Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3279f1f2-441b-3f22-8049-482faccb6796.roa
File: 3279f1f2-441b-3f22-8049-482faccb6796.roa (raw, json)
Hash identifier: oryNi/Wrp0EnEFNTRT42+/CUuZkfs4qbyhzxg4Oi2GU=
Subject key identifier: 05:FC:EC:83:9D:9A:2A:D8:8C:83:D7:87:A3:1E:7E:02:FA:E5:B1:8E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9C7AB6017922D582C240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3279f1f2-441b-3f22-8049-482faccb6796.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:7a:b6:01:79:22:d5:82:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=ea761671-bf12-46f8-bc96-b9ee9391c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:ba:52:f6:21:dd:48:bd:22:04:47:6e:72:
9c:fb:42:62:98:e4:11:1e:22:8a:e9:f7:97:a4:0d:
84:dd:75:59:aa:7d:91:e0:0c:af:7c:8d:78:7e:d0:
d8:5f:f9:03:d0:49:d9:d9:3e:51:c2:9e:e3:1d:23:
1b:3c:5a:aa:41:d0:47:73:57:62:d0:d3:d0:a0:3e:
a2:21:ce:9c:96:5d:1d:c6:95:af:83:a8:ca:77:36:
5c:bd:fa:74:50:43:a7:3c:08:7b:52:c0:15:f7:88:
34:58:44:79:3f:ba:08:69:b0:48:c5:eb:12:87:ef:
0c:64:a2:b6:98:5c:5b:c1:f5:4c:9a:12:78:41:76:
46:55:c5:3e:6f:cd:3f:d8:9e:08:30:59:dc:5e:4e:
ef:6c:bc:70:10:dd:40:0d:c2:24:5b:47:8f:d1:13:
01:9d:1e:70:79:62:28:7b:7b:4c:cc:b3:d1:f9:98:
2b:a5:18:df:ae:45:69:d3:6f:5a:1f:5d:8a:d2:ff:
a9:cc:bd:da:2d:d2:08:d0:dd:cd:47:00:32:f3:c2:
81:4c:ae:40:fc:e8:91:dc:25:71:66:c0:ee:e7:fa:
99:59:4d:f6:eb:41:7b:d5:9c:8a:b7:90:11:dc:66:
bd:9c:15:10:f0:67:50:13:ab:e3:b6:31:d6:7f:79:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:EC:83:9D:9A:2A:D8:8C:83:D7:87:A3:1E:7E:02:FA:E5:B1:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3279f1f2-441b-3f22-8049-482faccb6796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b6:f0:33:de:66:e0:72:2e:04:58:fe:db:1c:df:d8:4e:9a:
95:ea:60:8e:91:0d:d2:24:a4:cd:90:25:6d:ca:bb:63:7b:ed:
5e:f3:2d:8b:46:98:fa:3d:48:13:de:c5:f0:1c:0f:7b:f8:3b:
cf:a6:48:a6:02:f3:8c:b7:5b:eb:4e:b3:36:45:56:ac:e2:8b:
96:41:04:c7:de:3c:f7:12:bf:d1:83:70:c6:39:13:7c:74:bb:
d2:34:8f:26:37:58:e6:42:65:01:cb:7e:b6:80:bf:3a:a8:0f:
38:ee:2f:52:70:c9:a7:e1:a7:bc:64:7e:db:59:f1:95:c2:0c:
44:65:01:32:8c:f2:b7:3d:c4:c4:ac:25:da:9a:6e:4a:9f:7d:
76:62:d5:e2:11:47:19:4b:8a:2d:1b:33:ad:05:ba:66:80:82:
85:6b:4f:2b:83:fc:ff:e2:af:d9:37:54:f8:13:f2:fe:49:dc:
fb:23:35:1a:e2:24:f8:30:8b:c4:79:00:21:7b:df:95:a8:13:
5e:cb:8e:32:96:81:15:9d:74:aa:12:fc:8f:ae:bf:7a:73:8b:
e3:a7:00:fe:ab:fa:55:b5:8d:75:d6:a7:f6:56:29:12:69:77:
4f:f6:5a:88:1c:01:ef:3c:5b:70:75:54:66:3c:b6:6a:39:8f:
7f:38:b6:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCpx6tgF5ItWCwkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
ZWE3NjE2NzEtYmYxMi00NmY4LWJjOTYtYjllZTkzOTFjNjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5+6UvYh3Ui9IgRHbnKc+0JimOQRHiKK6feX
pA2E3XVZqn2R4AyvfI14ftDYX/kD0EnZ2T5Rwp7jHSMbPFqqQdBHc1di0NPQoD6i
Ic6cll0dxpWvg6jKdzZcvfp0UEOnPAh7UsAV94g0WER5P7oIabBIxesSh+8MZKK2
mFxbwfVMmhJ4QXZGVcU+b80/2J4IMFncXk7vbLxwEN1ADcIkW0eP0RMBnR5weWIo
e3tMzLPR+ZgrpRjfrkVp029aH12K0v+pzL3aLdII0N3NRwAy88KBTK5A/OiR3CVx
ZsDu5/qZWU3260F71ZyKt5AR3Ga9nBUQ8GdQE6vjtjHWf3l/RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAX87IOdmirYjIPXh6MefgL65bGOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI3OWYxZjItNDQxYi0z
ZjIyLTgwNDktNDgyZmFjY2I2Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq28DPeZuByLgRY/tsc39hOmpXqYI6RDdIkpM2QJW3Ku2N77V7zLYtG
mPo9SBPexfAcD3v4O8+mSKYC84y3W+tOszZFVqzii5ZBBMfePPcSv9GDcMY5E3x0
u9I0jyY3WOZCZQHLfraAvzqoDzjuL1Jwyafhp7xkfttZ8ZXCDERlATKM8rc9xMSs
JdqabkqffXZi1eIRRxlLii0bM60FumaAgoVrTyuD/P/ir9k3VPgT8v5J3PsjNRri
JPgwi8R5ACF735WoE17LjjKWgRWddKoS/I+uv3pzi+OnAP6r+lW1jXXWp/ZWKRJp
d0/2WogcAe88W3B1VGY8tmo5j384tlY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:38 2025 by rpki-client