Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa
File: 11f297f1-e2e1-3d90-99a4-085567eae50e.roa (raw, json)
Hash identifier: GZDEEKjD52wuq/tkdxLAq/jwUjjdwlXTjaofjB/fw5Q=
Subject key identifier: D7:BA:3E:36:47:09:CC:4C:0A:DE:09:BC:3C:E6:01:C9:A7:6C:59:B2
Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial: 010D0C9F43285848143A81E428E514486F3D4680
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 201814
IP address blocks: 104.245.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:81:e4:28:e5:14:48:6f:3d:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=952567cf-99c3-469c-afea-8f3c8e6f7166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:6d:6c:a7:11:81:3b:4b:8d:7e:29:88:3c:
4b:c1:de:7b:db:2b:45:e7:73:a1:80:4a:aa:27:f7:
87:ca:c3:b5:89:95:40:6d:3d:28:48:8b:e3:51:0f:
90:8c:cf:0f:99:29:d7:05:0a:3b:bb:b8:b1:66:11:
39:30:9e:08:1b:2a:b9:7e:22:d2:b8:e5:47:1e:e2:
42:63:eb:87:ba:31:e7:6e:3e:6f:d3:4a:ad:4b:f8:
fd:43:09:7b:2e:c3:f7:7a:36:27:ff:7a:3a:46:42:
ae:72:49:8d:1d:fa:19:0a:11:28:be:b0:98:83:38:
12:e9:57:81:9c:e2:f4:d5:81:88:b9:0e:04:c2:5c:
75:b8:d8:0c:50:ab:18:37:14:89:e2:67:df:48:28:
12:00:94:4f:64:18:94:cd:ca:da:e3:ba:89:ae:12:
48:64:6a:46:3f:de:26:fa:3c:c9:fa:a9:4d:b7:69:
f1:69:6f:e1:2e:1c:c3:0d:37:8f:5d:c8:5c:ad:a7:
61:d2:d9:48:5c:38:39:95:d8:b1:7f:cc:7c:a9:5b:
ac:ea:b0:32:02:dd:48:e6:9f:44:55:b3:50:3d:bb:
8a:5c:b3:8a:c3:77:66:68:b8:15:ec:be:f6:fa:bd:
74:b4:da:6a:0e:d1:2c:bf:5f:73:b3:a3:a3:aa:db:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BA:3E:36:47:09:CC:4C:0A:DE:09:BC:3C:E6:01:C9:A7:6C:59:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/11f297f1-e2e1-3d90-99a4-085567eae50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
X509v3 Authority Key Identifier:
keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a1:8d:55:1b:ff:24:56:84:90:a3:fd:17:3f:4a:bb:e0:41:
75:91:ec:50:a0:04:ad:24:2a:09:86:f4:7c:b9:9d:2b:cf:47:
92:3b:98:91:68:5a:af:84:43:d6:0b:0e:23:fc:11:73:87:4c:
0b:3f:1c:50:5d:c3:24:b0:12:d3:2d:b6:9d:70:1f:16:36:9b:
18:dd:5b:90:7a:60:44:50:f1:29:16:b1:cf:7f:f9:e1:7a:9c:
2f:23:84:fa:e0:0f:78:2e:9d:43:cf:ea:35:f0:1c:37:4c:be:
64:00:3e:11:ed:e7:42:3b:bc:f8:46:57:71:d2:14:42:cc:1d:
60:58:67:56:3e:0e:90:c3:21:82:7c:c7:4f:6a:38:db:56:e8:
ae:6e:a9:df:92:a0:fa:2f:d1:c5:91:46:e4:93:28:cb:a1:b4:
f0:6e:2d:cd:40:d0:16:af:39:02:07:49:fb:cb:c1:58:ec:a1:
10:48:3a:83:df:be:d3:a9:0a:8b:e2:d4:97:0c:4f:a3:cd:2f:
6d:ba:05:42:69:89:09:b6:9b:cd:82:89:91:9b:c1:82:5c:fb:
87:e4:85:18:82:19:bb:ee:cc:35:20:9e:cc:0b:38:ff:f4:88:
df:25:73:98:7e:c3:91:56:ac:c5:a9:76:a8:0f:7a:a3:ce:5e:
e6:e9:e7:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoHkKOUUSG89RoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky
Yjg2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OTUyNTY3Y2YtOTljMy00NjljLWFmZWEtOGYzYzhlNmY3MTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9BtbKcRgTtLjX4piDxLwd572ytF53OhgEqq
J/eHysO1iZVAbT0oSIvjUQ+QjM8PmSnXBQo7u7ixZhE5MJ4IGyq5fiLSuOVHHuJC
Y+uHujHnbj5v00qtS/j9Qwl7LsP3ejYn/3o6RkKuckmNHfoZChEovrCYgzgS6VeB
nOL01YGIuQ4Ewlx1uNgMUKsYNxSJ4mffSCgSAJRPZBiUzcra47qJrhJIZGpGP94m
+jzJ+qlNt2nxaW/hLhzDDTePXchcradh0tlIXDg5ldixf8x8qVus6rAyAt1I5p9E
VbNQPbuKXLOKw3dmaLgV7L72+r10tNpqDtEsv19zs6OjqtsNoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNe6PjZHCcxMCt4JvDzmAcmnbFmyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh
YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMTFmMjk3ZjEtZTJlMS0z
ZDkwLTk5YTQtMDg1NTY3ZWFlNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5
YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5
MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy
Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPX1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKhjVUb/yRWhJCj/Rc/SrvgQXWR7FCgBK0kKgmG9Hy5nSvPR5I7mJFo
Wq+EQ9YLDiP8EXOHTAs/HFBdwySwEtMttp1wHxY2mxjdW5B6YERQ8SkWsc9/+eF6
nC8jhPrgD3gunUPP6jXwHDdMvmQAPhHt50I7vPhGV3HSFELMHWBYZ1Y+DpDDIYJ8
x09qONtW6K5uqd+SoPov0cWRRuSTKMuhtPBuLc1A0BavOQIHSfvLwVjsoRBIOoPf
vtOpCovi1JcMT6PNL226BUJpiQm2m82CiZGbwYJc+4fkhRiCGbvuzDUgnswLOP/0
iN8lc5h+w5FWrMWpdqgPeqPOXubp5yw=
-----END CERTIFICATE-----
Generated at Wed May 7 21:09:56 2025 by rpki-client