Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c688d365-bc07-3970-963c-70208f568c0e.roa
File: c688d365-bc07-3970-963c-70208f568c0e.roa (raw, json)
Hash identifier: 2HqhbjuQEv0ifkeQuSXzxPpzkQX2e6MaYLJ7x6I60jo=
Subject key identifier: DE:09:70:9C:74:67:46:45:50:6E:41:DA:B0:4D:B8:E1:68:1F:60:B6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0605D03C4C8BF3D23BF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c688d365-bc07-3970-963c-70208f568c0e.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.117.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:60:5d:03:c4:c8:bf:3d:23:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=23327f20-5c6d-480b-bbe4-91322fc014a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:93:4c:cf:fb:f2:04:c6:60:bc:96:3a:10:
d7:44:ea:fb:9f:ca:0a:19:cb:3f:88:87:f1:13:91:
bd:27:18:f8:48:d3:03:87:73:26:2b:47:bc:52:2e:
79:b0:4e:46:6a:5d:8f:2a:4c:64:7f:93:6f:4e:06:
89:12:95:dc:b8:1d:0e:bf:6a:59:54:7e:91:1d:94:
85:58:ac:c2:ba:b5:d3:c0:55:b5:1d:95:5f:de:1e:
9a:bd:a2:dc:11:da:ce:72:3a:20:c9:22:66:a7:69:
be:3b:1a:c0:5d:60:3b:f1:d1:b3:1a:61:a3:0e:23:
d1:f5:4f:0c:36:03:57:40:93:01:18:7e:93:f2:ef:
7a:8e:c5:f3:20:aa:16:09:b2:96:d8:b2:52:de:9f:
2d:17:b8:a5:0d:30:47:79:6e:94:aa:99:b0:b4:bf:
19:f1:6a:4f:ec:cc:4d:e7:04:54:88:da:fc:fb:c5:
7a:07:4a:d6:5a:44:58:80:92:6f:e4:44:04:76:11:
31:bc:bf:db:9a:f1:0c:2d:9c:9e:75:87:eb:68:3c:
25:77:8f:9b:88:b4:35:5a:f8:c7:78:9a:25:38:5f:
03:f1:d2:fc:b3:83:95:d0:6c:35:2b:7f:8a:5e:4b:
a0:c6:7a:a9:43:e9:9b:34:f3:35:e7:23:d7:f9:e4:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:70:9C:74:67:46:45:50:6E:41:DA:B0:4D:B8:E1:68:1F:60:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c688d365-bc07-3970-963c-70208f568c0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.117.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:6c:15:61:b2:5a:6e:e4:04:3e:8b:b9:40:2b:e2:f5:fd:a0:
f5:04:6c:81:8b:e1:e9:cd:a3:b2:83:83:cb:cd:2b:d0:a4:61:
19:40:70:34:3f:30:3a:9a:ac:4b:f0:28:e5:a9:02:68:23:a0:
c1:2f:a7:7a:d9:26:55:25:6c:e6:72:45:3f:cc:99:77:cd:02:
56:0b:9d:ba:97:2e:11:1f:07:25:bc:7d:ec:07:81:99:f0:e5:
3d:08:64:79:9a:f2:88:e6:f8:a2:03:98:e2:c7:58:c5:3a:a1:
d5:37:08:23:5a:37:66:2b:81:30:52:02:fe:1f:09:f4:8c:6d:
3a:94:f6:3d:24:22:b7:7d:ca:b3:3c:cd:0e:f7:dd:4f:66:d6:
46:ff:3e:fe:89:3d:3e:66:16:1d:13:c7:64:3c:2f:5f:f8:6e:
8d:a1:aa:48:ba:e9:67:87:b3:ea:c0:05:3e:d7:73:b6:a2:39:
bb:fa:b5:8b:83:e7:1b:9f:30:35:56:14:b7:1b:c7:64:bf:cf:
5d:b2:5a:de:d4:1f:94:e7:8d:c9:a3:80:2e:b2:e9:7d:2e:93:
d1:68:1a:4f:36:81:35:e1:5c:15:e9:9b:ba:71:61:94:10:75:
fc:16:10:21:84:20:b6:10:70:44:94:5a:fd:e8:02:88:a3:30:
17:ef:df:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoGBdA8TIvz0jvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MjMzMjdmMjAtNWM2ZC00ODBiLWJiZTQtOTEzMjJmYzAxNGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoiTTM/78gTGYLyWOhDXROr7n8oKGcs/iIfx
E5G9Jxj4SNMDh3MmK0e8Ui55sE5Gal2PKkxkf5NvTgaJEpXcuB0Ov2pZVH6RHZSF
WKzCurXTwFW1HZVf3h6avaLcEdrOcjogySJmp2m+OxrAXWA78dGzGmGjDiPR9U8M
NgNXQJMBGH6T8u96jsXzIKoWCbKW2LJS3p8tF7ilDTBHeW6UqpmwtL8Z8WpP7MxN
5wRUiNr8+8V6B0rWWkRYgJJv5EQEdhExvL/bmvEMLZyedYfraDwld4+biLQ1WvjH
eJolOF8D8dL8s4OV0Gw1K3+KXkugxnqpQ+mbNPM15yPX+eTeXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4JcJx0Z0ZFUG5B2rBNuOFoH2C2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY4OGQzNjUtYmMwNy0z
OTcwLTk2M2MtNzAyMDhmNTY4YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHX3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9sFWGyWm7kBD6LuUAr4vX9oPUEbIGL4enNo7KDg8vNK9CkYRlAcDQ/
MDqarEvwKOWpAmgjoMEvp3rZJlUlbOZyRT/MmXfNAlYLnbqXLhEfByW8fewHgZnw
5T0IZHma8ojm+KIDmOLHWMU6odU3CCNaN2YrgTBSAv4fCfSMbTqU9j0kIrd9yrM8
zQ733U9m1kb/Pv6JPT5mFh0Tx2Q8L1/4bo2hqki66WeHs+rABT7Xc7aiObv6tYuD
5xufMDVWFLcbx2S/z12yWt7UH5TnjcmjgC6y6X0uk9FoGk82gTXhXBXpm7pxYZQQ
dfwWECGEILYQcESUWv3oAoijMBfv3zU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:38 2025 by rpki-client