Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50c7da64-9502-3c72-ba7c-86f8262ec860.roa
File: 50c7da64-9502-3c72-ba7c-86f8262ec860.roa (raw, json)
Hash identifier: ovEtRAnsRmk0tbPvyJRQqq5yBIayE5dKbjYLOFV/RzY=
Subject key identifier: 17:92:16:B5:48:41:61:D4:70:3F:FF:08:32:D8:9F:A4:50:4B:E8:72
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AF610700CD8C62AC1580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50c7da64-9502-3c72-ba7c-86f8262ec860.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.99.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:af:61:07:00:cd:8c:62:ac:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=db21e6c4-3f5c-4a2e-9ffe-479a9f0e1a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:3c:ad:b5:7e:94:6c:5c:d1:b6:39:56:17:
b5:f8:d1:e2:88:93:2b:25:a9:96:45:4b:4e:3c:1f:
20:bf:73:07:b3:36:f3:9b:16:98:9b:cd:07:d9:4d:
80:1c:45:d2:ab:3b:82:c0:66:4e:b3:34:36:27:2d:
de:91:d6:30:ca:30:62:82:ce:47:b6:9b:c7:b8:7e:
1c:a2:93:13:81:24:43:52:25:fa:f9:ab:14:d4:fd:
20:f1:d5:90:c1:d5:3d:cd:28:54:14:a3:a7:ab:e6:
96:63:73:ca:84:6e:2b:f4:cf:74:72:2d:ca:9b:11:
77:7b:77:d8:da:1c:64:da:76:28:28:7f:d6:10:05:
95:6b:57:8c:f6:40:cd:63:0a:34:38:ac:e4:04:5d:
6c:68:c4:25:d2:64:31:e1:b6:c4:b1:54:4e:e9:2f:
31:89:af:1a:bc:86:c1:df:9e:7b:a2:82:49:d2:fe:
5d:2c:65:af:c6:cb:91:de:b7:7e:e5:5e:18:01:25:
8d:4c:bc:3e:61:ed:ea:51:91:ef:23:2b:90:6f:c0:
2a:e1:54:3c:8b:20:20:54:22:6a:9e:2c:19:07:ce:
17:d5:dc:4f:83:87:14:14:c6:04:0d:0a:23:c1:37:
cd:2d:d1:ee:33:5f:7d:78:46:6b:f7:fc:35:8e:a2:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:16:B5:48:41:61:D4:70:3F:FF:08:32:D8:9F:A4:50:4B:E8:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50c7da64-9502-3c72-ba7c-86f8262ec860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.99.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:50:52:92:9b:d2:7c:37:e8:11:e3:71:6d:f6:d8:7b:45:62:
b0:ce:96:60:c9:9f:10:7c:ab:0d:0d:c5:36:d2:3b:c3:06:fd:
d3:04:a6:82:c4:be:fd:72:21:35:41:0d:3f:39:71:f8:9f:51:
8f:ee:5f:1a:46:47:65:5a:c0:71:68:14:50:5a:91:b0:8b:89:
86:40:92:72:64:fa:08:20:37:25:47:dd:eb:b2:fc:5c:d2:ac:
78:bc:80:2e:b4:27:87:5c:c8:3b:a5:6b:21:de:d9:22:23:ab:
20:61:1c:14:56:30:3d:ef:d9:39:22:d4:13:94:ed:8f:22:6a:
db:61:08:cd:f0:8d:94:d9:ab:a1:6d:a5:f7:3f:1c:ea:51:e1:
32:59:ec:6b:59:f4:0c:e3:6b:40:e8:2c:b9:e0:98:15:31:a9:
73:03:25:ed:11:f8:bf:1c:49:27:86:63:2c:5f:2a:c0:ae:e3:
a4:86:9b:b9:33:a9:16:32:e2:42:07:a4:d0:22:bc:95:72:71:
70:03:f6:45:3d:60:d4:05:5b:25:e3:e6:b6:d1:7c:a2:74:f8:
07:22:51:58:96:cc:08:da:3c:71:5d:e0:4c:fb:91:e0:a2:b4:
6c:e2:46:7b:76:4b:d7:39:7a:bb:6f:07:d7:f9:1c:68:a2:8b:
b6:23:a8:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1a9hBwDNjGKsFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZGIyMWU2YzQtM2Y1Yy00YTJlLTlmZmUtNDc5YTlmMGUxYTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPI8rbV+lGxc0bY5Vhe1+NHiiJMrJamWRUtO
PB8gv3MHszbzmxaYm80H2U2AHEXSqzuCwGZOszQ2Jy3ekdYwyjBigs5HtpvHuH4c
opMTgSRDUiX6+asU1P0g8dWQwdU9zShUFKOnq+aWY3PKhG4r9M90ci3KmxF3e3fY
2hxk2nYoKH/WEAWVa1eM9kDNYwo0OKzkBF1saMQl0mQx4bbEsVRO6S8xia8avIbB
3557ooJJ0v5dLGWvxsuR3rd+5V4YASWNTLw+Ye3qUZHvIyuQb8Aq4VQ8iyAgVCJq
niwZB84X1dxPg4cUFMYEDQojwTfNLdHuM199eEZr9/w1jqKyAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBeSFrVIQWHUcD//CDLYn6RQS+hyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTBjN2RhNjQtOTUwMi0z
YzcyLWJhN2MtODZmODI2MmVjODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGPuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxQUpKb0nw36BHjcW322HtFYrDOlmDJnxB8qw0NxTbSO8MG/dMEpoLE
vv1yITVBDT85cfifUY/uXxpGR2VawHFoFFBakbCLiYZAknJk+gggNyVH3euy/FzS
rHi8gC60J4dcyDulayHe2SIjqyBhHBRWMD3v2Tki1BOU7Y8iatthCM3wjZTZq6Ft
pfc/HOpR4TJZ7GtZ9Azja0DoLLngmBUxqXMDJe0R+L8cSSeGYyxfKsCu46SGm7kz
qRYy4kIHpNAivJVycXAD9kU9YNQFWyXj5rbRfKJ0+AciUViWzAjaPHFd4Ez7keCi
tGziRnt2S9c5ertvB9f5HGiii7YjqGE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:02 2025 by rpki-client