Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ce11add2-2434-326d-ba64-8179a04ba7ec.roa
File: ce11add2-2434-326d-ba64-8179a04ba7ec.roa (raw, json)
Hash identifier: 9uEPZyXTgG7xXOlExMse+lHS+/XELX4q0BzwnQDB0AQ=
Subject key identifier: 7F:A8:31:93:A5:FD:C7:D1:7A:EA:3C:E5:48:4A:F3:07:F5:63:8B:F3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094F7A6C3736F351F90B980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ce11add2-2434-326d-ba64-8179a04ba7ec.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 104.134.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f7:a6:c3:73:6f:35:1f:90:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=77c50b7c-6276-4f52-a5f2-ed8df6c92ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:03:85:a6:f8:58:d0:34:6e:f5:e5:fc:0e:
1a:79:f1:8e:42:99:35:12:58:7c:cf:1d:a4:5e:4e:
be:14:d9:69:d0:04:10:57:7a:d6:f3:86:a3:b1:4a:
ee:15:0a:d4:d5:59:7f:70:c5:3d:7b:6b:2c:a9:55:
81:7a:70:64:ea:ae:7b:4a:c2:60:01:a2:18:e5:4e:
3b:7e:b2:30:4d:34:e3:d7:61:1f:b9:5a:e5:5c:b7:
e4:c7:e7:3b:f1:aa:cc:e5:fb:f7:0e:45:f8:f0:24:
57:ff:48:64:6c:56:1e:f3:a8:17:75:7c:ca:c1:e7:
fc:a9:2e:fb:6b:7d:50:2f:c6:e0:d8:ee:fd:66:e1:
5d:e7:16:91:8b:2e:c4:20:aa:56:c4:ca:1e:da:47:
48:c9:45:12:7b:09:85:de:5e:ba:1a:b8:b6:df:e0:
1c:4b:4e:51:ba:2a:9c:fd:67:d4:1c:0c:9e:87:fd:
b2:ee:8d:1a:e6:36:b0:65:15:de:57:77:37:9d:d9:
24:57:5a:9b:34:58:13:2e:eb:fb:01:40:e9:2b:c8:
3b:44:12:07:07:0d:ee:f8:e8:9f:5a:65:85:37:cc:
94:c6:af:6a:03:71:c3:32:06:eb:d0:53:fd:16:54:
61:f6:a7:07:e7:14:2f:e6:37:1b:a9:30:e9:94:b3:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:31:93:A5:FD:C7:D1:7A:EA:3C:E5:48:4A:F3:07:F5:63:8B:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ce11add2-2434-326d-ba64-8179a04ba7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c2:21:6f:29:9d:5c:7a:dc:18:9e:ed:b6:41:c0:56:f4:5f:
35:0e:94:48:1f:db:24:a9:bc:3a:f9:20:87:f0:65:83:da:a5:
99:50:de:67:9e:3f:5b:7c:de:29:25:d4:69:1a:64:82:41:61:
ee:60:91:10:3e:a5:48:42:76:0d:8c:47:6e:f1:43:6e:cb:fd:
74:54:81:bd:22:4b:d8:59:0e:65:58:8f:01:63:e2:f3:31:d9:
bc:a2:fc:57:ab:df:c7:0c:96:2a:54:ec:61:3d:6f:f1:a6:af:
d0:e9:17:04:cf:47:1d:85:22:bb:46:0e:04:37:38:12:4c:4c:
0f:e0:83:3e:f0:ee:30:90:27:51:76:7e:5d:23:cf:cf:21:b3:
3f:86:43:32:84:df:7a:f4:70:35:c9:3e:69:d4:fa:6c:cb:aa:
c0:14:f6:59:6d:0f:1d:19:1b:e7:4d:86:c5:15:af:b7:3f:d9:
e5:3e:a4:7c:4f:b2:f2:41:da:47:8d:05:a9:b7:7a:ef:a3:0e:
93:33:35:16:82:26:60:3f:a4:35:64:c5:06:1a:a3:ab:b3:15:
4c:1c:f6:c6:8a:cd:cb:cb:b3:24:1f:c1:d4:a8:86:a1:0e:25:
34:ba:e9:a8:58:8d:50:ed:30:1e:d5:90:39:7e:c6:21:22:bc:
cb:d5:bb:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPemw3NvNR+QuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NzdjNTBiN2MtNjI3Ni00ZjUyLWE1ZjItZWQ4ZGY2YzkyY2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN0Dhab4WNA0bvXl/A4aefGOQpk1Elh8zx2k
Xk6+FNlp0AQQV3rW84ajsUruFQrU1Vl/cMU9e2ssqVWBenBk6q57SsJgAaIY5U47
frIwTTTj12EfuVrlXLfkx+c78arM5fv3DkX48CRX/0hkbFYe86gXdXzKwef8qS77
a31QL8bg2O79ZuFd5xaRiy7EIKpWxMoe2kdIyUUSewmF3l66Gri23+AcS05Ruiqc
/WfUHAyeh/2y7o0a5jawZRXeV3c3ndkkV1qbNFgTLuv7AUDpK8g7RBIHBw3u+Oif
WmWFN8yUxq9qA3HDMgbr0FP9FlRh9qcH5xQv5jcbqTDplLPZowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+oMZOl/cfReuo85UhK8wf1Y4vzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2UxMWFkZDItMjQzNC0z
MjZkLWJhNjQtODE3OWEwNGJhN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfCIW8pnVx63Bie7bZBwFb0XzUOlEgf2ySpvDr5IIfwZYPapZlQ3mee
P1t83ikl1GkaZIJBYe5gkRA+pUhCdg2MR27xQ27L/XRUgb0iS9hZDmVYjwFj4vMx
2byi/Fer38cMlipU7GE9b/Gmr9DpFwTPRx2FIrtGDgQ3OBJMTA/ggz7w7jCQJ1F2
fl0jz88hsz+GQzKE33r0cDXJPmnU+mzLqsAU9lltDx0ZG+dNhsUVr7c/2eU+pHxP
svJB2keNBam3eu+jDpMzNRaCJmA/pDVkxQYao6uzFUwc9saKzcvLsyQfwdSohqEO
JTS66ahYjVDtMB7VkDl+xiEivMvVuz4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:30 2025 by rpki-client