Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f8cc91e-1da1-379b-9b77-40a4bdf9fce7.roa
File: 7f8cc91e-1da1-379b-9b77-40a4bdf9fce7.roa (raw, json)
Hash identifier: eoFMqCEV9gy6T2M5/GykdjnE2kUnuqFLjUnkBkQOUZU=
Subject key identifier: 17:CB:B1:FC:C8:4B:24:E7:93:52:4B:6F:1F:A0:8B:FF:EE:82:76:9D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5ACBE1D57D441CA3B5900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f8cc91e-1da1-379b-9b77-40a4bdf9fce7.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.94.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ac:be:1d:57:d4:41:ca:3b:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=6a87750d-ea77-40c6-91ac-d36f7d1d4ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:35:ee:bd:86:fc:14:c6:6b:f0:eb:a0:61:
f1:02:e8:73:43:36:5e:34:da:ed:5a:e6:04:d6:43:
52:f0:b9:16:7f:f8:51:eb:4e:63:ed:00:19:ba:50:
e8:6b:b0:cb:8f:36:b3:61:e4:71:dc:b7:22:c2:54:
28:93:1b:12:37:6b:e2:90:53:e2:75:7c:d4:55:66:
4b:60:3f:c2:a2:48:c6:3c:fb:e5:58:a1:55:95:f1:
0d:bc:ca:f4:60:da:a5:0e:1e:ee:4a:a3:96:61:18:
67:f4:fe:f7:3c:5e:4c:52:62:a6:47:c8:d4:b6:36:
7c:09:32:ba:43:07:ba:12:10:56:9f:bd:64:33:58:
17:ce:30:1c:58:8a:1a:8e:a9:6f:ac:0a:dd:6a:af:
a3:38:87:53:5f:28:80:92:8a:8b:6d:5f:8e:66:91:
90:54:59:39:26:48:53:58:8c:85:4c:5c:68:be:17:
cc:72:6b:04:1c:6d:a6:fc:3e:ae:e7:79:b3:af:24:
44:3d:ac:41:c3:83:c5:79:50:a8:8b:13:43:12:86:
03:42:da:71:fb:16:0e:9b:eb:b9:ad:3e:32:af:75:
60:52:55:02:ee:f5:f0:70:25:d5:76:4c:00:6b:3d:
c1:34:af:d8:31:5c:bb:ff:b8:84:4b:c3:3e:8a:f1:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CB:B1:FC:C8:4B:24:E7:93:52:4B:6F:1F:A0:8B:FF:EE:82:76:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f8cc91e-1da1-379b-9b77-40a4bdf9fce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.94.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:72:7a:52:86:8a:a2:a1:ee:cd:10:a0:0d:0c:88:9e:d3:9c:
23:e4:39:8c:24:81:5c:c1:53:7c:01:2c:cb:ef:a4:f3:c3:be:
ca:1e:03:9e:ba:25:08:39:47:c4:a8:a6:58:19:a7:50:e1:4f:
a9:c2:0c:62:e2:c1:87:8e:51:f4:b5:d1:0b:1b:3a:44:94:cf:
fa:3b:aa:fd:39:33:35:f3:c1:7b:7b:5d:8c:3d:78:5a:d0:5b:
f9:29:70:11:1f:ed:d3:38:13:99:f6:15:c3:0d:40:dc:1a:89:
de:4f:a9:8e:51:5f:f2:c2:c0:25:78:d0:4f:ec:ed:f8:da:d0:
b6:3a:5d:3a:5d:af:a3:b0:25:8c:5d:bd:05:76:20:6b:fa:7c:
54:ae:1a:5b:26:35:c0:29:3a:e6:44:c1:cc:dc:44:bc:a5:9a:
d6:59:c3:bc:b6:e0:2d:69:0d:b0:b0:9c:29:9d:7c:34:af:ba:
b3:6b:a5:f4:40:8c:c6:44:5f:f2:db:fc:fa:5d:d2:93:34:df:
d2:1c:de:4a:12:49:c0:6d:53:67:60:69:bc:39:ac:c4:c2:03:
33:32:d9:37:7f:7d:01:1e:3f:0a:d8:06:2f:18:d7:b2:cb:16:
81:28:94:8d:0e:9b:70:7c:4e:9f:fa:f3:6d:fc:dc:98:2c:ca:
d2:80:79:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1ay+HVfUQco7WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NmE4Nzc1MGQtZWE3Ny00MGM2LTkxYWMtZDM2ZjdkMWQ0YmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3A17r2G/BTGa/DroGHxAuhzQzZeNNrtWuYE
1kNS8LkWf/hR605j7QAZulDoa7DLjzazYeRx3LciwlQokxsSN2vikFPidXzUVWZL
YD/CokjGPPvlWKFVlfENvMr0YNqlDh7uSqOWYRhn9P73PF5MUmKmR8jUtjZ8CTK6
Qwe6EhBWn71kM1gXzjAcWIoajqlvrArdaq+jOIdTXyiAkoqLbV+OZpGQVFk5JkhT
WIyFTFxovhfMcmsEHG2m/D6u53mzryREPaxBw4PFeVCoixNDEoYDQtpx+xYOm+u5
rT4yr3VgUlUC7vXwcCXVdkwAaz3BNK/YMVy7/7iES8M+ivFfZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfLsfzISyTnk1JLbx+gi//ugnadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Y4Y2M5MWUtMWRhMS0z
NzliLTliNzctNDBhNGJkZjlmY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaF7YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACByelKGiqKh7s0QoA0MiJ7TnCPkOYwkgVzBU3wBLMvvpPPDvsoeA566
JQg5R8SoplgZp1DhT6nCDGLiwYeOUfS10QsbOkSUz/o7qv05MzXzwXt7XYw9eFrQ
W/kpcBEf7dM4E5n2FcMNQNwaid5PqY5RX/LCwCV40E/s7fja0LY6XTpdr6OwJYxd
vQV2IGv6fFSuGlsmNcApOuZEwczcRLylmtZZw7y24C1pDbCwnCmdfDSvurNrpfRA
jMZEX/Lb/Ppd0pM039Ic3koSScBtU2dgabw5rMTCAzMy2Td/fQEePwrYBi8Y17LL
FoEolI0Om3B8Tp/682383JgsytKAeQc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:28 2025 by rpki-client