3:a1:cb:31:a1:
33:ff:bf:52:c4:1f:7c:1b:d7:05:e0:e8:0e:2c:e8:
b0:39:f7:30:61:05:f6:8a:ec:0b:a9:bd:b0:14:6c:
4a:63:b7:06:65:b2:e3:48:f6:8f:b1:aa:4c:01:ff:
9f:3b:86:68:1b:71:c2:be:ac:6e:54:2d:6a:4e:3f:
c4:40:1d:ed:38:a5:fb:70:c6:d6:09:ba:b3:49:f9:
52:0e:51:a3:a4:70:15:a9:2d:dc:39:09:e4:bd:a1:
b9:ef:89:00:3e:83:e5:1e:da:9f:f4:ec:67:3a:3e:
29:ee:0c:ef:1d:5e:55:ee:02:a8:d6:15:a5:1d:94:
a8:64:43:6f:39:b2:e5:24:3c:98:e9:ae:1f:61:eb:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:A4:FF:79:AF:9F:E9:69:50:3E:2F:9E:B4:B2:3C:25:D9:73:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.89.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:fc:6f:ae:52:e3:c8:7f:ef:5f:ae:02:29:57:18:46:3c:4e:
4d:46:e9:68:78:53:6d:a1:47:c3:61:08:99:fe:3b:6e:93:5a:
5a:6f:f2:7f:88:35:f0:29:70:05:bb:1e:27:42:08:7d:0d:81:
b3:e5:3e:84:8d:f9:8e:23:69:d5:1a:f5:24:ac:8b:08:41:b7:
5d:46:05:d8:87:6c:b1:87:e8:6a:50:fa:dd:07:18:53:5d:c9:
4f:31:62:fb:ba:9f:07:15:5a:af:4a:89:2c:f7:b5:16:56:41:
0f:a1:36:94:d9:ec:64:8d:aa:3c:4a:5f:2e:6d:c3:d1:1c:a3:
6d:7f:fe:62:c5:c4:1d:19:a6:f6:ee:0a:bb:24:1d:4b:8f:60:
db:bd:26:09:53:15:4a:aa:56:3f:a6:16:f7:4d:a1:04:f4:65:
05:91:dc:53:40:59:90:3b:c4:0e:56:96:52:81:d9:e9:fc:6c:
97:42:72:08:0f:3e:1f:85:c8:4a:ae:e1:4a:2a:d8:0f:35:a7:
4d:98:e8:ce:78:cb:30:16:92:32:d9:c9:57:3c:87:a4:56:39:
a7:f3:b4:66:d1:bd:bd:06:d6:39:c8:23:53:9e:af:57:69:d0:
42:26:3a:89:e3:5c:9a:07:d3:98:cf:81:a6:d2:ae:6d:1f:02:
d4:4f:f6:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DsBUa2sUQJfgwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MGU3Y2I2NWMtNDM2OC00NzRjLThhYTItYTM2OTViMGM3ZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN0xuxDzHzBdqUU1u/BfWSmRpZHKBAUqRnZE
cdZhTZH3FnJUwa4BA6NCytfEkukjRcqBKHgkiyDdYjeXlXj+qy+46GP1B34NCE/W
sIbVBqrLcQ9rWq2Ipj0/Gem67a2i52VFtRijmzFYHO3MzoBEt4LUw6HLMaEz/79S
xB98G9cF4OgOLOiwOfcwYQX2iuwLqb2wFGxKY7cGZbLjSPaPsapMAf+fO4ZoG3HC
vqxuVC1qTj/EQB3tOKX7cMbWCbqzSflSDlGjpHAVqS3cOQnkvaG574kAPoPlHtqf
9OxnOj4p7gzvHV5V7gKo1hWlHZSoZENvObLlJDyY6a4fYes1IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8bpP95r5/paVA+L560sjwl2XPNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ5ZTNhNTEtZDZmYi0z
OWU3LTg5OWItNDdjOWE1MmJmYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFl0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABD8b65S48h/71+uAilXGEY8Tk1G6Wh4U22hR8NhCJn+O26TWlpv8n+I
NfApcAW7HidCCH0NgbPlPoSN+Y4jadUa9SSsiwhBt11GBdiHbLGH6GpQ+t0HGFNd
yU8xYvu6nwcVWq9KiSz3tRZWQQ+hNpTZ7GSNqjxKXy5tw9Eco21//mLFxB0Zpvbu
CrskHUuPYNu9JglTFUqqVj+mFvdNoQT0ZQWR3FNAWZA7xA5WllKB2en8bJdCcggP
Ph+FyEqu4Uoq2A81p02Y6M54yzAWkjLZyVc8h6RWOafztGbRvb0G1jnII1Oer1dp
0EImOonjXJoH05jPgabSrm0fAtRP9qw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:43 2025 by rpki-client