Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b518323f-d77d-3700-8a9f-3f8d4caf1987.roa
File: b518323f-d77d-3700-8a9f-3f8d4caf1987.roa (raw, json)
Hash identifier: oDHML0j4ueTtbn/zFyw5TBCYIOSXn8ggNKo8qiFETCc=
Subject key identifier: B1:13:C6:B9:C9:FA:C4:BF:E3:B4:0A:4C:BB:D0:C4:8E:DC:D4:07:02
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584930DE65A1A660F131AAAD1B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b518323f-d77d-3700-8a9f-3f8d4caf1987.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 393886
IP address blocks: 104.253.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:65:a1:a6:60:f1:31:aa:ad:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=5256902b-6f6c-4667-a45e-3d9ae132667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:bf:d3:25:76:cd:51:e8:6f:2e:55:b2:07:
90:46:51:4b:f4:fc:7a:b8:89:a7:63:79:df:bd:b4:
ae:07:60:37:09:a9:77:94:d2:48:40:bb:0e:fa:07:
b3:51:dd:6b:b3:c7:a2:57:d1:c9:32:67:84:cb:09:
ec:94:ca:73:f2:fa:2d:67:a2:50:69:f9:8c:22:fd:
68:10:b0:0f:1d:ba:69:4a:f8:cb:ae:29:67:8e:86:
20:29:a8:1b:84:fc:75:2e:77:77:41:48:44:a2:8c:
e9:ca:e3:25:25:3b:53:35:7a:63:dd:1f:2e:64:87:
cb:15:b3:1a:c2:ef:fa:70:4b:0d:af:cc:3d:19:b6:
30:54:d0:97:15:f9:a2:63:88:1a:08:8d:21:3f:34:
9d:b1:47:2c:72:3b:72:0c:8e:20:a1:3e:0c:d0:8f:
4c:a1:68:91:af:fe:b6:37:2c:98:26:ea:12:98:39:
b8:f1:0e:26:64:fb:33:a4:c6:c6:13:cd:76:88:37:
40:88:c3:80:55:1a:71:cf:02:ed:5d:60:bf:a8:da:
0b:fd:68:6b:f6:43:9a:4b:d5:0a:ad:ae:95:51:32:
f2:b0:7f:9b:74:cb:7b:0e:86:73:18:cc:63:2e:61:
e5:a0:02:70:2c:f2:9b:3c:2d:92:c7:88:53:56:c6:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:13:C6:B9:C9:FA:C4:BF:E3:B4:0A:4C:BB:D0:C4:8E:DC:D4:07:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b518323f-d77d-3700-8a9f-3f8d4caf1987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:60:66:f3:a6:00:92:cd:49:3a:01:c9:cc:b7:a1:45:81:fe:
a9:ea:f7:a4:f7:9b:3f:4b:cf:87:27:37:ee:51:80:e2:1e:11:
55:a3:ab:76:69:9d:0e:af:ec:c7:f9:2e:39:d5:7a:8d:e3:f4:
61:83:3e:01:8b:1d:af:a4:48:8a:95:60:af:38:bd:62:cb:7b:
ee:b6:96:0b:b0:81:1a:62:87:32:f6:af:9d:fb:fb:71:9b:86:
89:50:7f:ed:d0:8a:05:21:37:c0:15:23:c0:f0:2b:f9:cf:dd:
c5:38:a5:23:9c:45:55:3a:30:bd:22:e7:c9:43:f1:7c:b1:fe:
42:f5:2b:1c:3f:01:d4:30:72:60:fa:e0:32:f0:ee:9d:3f:fb:
0d:6e:3d:0d:68:49:da:e5:ca:1b:c0:f8:4b:b2:96:32:da:ce:
7c:1a:f3:cc:67:94:3a:fd:c1:fc:72:da:76:23:3d:05:6d:56:
1f:8a:3e:28:0a:bb:20:46:ee:04:65:1f:63:45:f6:89:b3:e0:
e7:70:1d:d0:f6:28:30:3b:68:33:c2:63:ba:d4:11:0d:14:85:
8e:b3:e1:cf:74:a4:53:51:19:37:bf:f9:3d:73:86:2a:ba:5e:
72:55:43:bf:40:e6:f4:bb:e0:a0:9d:30:22:46:3e:8a:6a:bd:
e3:31:39:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mWhpmDxMaqtGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NTI1NjkwMmItNmY2Yy00NjY3LWE0NWUtM2Q5YWUxMzI2NjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksW/0yV2zVHoby5VsgeQRlFL9Px6uImnY3nf
vbSuB2A3Cal3lNJIQLsO+gezUd1rs8eiV9HJMmeEywnslMpz8votZ6JQafmMIv1o
ELAPHbppSvjLrilnjoYgKagbhPx1Lnd3QUhEoozpyuMlJTtTNXpj3R8uZIfLFbMa
wu/6cEsNr8w9GbYwVNCXFfmiY4gaCI0hPzSdsUcscjtyDI4goT4M0I9MoWiRr/62
NyyYJuoSmDm48Q4mZPszpMbGE812iDdAiMOAVRpxzwLtXWC/qNoL/Whr9kOaS9UK
ra6VUTLysH+bdMt7DoZzGMxjLmHloAJwLPKbPC2Sx4hTVsbcYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLETxrnJ+sS/47QKTLvQxI7c1AcCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjUxODMyM2YtZDc3ZC0z
NzAwLThhOWYtM2Y4ZDRjYWYxOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpgZvOmAJLNSToBycy3oUWB/qnq96T3mz9Lz4cnN+5RgOIeEVWjq3Zp
nQ6v7Mf5LjnVeo3j9GGDPgGLHa+kSIqVYK84vWLLe+62lguwgRpihzL2r537+3Gb
holQf+3QigUhN8AVI8DwK/nP3cU4pSOcRVU6ML0i58lD8Xyx/kL1Kxw/AdQwcmD6
4DLw7p0/+w1uPQ1oSdrlyhvA+EuyljLaznwa88xnlDr9wfxy2nYjPQVtVh+KPigK
uyBG7gRlH2NF9omz4OdwHdD2KDA7aDPCY7rUEQ0UhY6z4c90pFNRGTe/+T1zhiq6
XnJVQ79A5vS74KCdMCJGPopqveMxOWU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:15 2025 by rpki-client