Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/6f2d980e-2549-3044-9c73-9be4d2448eb4.roa
File: 6f2d980e-2549-3044-9c73-9be4d2448eb4.roa (raw, json)
Hash identifier: gRt18/0eEjWak2k3UnMsuAVW7TkdlIb7p9ugqpRILJQ=
Subject key identifier: B6:FC:21:D9:0C:AC:A5:3C:E1:77:CE:36:35:18:7D:C4:06:B3:77:86
Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Certificate serial: 010D0C9F432858484C1023C9F46687DC71498AE0
Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/6f2d980e-2549-3044-9c73-9be4d2448eb4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399560
IP address blocks: 104.247.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:23:c9:f4:66:87:dc:71:49:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=043e572b-ba59-4ce7-9a62-6b184124b1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:d4:36:bb:f3:4b:97:60:ec:98:0c:46:ca:
69:0f:0a:b0:2b:3f:b8:8b:7f:39:12:21:26:46:6b:
85:d8:f9:73:06:dc:ff:3e:96:47:48:23:50:a7:a6:
f3:ff:fb:7e:fa:7f:d2:7b:ae:06:5a:54:18:d0:a9:
69:69:81:99:4d:48:b4:96:36:15:11:f5:9e:e1:6e:
18:95:09:fb:80:76:ff:29:97:01:52:2f:8f:8d:21:
07:ac:fd:72:1a:d5:4f:67:60:ea:b5:e0:03:0f:42:
e2:96:e7:ff:b6:25:f6:49:bf:03:98:f3:8c:88:ef:
bc:4c:aa:49:4e:fc:b3:e9:ca:c4:51:b7:74:96:26:
e8:f3:43:74:c5:d2:4d:ef:5f:99:da:d7:a6:9f:f8:
ee:45:72:69:e1:9d:2a:6e:d1:72:65:a6:a4:e8:67:
d1:9b:33:34:da:74:a8:82:13:17:da:dd:84:6b:4c:
08:24:4f:6e:5e:c9:40:d9:ab:68:fa:fe:9a:82:7f:
04:e4:c1:4a:ce:c8:27:57:9e:8f:13:40:36:34:9d:
46:c5:e7:dd:24:43:33:a4:33:0f:64:02:c7:2b:67:
85:4a:a3:8e:20:b1:3c:67:e2:04:2a:f5:98:50:39:
7a:7f:52:77:66:58:45:e8:8f:61:66:cf:65:94:0e:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:21:D9:0C:AC:A5:3C:E1:77:CE:36:35:18:7D:C4:06:B3:77:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/6f2d980e-2549-3044-9c73-9be4d2448eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl
X509v3 Authority Key Identifier:
keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5f:02:20:32:d7:15:db:b1:d1:d9:c4:ab:36:93:31:92:65:
b3:a7:ff:ea:b5:76:e1:2a:79:c1:8c:20:a6:0a:c7:81:cc:80:
52:5d:6c:ab:95:12:3c:85:f7:a7:eb:78:55:73:6e:08:db:e4:
99:77:51:39:a3:3b:d8:c5:ee:76:79:45:1f:3f:80:08:bf:11:
d1:af:4b:3d:b0:86:dc:97:a2:33:b5:9b:bc:00:a7:78:76:82:
37:2b:64:9c:41:36:9a:3b:4d:5b:0c:58:80:0d:ef:5f:3c:63:
45:7c:b5:fa:3b:c3:2f:7e:d6:a3:1a:6d:70:ba:37:c2:71:b8:
98:1f:38:78:51:e7:c0:55:33:fe:c9:a7:db:6e:26:0c:77:ed:
81:31:d1:2a:f0:97:0e:68:d4:1b:4d:27:1f:0e:92:15:0d:9f:
bb:90:65:9b:80:fd:f0:37:49:04:f6:8d:5a:92:6e:d4:8d:77:
df:ed:68:94:73:a8:f3:54:26:c1:be:a5:d8:76:f1:74:d5:ee:
74:92:53:c3:3d:67:3d:41:07:fa:64:ea:1a:18:bd:27:b5:32:
24:1e:3b:4f:73:9b:81:62:28:9e:a2:1a:82:76:96:a4:ec:79:
92:eb:3d:09:e8:8c:1e:6c:3d:af:be:32:6e:5b:d6:9b:ca:10:
89:8a:74:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECPJ9GaH3HFJiuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3
ODBiMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MDQzZTU3MmItYmE1OS00Y2U3LTlhNjItNmIxODQxMjRiMWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZLUNrvzS5dg7JgMRsppDwqwKz+4i385EiEm
RmuF2PlzBtz/PpZHSCNQp6bz//t++n/Se64GWlQY0KlpaYGZTUi0ljYVEfWe4W4Y
lQn7gHb/KZcBUi+PjSEHrP1yGtVPZ2DqteADD0Liluf/tiX2Sb8DmPOMiO+8TKpJ
Tvyz6crEUbd0libo80N0xdJN71+Z2temn/juRXJp4Z0qbtFyZaak6GfRmzM02nSo
ghMX2t2Ea0wIJE9uXslA2ato+v6agn8E5MFKzsgnV56PE0A2NJ1GxefdJEMzpDMP
ZALHK2eFSqOOILE8Z+IEKvWYUDl6f1J3ZlhF6I9hZs9llA68nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLb8IdkMrKU84XfONjUYfcQGs3eGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3
OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvNmYyZDk4MGUtMjU0OS0z
MDQ0LTljNzMtOWJlNGQyNDQ4ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5
Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh
NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw
Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVfAiAy1xXbsdHZxKs2kzGSZbOn/+q1duEqecGMIKYKx4HMgFJdbKuV
EjyF96freFVzbgjb5Jl3UTmjO9jF7nZ5RR8/gAi/EdGvSz2whtyXojO1m7wAp3h2
gjcrZJxBNpo7TVsMWIAN7188Y0V8tfo7wy9+1qMabXC6N8JxuJgfOHhR58BVM/7J
p9tuJgx37YEx0Srwlw5o1BtNJx8OkhUNn7uQZZuA/fA3SQT2jVqSbtSNd9/taJRz
qPNUJsG+pdh28XTV7nSSU8M9Zz1BB/pk6hoYvSe1MiQeO09zm4FiKJ6iGoJ2lqTs
eZLrPQnojB5sPa++Mm5b1pvKEImKdHo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:09 2025 by rpki-client