Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
File: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json)
Hash identifier: wHMB4nN3i7GpuSS2BCrQJ2r/rZw5AIAcHibUFWz8Xfw=
Subject key identifier: 06:C7:77:17:F2:B5:2E:AB:DA:92:EA:23:E9:0E:B3:24:7A:CA:49:DB
Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead
Certificate serial: 010D0C9F432858480644FFBC1C689347C3DF81C0
Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 63447
IP address blocks: 104.245.200.0/22 maxlen: 22
204.107.204.0/24 maxlen: 24
2602:ff98::/36 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:ff:bc:1c:68:93:47:c3:df:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=4ce642c0-18c6-4a9c-9be8-9e75350e877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:dc:e2:0b:46:04:5d:d9:d8:77:f1:9a:f5:
a9:98:9f:10:45:77:7c:d3:f3:c1:b2:70:5c:93:ee:
1e:8d:79:d6:fd:ab:20:ca:e8:ae:0e:4d:92:78:17:
f5:61:c3:ad:13:90:81:f1:2b:ae:47:bf:2b:c2:51:
d7:ba:72:dd:fa:46:d9:d0:db:29:72:f8:39:d2:4e:
7f:d5:82:0c:90:7b:b3:9e:5c:9e:00:73:28:50:f5:
4c:d9:31:03:f1:e3:59:3d:82:58:5c:54:b8:f6:5a:
dd:29:27:d3:06:9a:cd:63:6c:2a:77:df:2c:36:c6:
93:bb:a7:cd:da:43:b0:12:dd:2b:fb:f0:7a:7e:0b:
74:59:a1:53:a3:35:50:f0:c2:96:8b:fb:70:7e:1b:
2c:fe:f5:41:9f:e9:c6:da:67:31:9a:26:86:c1:89:
72:72:4e:bf:91:1f:a6:3e:3d:0b:a4:5d:ea:84:bd:
b6:5b:c0:cd:c6:f4:c5:76:29:29:9f:49:1f:b5:29:
54:9b:50:d9:29:79:45:9f:7f:f8:b0:eb:c6:6d:3b:
d9:ac:39:a0:c0:d1:a6:0c:87:9a:99:b7:85:7f:f2:
ec:8a:95:1d:6d:bc:c1:32:90:14:03:54:ae:94:9d:
be:ce:4f:ff:79:4f:2a:8e:7d:ba:ae:37:8f:ad:b5:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:77:17:F2:B5:2E:AB:DA:92:EA:23:E9:0E:B3:24:7A:CA:49:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl
X509v3 Authority Key Identifier:
keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.200.0/22
204.107.204.0/24
IPv6:
2602:ff98::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:7d:7a:c4:41:c6:bb:33:46:f8:1b:47:4e:c2:5e:83:21:72:
9c:25:02:53:a5:f4:64:85:80:5a:04:72:cb:d2:c6:29:8a:31:
3f:39:88:0a:41:4c:0e:7e:98:99:b6:c9:23:bc:45:df:74:dd:
1d:43:1f:53:ae:c1:29:4b:69:4b:b0:93:47:24:de:e3:61:27:
26:5b:92:b9:30:03:b7:6f:c0:ef:71:5d:99:39:91:a7:a0:f8:
67:1e:5e:84:46:5d:46:fb:a7:ae:82:64:cf:93:7c:42:a1:86:
a1:88:7a:c6:53:91:b2:dc:d6:f1:0a:0b:d0:b9:9d:cf:fa:3a:
56:4c:95:86:af:fd:8a:b3:54:9f:af:87:2a:31:e5:dc:12:2d:
a7:0b:15:9b:e5:b8:fd:4c:d0:92:1c:9b:39:f2:b7:e5:32:5c:
05:a6:49:6e:1c:7f:7e:9a:71:68:f8:b4:57:0e:a1:30:df:62:
90:b3:f8:78:63:93:f3:30:83:14:9b:1e:5c:a4:7e:9f:fe:c1:
68:28:99:f9:b4:69:13:94:78:89:e7:02:ca:1f:3d:aa:e6:30:
e5:36:2e:8f:22:ee:12:1c:0e:2c:d4:6f:13:3c:65:3f:7a:e3:
b0:42:58:88:da:2a:27:8e:f0:87:18:dc:1e:aa:ce:e6:c3:b4:
bc:c5:63:b4
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEgGRP+8HGiTR8PfgcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi
ZWFkMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NGNlNjQyYzAtMThjNi00YTljLTliZTgtOWU3NTM1MGU4NzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz7c4gtGBF3Z2HfxmvWpmJ8QRXd80/PBsnBc
k+4ejXnW/asgyuiuDk2SeBf1YcOtE5CB8SuuR78rwlHXunLd+kbZ0Nspcvg50k5/
1YIMkHuznlyeAHMoUPVM2TED8eNZPYJYXFS49lrdKSfTBprNY2wqd98sNsaTu6fN
2kOwEt0r+/B6fgt0WaFTozVQ8MKWi/twfhss/vVBn+nG2mcxmiaGwYlyck6/kR+m
Pj0LpF3qhL22W8DNxvTFdikpn0kftSlUm1DZKXlFn3/4sOvGbTvZrDmgwNGmDIea
mbeFf/LsipUdbbzBMpAUA1SulJ2+zk//eU8qjn26rjePrbVumwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFAbHdxfytS6r2pLqI+kOsyR6yknbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy
MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvOGE1YzBlOTAtZWM2Yi0z
YWM4LTg1ZDctOTA4Zjg4MGU3MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh
NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx
YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3
OWVjMWJlYWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCaPXIAwQA
zGvMMA4EAgACMAgDBgQmAv+YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+fXrEQca7M0b4G0dOwl6DIXKc
JQJTpfRkhYBaBHLL0sYpijE/OYgKQUwOfpiZtskjvEXfdN0dQx9TrsEpS2lLsJNH
JN7jYScmW5K5MAO3b8DvcV2ZOZGnoPhnHl6ERl1G+6eugmTPk3xCoYahiHrGU5Gy
3NbxCgvQuZ3P+jpWTJWGr/2Ks1Sfr4cqMeXcEi2nCxWb5bj9TNCSHJs58rflMlwF
pkluHH9+mnFo+LRXDqEw32KQs/h4Y5PzMIMUmx5cpH6f/sFoKJn5tGkTlHiJ5wLK
Hz2q5jDlNi6PIu4SHA4s1G8TPGU/euOwQliI2ionjvCHGNweqs7mw7S8xWO0
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:28 2025 by rpki-client