Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dd5d885-c020-3cb0-b636-1498e7322baf.roa
File: 9dd5d885-c020-3cb0-b636-1498e7322baf.roa (raw, json)
Hash identifier: 0mGxauVr1rTrQaU3EzOW+G2n+eJwpxh4mMV4/5VpldU=
Subject key identifier: 57:C8:40:AB:94:E4:04:1D:5D:2B:30:14:2D:66:DB:D8:34:3A:45:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AFBF511702BD64963B740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dd5d885-c020-3cb0-b636-1498e7322baf.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.77.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fb:f5:11:70:2b:d6:49:63:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=f9518255-e03f-4bcc-bc93-71de15effd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:91:26:eb:dd:7b:22:a8:89:66:77:98:71:
b0:5e:7e:19:8e:78:23:2c:41:16:c2:cf:a0:14:ca:
72:02:5a:6d:55:e1:77:87:d6:3d:76:15:c7:8f:22:
10:e8:4a:a8:bc:b8:f2:0e:bf:22:f2:ae:1d:f3:79:
02:8c:65:fe:53:b6:86:dd:f9:2e:00:97:36:95:c1:
b7:72:7b:d7:24:1f:bf:6d:35:68:01:71:90:3d:43:
ff:7b:5e:fb:af:21:75:74:94:f1:b7:1d:9b:eb:3d:
2a:e0:d9:61:81:1d:b9:16:9b:30:9d:2b:84:fb:3c:
00:c4:bf:c5:24:1d:2f:22:d0:e4:ca:2a:94:f6:0c:
05:52:a0:0c:5a:9d:38:9d:60:1b:9e:58:20:44:5a:
8b:be:79:95:28:05:c5:65:d3:3c:d7:44:bc:06:e9:
fe:17:ae:7f:1a:60:97:6a:7f:2d:43:18:20:49:5c:
b5:20:74:d9:b0:a2:e3:1f:01:42:cc:ed:44:5b:c2:
aa:bd:85:00:1e:48:57:90:fb:07:43:b0:5d:49:81:
e9:cb:4f:ab:9d:cc:be:f1:79:4a:f3:4d:69:ed:04:
1e:be:da:7b:18:f1:f4:91:89:6b:6c:8e:8f:c3:fc:
5c:96:08:41:0d:36:78:bc:2d:fa:8b:0d:8c:37:db:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:40:AB:94:E4:04:1D:5D:2B:30:14:2D:66:DB:D8:34:3A:45:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dd5d885-c020-3cb0-b636-1498e7322baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.77.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:75:a4:78:db:cd:2e:f7:24:19:74:40:23:0a:65:d5:1d:49:
ae:bd:c4:f8:bc:e3:5d:54:c8:17:28:e0:4c:1c:b5:43:28:c8:
e9:b4:80:8f:55:b5:72:c3:b9:11:7b:80:14:05:16:5d:5e:14:
c7:c3:6c:f2:98:0c:af:c3:f2:0a:59:ae:65:84:b6:f1:2b:8c:
91:85:ee:02:4f:8f:dd:ab:b1:fd:91:67:1e:3b:c8:5d:63:cd:
fc:66:19:49:03:fd:23:52:3a:c9:3f:fa:0b:30:ba:e0:98:75:
2b:49:8f:13:c8:28:b5:ad:95:4d:d6:4e:cd:1c:4e:a6:9a:ef:
3b:4d:c2:41:80:13:d4:73:24:6f:ff:d4:dd:9c:b1:1c:d8:94:
9b:1e:83:70:27:45:8c:88:f4:ee:34:4b:d1:13:a4:7c:40:0b:
2d:a5:50:1a:d3:02:12:fa:be:3b:23:f0:96:ea:9c:46:73:25:
40:7c:96:a2:56:85:b9:a3:ab:cc:bb:91:31:c9:d6:5b:50:63:
c0:d9:0c:d0:ac:0c:a7:e9:a0:de:90:f0:a4:35:fe:b8:8f:25:
d1:0d:e2:49:0f:c3:98:69:69:ff:fb:dd:37:0b:b6:51:02:56:
78:ac:63:97:45:2f:83:b4:2e:a5:80:e6:09:bf:79:c9:e0:df:
09:08:4e:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvv1EXAr1kljt0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
Zjk1MTgyNTUtZTAzZi00YmNjLWJjOTMtNzFkZTE1ZWZmZDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYqRJuvdeyKoiWZ3mHGwXn4ZjngjLEEWws+g
FMpyAlptVeF3h9Y9dhXHjyIQ6EqovLjyDr8i8q4d83kCjGX+U7aG3fkuAJc2lcG3
cnvXJB+/bTVoAXGQPUP/e177ryF1dJTxtx2b6z0q4NlhgR25FpswnSuE+zwAxL/F
JB0vItDkyiqU9gwFUqAMWp04nWAbnlggRFqLvnmVKAXFZdM810S8Bun+F65/GmCX
an8tQxggSVy1IHTZsKLjHwFCzO1EW8KqvYUAHkhXkPsHQ7BdSYHpy0+rncy+8XlK
801p7QQevtp7GPH0kYlrbI6Pw/xclghBDTZ4vC36iw2MN9sF/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfIQKuU5AQdXSswFC1m29g0OkWsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWRkNWQ4ODUtYzAyMC0z
Y2IwLWI2MzYtMTQ5OGU3MzIyYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaE2qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEd1pHjbzS73JBl0QCMKZdUdSa69xPi8411UyBco4EwctUMoyOm0gI9V
tXLDuRF7gBQFFl1eFMfDbPKYDK/D8gpZrmWEtvErjJGF7gJPj92rsf2RZx47yF1j
zfxmGUkD/SNSOsk/+gswuuCYdStJjxPIKLWtlU3WTs0cTqaa7ztNwkGAE9RzJG//
1N2csRzYlJseg3AnRYyI9O40S9ETpHxACy2lUBrTAhL6vjsj8JbqnEZzJUB8lqJW
hbmjq8y7kTHJ1ltQY8DZDNCsDKfpoN6Q8KQ1/riPJdEN4kkPw5hpaf/73TcLtlEC
VnisY5dFL4O0LqWA5gm/ecng3wkITqU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:44 2025 by rpki-client