Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa
File: cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa (raw, json)
Hash identifier: L47x48NWhvuI299JstDnOwZDupSuBTqY4qWhg0WOBRE=
Subject key identifier: CA:CF:AF:E8:EE:DC:41:58:EA:CC:47:6C:7F:34:5C:2E:A3:2E:63:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A05FC38FF70B7777ED1900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.114.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5f:c3:8f:f7:0b:77:77:ed:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=fa2ea4b5-9054-4994-8ceb-66a6d5f957fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:ca:d2:75:ef:a1:70:de:c1:5d:f5:c2:50:
60:0e:5b:e2:eb:e2:f5:56:d7:87:24:b6:08:1e:81:
0d:96:d6:97:09:35:aa:aa:65:0e:a7:cc:27:38:a1:
8c:71:d4:5f:37:79:d1:c2:2c:d7:d8:25:a2:20:33:
66:f5:ea:be:53:92:33:b6:39:6a:95:a7:96:a4:90:
cf:2c:d0:70:2b:55:93:81:07:d6:ea:12:2a:02:04:
0a:f8:07:f5:aa:72:fb:78:c0:b2:cb:18:f1:56:22:
6f:7f:4b:df:ad:a7:d6:0f:0b:20:4b:ff:12:ed:ee:
50:7a:43:24:97:21:3c:22:4a:d7:64:fd:61:e9:73:
d3:16:a8:6c:93:00:09:b6:6c:4f:a5:9d:04:a7:24:
01:c2:26:a2:43:9b:c7:a8:ac:90:0a:aa:1a:db:4c:
f0:5b:d8:0e:65:f1:ca:e0:60:e7:7c:ef:1f:9b:33:
1a:fe:ec:87:12:74:5a:23:f9:78:b9:8a:d6:7e:a2:
78:2a:71:14:6b:c0:5d:bc:ab:f7:98:c5:47:a3:84:
17:fa:5a:ce:a1:24:86:66:d7:79:df:50:0a:9b:47:
f4:47:59:23:c3:6f:89:2e:26:d5:58:ee:7f:a1:44:
55:9b:7c:8d:4d:c2:d1:5b:0b:02:c0:8f:bd:43:23:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:AF:E8:EE:DC:41:58:EA:CC:47:6C:7F:34:5C:2E:A3:2E:63:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.114.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:97:30:36:a6:9c:7b:f8:b6:8a:c6:8b:a7:72:72:a6:a4:e4:
4e:b9:39:d0:09:16:75:48:05:66:7a:24:0f:e1:7b:76:17:17:
46:9b:de:5e:7e:c4:09:a4:40:b8:43:4d:65:86:50:e4:f1:3b:
e8:a5:7c:cf:f4:38:d8:31:42:c7:f7:6f:bd:94:89:fc:8d:50:
56:bf:ed:df:58:0e:be:a6:c1:87:9c:b4:a8:0e:e0:3c:e1:c4:
0b:55:de:9b:c0:6f:31:7b:1e:77:93:a3:13:bb:82:49:b9:ab:
24:89:b8:ea:65:13:83:92:fd:8a:2e:f2:59:d5:14:07:e5:6c:
4c:ae:1e:30:82:2c:40:88:de:48:c5:b0:b2:65:02:be:2f:e9:
e4:31:9a:10:76:93:65:c3:c2:ce:50:af:94:32:a8:e5:1e:a4:
86:8f:f8:8e:da:9a:35:d3:58:92:d0:e5:99:5a:5a:09:50:f4:
f7:23:e2:85:4e:9b:40:f5:34:9b:78:0d:ae:df:76:3e:37:50:
21:64:31:1c:de:a0:a9:15:18:b5:fe:f7:72:f1:36:be:9d:ee:
dc:25:90:76:9c:ab:1a:68:39:9c:02:f3:ef:c8:40:57:a6:a4:
4b:20:5d:ff:ac:26:16:2b:6a:69:ba:76:22:75:47:33:53:42:
3d:ca:bd:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoF/Dj/cLd3ftGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZmEyZWE0YjUtOTA1NC00OTk0LThjZWItNjZhNmQ1Zjk1N2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2nK0nXvoXDewV31wlBgDlvi6+L1VteHJLYI
HoENltaXCTWqqmUOp8wnOKGMcdRfN3nRwizX2CWiIDNm9eq+U5IztjlqlaeWpJDP
LNBwK1WTgQfW6hIqAgQK+Af1qnL7eMCyyxjxViJvf0vfrafWDwsgS/8S7e5QekMk
lyE8IkrXZP1h6XPTFqhskwAJtmxPpZ0EpyQBwiaiQ5vHqKyQCqoa20zwW9gOZfHK
4GDnfO8fmzMa/uyHEnRaI/l4uYrWfqJ4KnEUa8BdvKv3mMVHo4QX+lrOoSSGZtd5
31AKm0f0R1kjw2+JLibVWO5/oURVm3yNTcLRWwsCwI+9QyOHxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrPr+ju3EFY6sxHbH80XC6jLmOUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y4MGYzZjMtODRlNS0z
YzBlLTkxMDctZTE2NTk1OTEwZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHJMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeXMDamnHv4torGi6dycqak5E65OdAJFnVIBWZ6JA/he3YXF0ab3l5+
xAmkQLhDTWWGUOTxO+ilfM/0ONgxQsf3b72UifyNUFa/7d9YDr6mwYectKgO4Dzh
xAtV3pvAbzF7HneToxO7gkm5qySJuOplE4OS/You8lnVFAflbEyuHjCCLECI3kjF
sLJlAr4v6eQxmhB2k2XDws5Qr5QyqOUepIaP+I7amjXTWJLQ5ZlaWglQ9Pcj4oVO
m0D1NJt4Da7fdj43UCFkMRzeoKkVGLX+93LxNr6d7twlkHacqxpoOZwC8+/IQFem
pEsgXf+sJhYramm6diJ1RzNTQj3KvTs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:55 2025 by rpki-client