Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa
File: b96fa30c-800a-3f27-bbe0-a0466bba322b.roa (raw, json)
Hash identifier: i7nYe73X+miFlajDudfFXKVIXqWPiwxhRVuuz7A3TdQ=
Subject key identifier: FE:74:7E:10:C7:B7:D5:51:23:80:74:DE:C7:66:65:03:15:98:B0:52
Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial: 010D0C9F4328584819CFC74B2B95B679ACCC46A0
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 398993
IP address blocks: 104.219.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c7:4b:2b:95:b6:79:ac:cc:46:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c2919d60-59e1-43ad-bb56-908926459af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:80:ad:d3:ce:4e:12:e0:46:bf:5c:4e:58:
54:12:8a:88:d8:88:ea:cf:01:2a:2e:b2:13:12:44:
70:cb:7f:c4:49:76:88:38:db:f0:ea:2e:63:07:25:
0b:24:92:9d:3e:3a:dd:36:db:e9:1c:35:2c:90:35:
41:d1:0d:9f:8f:74:60:42:c5:b2:e3:1f:33:d3:f1:
a6:1f:8d:b7:ff:b7:7e:46:84:58:8b:bf:28:e4:38:
37:09:7c:8b:14:e7:4b:95:88:ee:87:fd:10:d4:d4:
4e:ec:03:83:af:64:1e:7a:4f:b1:e1:4d:03:1c:6d:
48:7a:1c:d7:61:f3:f8:f4:ea:d4:c2:1d:2b:c7:13:
48:14:2c:e1:dc:bb:4d:f4:26:6a:64:9d:05:42:32:
2b:70:1d:1a:bb:88:9b:c6:6c:01:19:aa:22:ff:88:
42:53:7d:01:de:32:57:42:aa:bf:76:36:a2:bb:33:
7b:c9:e4:e3:46:86:73:30:57:d5:19:09:d2:e2:ba:
27:06:61:c4:32:cd:93:e2:99:22:f6:65:55:0a:55:
cd:ee:f6:de:9e:a1:05:ed:07:f5:f9:f1:b2:99:99:
73:6b:29:21:12:5b:da:9a:6f:7d:4d:2c:a9:c3:d3:
48:bd:7f:89:29:7a:d2:b3:ed:32:40:01:62:03:d0:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:7E:10:C7:B7:D5:51:23:80:74:DE:C7:66:65:03:15:98:B0:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
X509v3 Authority Key Identifier:
keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:93:89:50:50:49:fb:11:db:ae:11:ec:c9:f4:68:a2:8e:d0:
47:36:3e:d8:14:06:73:1a:65:dd:e9:83:7f:40:99:97:9a:8c:
79:b7:aa:97:5b:7b:57:7a:ab:d6:76:b1:3a:26:13:87:74:aa:
dc:87:f7:53:f5:14:03:18:02:84:0d:d2:14:64:24:b1:9e:10:
c4:0e:8d:12:cd:ee:a7:da:42:71:85:7f:0d:9a:ab:93:15:fe:
9b:e5:c7:ab:32:40:05:44:b3:be:23:d6:0c:a1:c0:cb:b3:30:
8d:6a:11:11:a7:7f:9b:43:56:f9:3b:27:ca:bb:e3:57:7d:a2:
45:df:5d:fd:ca:f3:de:42:87:e9:11:d7:7a:cc:99:a4:0b:87:
91:b3:cf:da:6b:d5:5f:18:ca:95:3d:bd:6f:04:62:ff:b1:ee:
d0:b8:f8:a8:69:ba:75:af:6c:0a:46:df:ed:d5:02:67:8a:0e:
cf:e4:2f:10:55:e1:dd:bd:bb:6d:39:f8:db:ff:8b:a3:e7:f8:
10:89:9e:44:5a:e4:60:93:e2:b5:05:a0:f6:0e:2e:79:c9:84:
9f:fc:27:9f:4f:0a:8a:0e:33:01:78:90:43:68:f3:e6:a0:d2:
7c:65:08:c0:95:f9:88:c6:7e:d2:dd:cd:0c:f4:30:96:04:ac:
7d:f3:97:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8dLK5W2eazMRqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3
YzBkMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YzI5MTlkNjAtNTllMS00M2FkLWJiNTYtOTA4OTI2NDU5YWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2GArdPOThLgRr9cTlhUEoqI2IjqzwEqLrIT
EkRwy3/ESXaIONvw6i5jByULJJKdPjrdNtvpHDUskDVB0Q2fj3RgQsWy4x8z0/Gm
H423/7d+RoRYi78o5Dg3CXyLFOdLlYjuh/0Q1NRO7AODr2Qeek+x4U0DHG1IehzX
YfP49OrUwh0rxxNIFCzh3LtN9CZqZJ0FQjIrcB0au4ibxmwBGaoi/4hCU30B3jJX
Qqq/djaiuzN7yeTjRoZzMFfVGQnS4ronBmHEMs2T4pki9mVVClXN7vbenqEF7Qf1
+fGymZlzaykhElvamm99TSypw9NIvX+JKXrSs+0yQAFiA9AVUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP50fhDHt9VRI4B03sdmZQMVmLBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz
ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvYjk2ZmEzMGMtODAwYS0z
ZjI3LWJiZTAtYTA0NjZiYmEzMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2
ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx
N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz
Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmTiVBQSfsR264R7Mn0aKKO0Ec2PtgUBnMaZd3pg39AmZeajHm3qpdb
e1d6q9Z2sTomE4d0qtyH91P1FAMYAoQN0hRkJLGeEMQOjRLN7qfaQnGFfw2aq5MV
/pvlx6syQAVEs74j1gyhwMuzMI1qERGnf5tDVvk7J8q741d9okXfXf3K895Ch+kR
13rMmaQLh5Gzz9pr1V8YypU9vW8EYv+x7tC4+KhpunWvbApG3+3VAmeKDs/kLxBV
4d29u205+Nv/i6Pn+BCJnkRa5GCT4rUFoPYOLnnJhJ/8J59PCooOMwF4kENo8+ag
0nxlCMCV+YjGftLdzQz0MJYErH3zl84=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:55 2025 by rpki-client