Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/0bce7b00-33a9-3a4b-ad9a-6e5c67bc157d.roa
File: 0bce7b00-33a9-3a4b-ad9a-6e5c67bc157d.roa (raw, json)
Hash identifier: JhQd2l+WCOg7hJG6uQ8sZgwrCrO80f2UxEwFU2qt0Ws=
Subject key identifier: D7:45:32:B6:68:D5:0C:89:8B:BD:22:E1:73:43:8C:54:99:05:02:E5
Certificate issuer: /CN=f6955ae6-7518-4f31-adab-b1ae8009cd70
Certificate serial: 010D0C9F43285845453D67A3F08B7C26FEC7A580
Authority key identifier: 53:44:72:19:D5:28:60:AF:97:85:FA:D5:3A:11:AA:BB:A7:04:A4:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/0bce7b00-33a9-3a4b-ad9a-6e5c67bc157d.roa
Signing time: Wed 20 Mar 2024 13:00:33 +0000
ROA not before: Wed 20 Mar 2024 13:00:33 +0000
ROA not after: Tue 18 Jun 2024 13:00:33 +0000
asID: 200525
IP address blocks: 104.250.204.0/22 maxlen: 22
104.250.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:45:3d:67:a3:f0:8b:7c:26:fe:c7:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6955ae6-7518-4f31-adab-b1ae8009cd70
Validity
Not Before: Mar 20 13:00:33 2024 GMT
Not After : Jun 18 13:00:33 2024 GMT
Subject: CN=d7ba565c-c62d-4e76-a249-787314d14798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:03:0e:55:58:e2:50:8c:5e:c1:a0:15:65:
70:de:bb:b4:c4:de:34:12:f6:4a:d9:4d:94:4c:8a:
12:39:fd:33:b6:ba:7f:b9:e8:f2:f2:a4:63:a4:1d:
ef:99:5a:f2:42:62:a7:12:9c:2b:7a:dd:8c:1f:a8:
93:d9:3a:7f:b7:b7:13:41:ae:ad:e1:ab:bd:9b:29:
6d:36:76:f6:de:ad:03:a0:2e:ab:b8:97:73:a5:06:
25:c1:84:af:07:6a:c9:45:a7:19:38:de:31:5a:1a:
bf:3f:be:35:9a:7c:f4:85:40:86:b3:77:20:6e:7b:
2c:a7:45:8a:4c:05:ca:32:d6:ad:a3:b1:31:fa:3e:
d7:f2:a1:cd:3a:b5:49:cd:d5:a8:00:62:3d:03:d3:
6c:d7:dd:17:53:a6:95:c6:94:97:e0:d5:14:b7:a4:
23:a2:84:50:e2:7e:98:88:f6:c7:57:cb:90:cd:09:
0a:99:ce:2b:37:70:5c:ea:ab:56:a8:aa:b0:33:37:
96:7a:54:da:b5:e6:9d:cf:b3:0c:e6:b0:37:65:f0:
91:8a:e4:d6:6b:56:6a:d0:d0:4b:67:99:5f:af:74:
2e:43:c5:41:54:90:5c:aa:a5:6e:a5:64:f1:74:8a:
c3:ef:00:22:8e:14:72:1b:ea:3c:c3:69:55:12:85:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:45:32:B6:68:D5:0C:89:8B:BD:22:E1:73:43:8C:54:99:05:02:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/0bce7b00-33a9-3a4b-ad9a-6e5c67bc157d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/f6955ae6-7518-4f31-adab-b1ae8009cd70.crl
X509v3 Authority Key Identifier:
keyid:53:44:72:19:D5:28:60:AF:97:85:FA:D5:3A:11:AA:BB:A7:04:A4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f4:7d:4e:a4:22:2d:e2:d8:64:f5:9d:df:cc:dd:44:d2:f6:
b5:13:cf:30:82:e7:2b:e1:40:c4:67:48:3b:7a:ad:2a:16:b9:
d7:a7:33:ee:9c:29:c5:52:e7:9a:ff:12:a2:5b:85:60:78:b3:
fa:8c:55:e9:e8:65:bb:05:06:13:02:10:2c:40:2a:04:8a:3d:
3b:29:c6:90:42:21:7c:55:b6:86:21:f2:08:66:81:ba:2b:eb:
60:32:0d:b4:4c:a1:d7:df:0a:64:3b:c3:15:08:5b:99:e3:a8:
94:19:3c:71:61:09:ac:48:8b:24:c1:30:54:e9:67:b6:bd:68:
cb:99:bf:af:4f:60:df:a5:d9:0f:98:16:ab:6c:11:80:2d:8c:
f4:56:75:d5:d0:0f:c3:74:18:b0:7e:f7:c4:a0:6f:8a:84:42:
b9:5b:9f:16:67:1a:fe:08:e4:b1:16:09:03:8c:34:c6:a7:32:
0c:66:0b:9e:b4:2b:f9:e9:51:99:5d:af:58:c0:05:f5:ad:e7:
17:2a:96:20:84:52:0d:b2:22:b1:8f:1d:74:8f:06:39:b3:d0:
f3:86:cc:6d:25:ae:c6:89:40:fb:ae:42:d2:c9:51:56:a4:bb:
14:bc:d6:fd:fc:40:04:37:a5:af:8b:8f:e0:ba:ee:e3:c9:95:
39:8f:2f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPWej8It8Jv7HpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY5NTVhZTYtNzUxOC00ZjMxLWFkYWItYjFhZTgwMDlj
ZDcwMB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZDdiYTU2NWMtYzYyZC00ZTc2LWEyNDktNzg3MzE0ZDE0Nzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02kDDlVY4lCMXsGgFWVw3ru0xN40EvZK2U2U
TIoSOf0ztrp/uejy8qRjpB3vmVryQmKnEpwret2MH6iT2Tp/t7cTQa6t4au9mylt
Nnb23q0DoC6ruJdzpQYlwYSvB2rJRacZON4xWhq/P741mnz0hUCGs3cgbnssp0WK
TAXKMtato7Ex+j7X8qHNOrVJzdWoAGI9A9Ns190XU6aVxpSX4NUUt6QjooRQ4n6Y
iPbHV8uQzQkKmc4rN3Bc6qtWqKqwMzeWelTateadz7MM5rA3ZfCRiuTWa1Zq0NBL
Z5lfr3QuQ8VBVJBcqqVupWTxdIrD7wAijhRyG+o8w2lVEoU/jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdFMrZo1QyJi70i4XNDjFSZBQLlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNjk1
NWFlNi03NTE4LTRmMzEtYWRhYi1iMWFlODAwOWNkNzAvMGJjZTdiMDAtMzNhOS0z
YTRiLWFkOWEtNmU1YzY3YmMxNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjY5NTVhZTYtNzUxOC00ZjMxLWFk
YWItYjFhZTgwMDljZDcwL2Y2OTU1YWU2LTc1MTgtNGYzMS1hZGFiLWIxYWU4MDA5
Y2Q3MC5jcmwwHwYDVR0jBBgwFoAUU0RyGdUoYK+XhfrVOhGqu6cEpBgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNjk1NWFlNi03NTE4LTRmMzEtYWRhYi1iMWFl
ODAwOWNkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHb0fU6kIi3i2GT1nd/M3UTS9rUTzzCC5yvhQMRnSDt6rSoWudenM+6c
KcVS55r/EqJbhWB4s/qMVenoZbsFBhMCECxAKgSKPTspxpBCIXxVtoYh8ghmgbor
62AyDbRModffCmQ7wxUIW5njqJQZPHFhCaxIiyTBMFTpZ7a9aMuZv69PYN+l2Q+Y
FqtsEYAtjPRWddXQD8N0GLB+98Sgb4qEQrlbnxZnGv4I5LEWCQOMNManMgxmC560
K/npUZldr1jABfWt5xcqliCEUg2yIrGPHXSPBjmz0POGzG0lrsaJQPuuQtLJUVak
uxS81v38QAQ3pa+Lj+C67uPJlTmPL0Q=
-----END CERTIFICATE-----
Generated at Thu Apr 4 17:36:59 2024 by rpki-client on console-fra.rpki-client.org