Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87787457-9b9a-3652-97e5-62801a40d7b7.roa
File: 87787457-9b9a-3652-97e5-62801a40d7b7.roa (raw, json)
Hash identifier: YtR9O+I8IgI4F7VHA2RxFO+i6O6M8/GCvZGWgD6FrH0=
Subject key identifier: 1C:BB:DA:3E:40:E9:DA:F6:43:F5:FD:2F:18:7C:A1:EF:60:01:B6:95
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028FA38D46B017E2BB2D0040
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87787457-9b9a-3652-97e5-62801a40d7b7.roa
Signing time: Wed 26 Feb 2025 10:54:51 +0000
ROA not before: Wed 26 Feb 2025 10:54:51 +0000
ROA not after: Tue 27 May 2025 09:54:51 +0000
asID: 30036
IP address blocks: 104.201.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:a3:8d:46:b0:17:e2:bb:2d:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:51 2025 GMT
Not After : May 27 09:54:51 2025 GMT
Subject: CN=09b8e073-e2b8-4ee3-911b-77668c5f7c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:05:30:be:b5:e0:c2:8b:91:04:02:76:bd:
07:a2:89:8a:9e:91:6c:50:3a:27:85:1a:e6:68:4b:
dd:ed:2f:82:5d:d2:a4:12:e6:ff:41:d8:2d:45:be:
0c:03:73:41:1b:28:3c:62:b9:91:60:34:87:10:1b:
27:42:16:72:f6:85:3e:cb:c4:c0:7d:d3:7d:9b:38:
f0:da:f9:3f:4f:b6:b3:67:f2:a6:a9:45:80:9a:89:
70:6d:8e:53:29:03:76:c9:0a:2b:8e:9e:66:af:5b:
12:bb:de:7d:1c:44:85:ae:73:92:84:7f:62:49:fc:
a2:7a:2f:ce:81:b2:8b:70:13:dc:ff:d9:77:66:d5:
5b:55:3a:ff:c4:e6:3b:a6:40:cd:23:50:8d:58:43:
23:f0:e0:a7:a5:c0:b5:f9:3e:10:82:61:f8:54:ec:
3f:c8:97:26:4c:59:29:4b:24:e1:70:59:89:12:af:
53:51:fe:b7:d4:ec:87:da:03:a8:46:6f:83:d7:6b:
00:dc:f8:45:b5:72:2e:c4:dc:b8:dd:9c:00:83:a7:
31:7f:47:19:76:e9:88:d2:5e:ab:9d:8a:0e:91:68:
a6:9f:0f:08:01:94:07:98:c9:47:c0:21:37:eb:02:
d1:cc:74:03:27:1c:6d:36:c5:5e:2e:fb:66:73:3a:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:DA:3E:40:E9:DA:F6:43:F5:FD:2F:18:7C:A1:EF:60:01:B6:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87787457-9b9a-3652-97e5-62801a40d7b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c2:e3:59:4c:78:6b:83:d2:11:09:12:42:19:16:09:7b:f6:
41:7e:30:60:b1:92:a4:59:ed:81:bd:08:79:8a:33:39:f8:49:
4d:b0:3b:c0:6b:f5:29:d8:7c:4f:34:03:e0:15:c1:29:69:73:
d4:00:9f:5c:22:90:43:b9:7f:f7:d9:71:b5:07:17:ac:42:ec:
1e:2a:6b:5f:ed:1f:ce:31:65:dd:93:03:54:20:f8:19:d0:9c:
d2:a0:38:d1:91:73:97:e7:0c:b4:db:a2:16:33:40:55:29:e4:
1b:0b:2c:26:70:8d:12:84:cf:f1:95:00:a5:32:10:5d:a6:02:
c7:cc:62:a8:3d:81:9f:fc:21:b6:1b:27:19:02:5c:6a:93:ba:
4f:f3:fb:93:0a:eb:42:36:09:af:ee:aa:93:e6:be:cc:e9:d8:
27:00:9b:9e:c0:40:1d:b1:11:18:2f:76:f0:55:b6:9f:1f:c7:
4f:e2:0a:75:d3:fc:e3:b0:48:d9:9c:63:8a:95:21:41:3b:96:
04:26:c0:21:fc:d6:c1:40:07:57:d6:3e:28:a3:a3:29:be:d8:
f1:6a:26:50:ba:8f:65:4d:49:55:1f:af:20:2b:ab:1d:17:02:
22:90:95:61:f3:31:9e:57:16:57:da:34:03:91:c6:ce:46:bc:
90:3d:fc:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkCj6ONRrAX4rstAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNjEwNTQ1MVoXDTI1MDUyNzA5NTQ1MVowLzEtMCsGA1UEAxMk
MDliOGUwNzMtZTJiOC00ZWUzLTkxMWItNzc2NjhjNWY3YzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1oFML614MKLkQQCdr0HoomKnpFsUDonhRrm
aEvd7S+CXdKkEub/QdgtRb4MA3NBGyg8YrmRYDSHEBsnQhZy9oU+y8TAfdN9mzjw
2vk/T7azZ/KmqUWAmolwbY5TKQN2yQorjp5mr1sSu959HESFrnOShH9iSfyiei/O
gbKLcBPc/9l3ZtVbVTr/xOY7pkDNI1CNWEMj8OCnpcC1+T4QgmH4VOw/yJcmTFkp
SyThcFmJEq9TUf631OyH2gOoRm+D12sA3PhFtXIuxNy43ZwAg6cxf0cZdumI0l6r
nYoOkWimnw8IAZQHmMlHwCE36wLRzHQDJxxtNsVeLvtmczrMewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBy72j5A6dr2Q/X9Lxh8oe9gAbaVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODc3ODc0NTctOWI5YS0z
NjUyLTk3ZTUtNjI4MDFhNDBkN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMl8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADC41lMeGuD0hEJEkIZFgl79kF+MGCxkqRZ7YG9CHmKMzn4SU2wO8Br
9SnYfE80A+AVwSlpc9QAn1wikEO5f/fZcbUHF6xC7B4qa1/tH84xZd2TA1Qg+BnQ
nNKgONGRc5fnDLTbohYzQFUp5BsLLCZwjRKEz/GVAKUyEF2mAsfMYqg9gZ/8IbYb
JxkCXGqTuk/z+5MK60I2Ca/uqpPmvszp2CcAm57AQB2xERgvdvBVtp8fx0/iCnXT
/OOwSNmcY4qVIUE7lgQmwCH81sFAB1fWPiijoym+2PFqJlC6j2VNSVUfryArqx0X
AiKQlWHzMZ5XFlfaNAORxs5GvJA9/Fc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:08 2025 by rpki-client