Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7ea0ca3-376d-341d-b9bc-225e8d823631.roa
File: b7ea0ca3-376d-341d-b9bc-225e8d823631.roa (raw, json)
Hash identifier: 6H5RNTsTou6oLEReYSTrq/N63Mf3+gu9uBCF5EZ1ieg=
Subject key identifier: 0A:40:A1:9A:D1:34:48:B2:3C:5A:F3:02:08:F3:24:ED:86:CD:D6:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A063FE25BD08ED3F5ACE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7ea0ca3-376d-341d-b9bc-225e8d823631.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.112.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:63:fe:25:bd:08:ed:3f:5a:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=e33008fa-c04b-4afd-a104-ac023654e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:6f:a3:fc:e2:d6:01:7a:71:47:dc:28:d3:
4f:9f:13:29:0c:63:b2:fb:aa:f2:f8:94:f0:81:bb:
9e:76:dd:5e:d7:54:b0:c6:4c:7a:ee:27:0b:84:01:
50:b1:58:b0:7d:bc:65:19:d3:c1:b5:f7:bd:7b:31:
7d:95:2b:d9:c8:a4:6d:3d:90:7c:31:9c:18:2d:c2:
38:6a:39:54:d4:ef:b9:83:a7:fc:d0:51:cc:ca:6b:
fc:79:f4:9c:e8:87:92:47:80:20:fe:e9:a0:4f:e1:
2a:cb:2e:84:8b:3b:09:8f:2b:15:57:de:b8:a4:77:
3a:58:6d:27:8d:46:7e:cb:3a:30:08:bd:5a:a6:12:
99:7e:8c:a2:00:fa:07:91:a5:09:24:a1:8a:dc:80:
20:ce:69:56:f6:1d:93:b1:45:46:d5:29:71:2e:1e:
63:5e:5d:13:8a:bc:25:ac:d7:07:b7:b6:c2:2e:4c:
a2:91:a3:c7:79:a2:df:43:fc:83:08:3c:31:1a:4b:
de:a1:69:87:c6:11:89:5f:43:4c:b0:12:21:2c:89:
05:b0:56:c2:73:64:41:48:7f:ba:56:9b:3a:58:6f:
23:5b:f2:77:77:76:92:67:8c:f1:ac:87:bd:33:48:
cf:08:f5:c4:7b:59:72:33:0e:63:56:80:3d:72:3c:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:A1:9A:D1:34:48:B2:3C:5A:F3:02:08:F3:24:ED:86:CD:D6:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7ea0ca3-376d-341d-b9bc-225e8d823631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.112.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b1:5d:0d:e8:b8:e3:61:2f:fb:7a:b5:98:e7:3f:82:60:06:
7d:37:c9:10:2e:07:91:61:ae:b0:4d:74:02:b6:0c:97:fc:54:
43:ba:53:7a:5b:90:bd:f1:38:91:fd:49:f0:6f:63:e5:ac:d5:
76:63:d3:c4:7b:46:95:8f:c7:ae:6e:63:c7:8a:a9:94:b9:af:
00:56:af:fa:da:e7:e0:cd:df:e3:82:3f:2d:24:60:24:86:17:
49:3f:14:fd:da:15:cb:61:41:db:4f:0e:19:33:7b:2c:44:4c:
67:5a:0e:78:fd:6e:e6:4e:4e:4a:a6:4b:77:dd:ea:d5:a6:e3:
6e:33:4c:91:e5:98:30:19:bb:03:93:85:d8:d2:08:ff:1f:34:
90:c2:0d:e9:be:3f:cf:28:11:16:a8:88:71:84:a7:21:65:64:
1c:a9:27:eb:19:1e:a0:2e:45:07:81:69:f6:4d:2a:84:bb:01:
94:b8:42:13:57:52:dd:63:b9:dc:f0:a5:29:6d:6b:5d:81:01:
f4:1d:43:83:c9:9a:4d:4b:88:69:76:62:c8:20:e4:d5:4f:8c:
a0:31:c9:e0:78:04:04:57:c1:01:90:02:98:da:99:ee:19:c2:
4e:b3:9e:a2:c5:d7:25:c3:79:c3:a8:1b:7d:4d:ce:e1:b6:94:
49:89:c2:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGP+Jb0I7T9azgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTMzMDA4ZmEtYzA0Yi00YWZkLWExMDQtYWMwMjM2NTRlOTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBvo/zi1gF6cUfcKNNPnxMpDGOy+6ry+JTw
gbuedt1e11Swxkx67icLhAFQsViwfbxlGdPBtfe9ezF9lSvZyKRtPZB8MZwYLcI4
ajlU1O+5g6f80FHMymv8efSc6IeSR4Ag/umgT+Eqyy6EizsJjysVV964pHc6WG0n
jUZ+yzowCL1aphKZfoyiAPoHkaUJJKGK3IAgzmlW9h2TsUVG1SlxLh5jXl0Tirwl
rNcHt7bCLkyikaPHeaLfQ/yDCDwxGkveoWmHxhGJX0NMsBIhLIkFsFbCc2RBSH+6
Vps6WG8jW/J3d3aSZ4zxrIe9M0jPCPXEe1lyMw5jVoA9cjwbZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApAoZrRNEiyPFrzAgjzJO2GzdY4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdlYTBjYTMtMzc2ZC0z
NDFkLWI5YmMtMjI1ZThkODIzNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaHCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISxXQ3ouONhL/t6tZjnP4JgBn03yRAuB5FhrrBNdAK2DJf8VEO6U3pb
kL3xOJH9SfBvY+Ws1XZj08R7RpWPx65uY8eKqZS5rwBWr/ra5+DN3+OCPy0kYCSG
F0k/FP3aFcthQdtPDhkzeyxETGdaDnj9buZOTkqmS3fd6tWm424zTJHlmDAZuwOT
hdjSCP8fNJDCDem+P88oERaoiHGEpyFlZBypJ+sZHqAuRQeBafZNKoS7AZS4QhNX
Ut1judzwpSlta12BAfQdQ4PJmk1LiGl2Ysgg5NVPjKAxyeB4BARXwQGQApjame4Z
wk6znqLF1yXDecOoG31NzuG2lEmJwjU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:02 2025 by rpki-client