Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968f57cc-57c8-34a5-8e38-28e7cc4ceb9d.roa
File: 968f57cc-57c8-34a5-8e38-28e7cc4ceb9d.roa (raw, json)
Hash identifier: UeFNr6wvglLlYe36MUoqACzH0hrikH5KDo01IEtGtak=
Subject key identifier: F0:BC:05:47:BC:D4:81:B7:83:59:2B:3A:D2:04:5E:0A:EE:29:3E:2B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489E13CC25955C07ADD0FC1680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968f57cc-57c8-34a5-8e38-28e7cc4ceb9d.roa
Signing time: Tue 21 Jan 2025 11:04:30 +0000
ROA not before: Tue 21 Jan 2025 11:04:30 +0000
ROA not after: Mon 21 Apr 2025 10:04:30 +0000
asID: 329007
IP address blocks: 104.243.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:13:cc:25:95:5c:07:ad:d0:fc:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 11:04:30 2025 GMT
Not After : Apr 21 10:04:30 2025 GMT
Subject: CN=48caa347-f0bb-4e21-a130-d10bd7a73d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:35:56:3f:14:99:90:7b:d4:e9:f2:83:ff:
88:e2:92:f2:4e:67:a2:a9:5f:2f:30:05:46:b7:c3:
5b:48:40:8b:90:72:b3:53:ab:4a:e3:aa:62:02:8a:
06:b5:56:2f:ee:6a:45:7f:2c:a6:01:7f:de:36:97:
a0:3b:55:82:b9:8a:27:64:1c:11:0a:00:69:95:ec:
16:a3:08:d2:5d:9f:26:a1:a7:85:cc:b6:2c:ff:89:
1d:4d:ee:4e:32:37:8f:c7:ee:cb:58:c9:18:f3:66:
da:66:22:b2:9a:ce:e8:ed:40:1a:e8:f1:06:15:34:
34:d1:99:66:ba:5d:54:55:6a:fe:86:5c:29:19:c2:
8a:79:6b:5c:03:a8:ad:72:bf:d2:6e:9a:21:ab:bf:
4f:c0:12:2f:9d:29:09:8a:e4:92:cb:cb:6d:9f:c5:
5f:98:d9:3c:46:b3:c2:03:ed:fb:e1:91:db:be:ea:
be:dc:90:e5:da:e2:14:c4:5c:8d:56:b8:41:5a:e7:
47:42:99:8d:15:05:9d:96:e4:f9:01:5c:c7:31:4e:
5e:b9:a6:fc:de:33:bc:eb:02:3d:cf:71:88:29:26:
50:97:f4:f7:7c:4f:88:0d:8a:10:f6:ac:6e:fb:42:
b9:09:64:aa:3c:04:39:c3:e9:41:e5:a7:f1:e4:6c:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:05:47:BC:D4:81:B7:83:59:2B:3A:D2:04:5E:0A:EE:29:3E:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968f57cc-57c8-34a5-8e38-28e7cc4ceb9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:32:71:ae:08:a7:5f:a8:8d:d4:d8:4e:8d:b8:47:48:84:30:
d2:af:06:9d:3c:fb:9c:0e:3b:c3:02:4e:cc:2a:57:fc:94:1a:
46:e4:5e:fd:09:f2:08:cd:24:d6:3c:76:29:0d:8e:3f:d0:53:
05:da:c2:39:23:57:bc:32:06:ea:ed:81:7f:0c:91:fe:ea:fa:
d1:d0:c4:13:ce:e6:4f:42:e8:de:19:f6:21:c7:92:33:4a:5e:
94:35:d4:bc:54:24:d4:b5:0f:19:94:96:09:09:9d:48:cc:8f:
e8:ef:1d:22:9d:9d:13:b5:73:bf:04:2a:42:86:a3:57:95:cf:
52:da:04:92:9a:2b:e6:b3:ca:a6:dd:0a:c8:7e:53:76:c0:7e:
4d:bb:4e:31:fe:ad:60:99:38:48:88:9e:e1:51:16:d8:68:73:
07:03:1f:3b:69:5d:89:bf:c6:36:d3:e9:92:3c:35:cb:a3:cc:
ef:57:c1:21:09:3e:38:77:84:a2:91:b7:42:9e:22:46:d7:75:
23:7b:99:b5:5a:07:f6:a5:dd:b5:7a:8f:69:5b:f5:7f:50:05:
ad:02:5f:29:b5:bb:72:bb:39:2b:90:03:d9:94:96:cb:ea:14:
5b:1c:44:35:c1:09:d7:82:9e:f4:cb:9e:18:f3:48:f0:e2:24:
f6:94:6a:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieE8wllVwHrdD8FoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyMTExMDQzMFoXDTI1MDQyMTEwMDQzMFowLzEtMCsGA1UEAxMk
NDhjYWEzNDctZjBiYi00ZTIxLWExMzAtZDEwYmQ3YTczZDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lw1Vj8UmZB71Onyg/+I4pLyTmeiqV8vMAVG
t8NbSECLkHKzU6tK46piAooGtVYv7mpFfyymAX/eNpegO1WCuYonZBwRCgBplewW
owjSXZ8moaeFzLYs/4kdTe5OMjePx+7LWMkY82baZiKyms7o7UAa6PEGFTQ00Zlm
ul1UVWr+hlwpGcKKeWtcA6itcr/Sbpohq79PwBIvnSkJiuSSy8ttn8VfmNk8RrPC
A+374ZHbvuq+3JDl2uIUxFyNVrhBWudHQpmNFQWdluT5AVzHMU5euab83jO86wI9
z3GIKSZQl/T3fE+IDYoQ9qxu+0K5CWSqPAQ5w+lB5afx5GzYjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPC8BUe81IG3g1krOtIEXgruKT4rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTY4ZjU3Y2MtNTdjOC0z
NGE1LThlMzgtMjhlN2NjNGNlYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAyca4Ip1+ojdTYTo24R0iEMNKvBp08+5wOO8MCTswqV/yUGkbkXv0J
8gjNJNY8dikNjj/QUwXawjkjV7wyBurtgX8Mkf7q+tHQxBPO5k9C6N4Z9iHHkjNK
XpQ11LxUJNS1DxmUlgkJnUjMj+jvHSKdnRO1c78EKkKGo1eVz1LaBJKaK+azyqbd
Csh+U3bAfk27TjH+rWCZOEiInuFRFthocwcDHztpXYm/xjbT6ZI8NcujzO9XwSEJ
Pjh3hKKRt0KeIkbXdSN7mbVaB/al3bV6j2lb9X9QBa0CXym1u3K7OSuQA9mUlsvq
FFscRDXBCdeCnvTLnhjzSPDiJPaUao0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:45 2025 by rpki-client