Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
File: c6097b58-c422-3f25-ad58-0368623ed0bc.roa (raw, json)
Hash identifier: TI0aSGYE62nn/UmL5rPkRceVRIbBTJr9d3jQ49ALI+I=
Subject key identifier: 10:2B:3D:3D:65:22:82:5D:48:AD:47:59:3E:90:0D:BA:C1:A2:63:3D
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F43285848EF613C380B8F0D7B79DCD178
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 5511
IP address blocks: 104.193.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3c:38:0b:8f:0d:7b:79:dc:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=80c3bbc7-3927-4d42-b6c3-7c6adf3d5835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:6a:10:08:03:08:34:43:1e:b8:6b:ed:7d:
4c:cf:8f:8e:59:1a:56:04:80:1b:14:1a:ff:8b:61:
46:74:63:1b:71:ed:ee:10:74:b5:ca:97:1f:a0:89:
c3:eb:44:94:a4:41:ef:6c:80:51:9f:34:de:72:48:
08:be:1a:99:16:a6:e4:a7:5b:03:a5:12:83:7d:b1:
36:f5:98:30:e9:6d:5c:b1:d0:11:46:d0:69:fd:c7:
38:4d:25:a0:44:ad:74:85:b7:74:a8:24:9f:48:03:
aa:11:6d:65:71:ee:c8:fb:97:60:53:ea:4f:dd:14:
28:8d:41:4d:9c:2d:6e:f1:39:01:bd:77:f6:cb:32:
da:d7:ac:26:76:cc:1e:9b:b2:8d:5b:32:a2:f7:27:
59:01:7b:5f:10:b2:5d:a5:b4:da:08:5f:6a:64:7f:
3a:fe:8a:48:9d:a0:04:61:71:bb:0d:7c:76:71:cc:
a3:b4:c4:83:e0:ee:74:45:83:36:17:23:9a:fa:91:
09:36:24:d7:a8:2c:bf:32:34:34:ea:8f:f7:33:e0:
72:ae:fa:ff:2f:a2:27:52:44:15:bc:94:97:5a:e8:
2d:88:46:28:e1:5a:7c:0d:23:79:0f:32:28:5d:ab:
c9:fd:e0:f7:21:ba:b0:ae:b7:bd:7b:ca:b8:7f:69:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:3D:3D:65:22:82:5D:48:AD:47:59:3E:90:0D:BA:C1:A2:63:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:88:6e:25:74:bd:ba:51:69:5c:65:46:b6:40:c0:2e:98:84:
9b:08:42:54:3c:09:ba:08:6e:9f:74:ab:7f:c6:2d:be:0a:86:
b1:1d:f3:46:7a:09:c4:b9:d9:95:ef:a2:5b:a5:2d:82:2e:31:
0c:37:aa:f3:a4:8d:86:71:7f:22:8f:48:a6:74:ce:51:5f:bb:
ef:d9:63:75:74:f2:c9:9c:46:74:85:44:0a:1d:cd:25:e6:6b:
35:29:d4:fa:c6:48:17:67:bc:bf:e9:69:93:de:ca:38:41:73:
a7:2c:2f:19:5c:df:ba:f1:39:76:9e:e8:f0:03:75:4b:2c:bf:
ed:ae:1c:23:27:33:63:b7:71:11:43:47:51:7b:2a:c5:07:99:
cb:61:27:e9:e9:55:ff:33:56:f5:f8:cc:58:d7:0f:c9:bf:ac:
b6:90:82:e5:5e:21:96:72:73:e8:e1:dc:cf:4e:65:f1:30:85:
8a:ac:ca:2c:50:ed:f1:96:a6:8d:a5:6e:61:54:ed:1f:d5:d3:
64:5e:42:11:85:72:a9:30:1a:b2:da:0a:d0:17:39:52:e3:42:
4c:44:7c:a8:92:41:3e:f3:cf:17:e3:26:d8:0d:eb:0d:ed:e5:
18:38:71:f7:97:e0:df:65:e1:c0:29:ab:07:f4:b3:9b:af:69:
ef:ed:76:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTw4C48Ne3nc0XgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ODBjM2JiYzctMzkyNy00ZDQyLWI2YzMtN2M2YWRmM2Q1ODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghhqEAgDCDRDHrhr7X1Mz4+OWRpWBIAbFBr/
i2FGdGMbce3uEHS1ypcfoInD60SUpEHvbIBRnzTeckgIvhqZFqbkp1sDpRKDfbE2
9Zgw6W1csdARRtBp/cc4TSWgRK10hbd0qCSfSAOqEW1lce7I+5dgU+pP3RQojUFN
nC1u8TkBvXf2yzLa16wmdswem7KNWzKi9ydZAXtfELJdpbTaCF9qZH86/opInaAE
YXG7DXx2ccyjtMSD4O50RYM2FyOa+pEJNiTXqCy/MjQ06o/3M+Byrvr/L6InUkQV
vJSXWugtiEYo4Vp8DSN5DzIoXavJ/eD3Ibqwrre9e8q4f2mWUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBArPT1lIoJdSK1HWT6QDbrBomM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvYzYwOTdiNTgtYzQyMi0z
ZjI1LWFkNTgtMDM2ODYyM2VkMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKIbiV0vbpRaVxlRrZAwC6YhJsIQlQ8CboIbp90q3/GLb4KhrEd80Z6
CcS52ZXvolulLYIuMQw3qvOkjYZxfyKPSKZ0zlFfu+/ZY3V08smcRnSFRAodzSXm
azUp1PrGSBdnvL/paZPeyjhBc6csLxlc37rxOXae6PADdUssv+2uHCMnM2O3cRFD
R1F7KsUHmcthJ+npVf8zVvX4zFjXD8m/rLaQguVeIZZyc+jh3M9OZfEwhYqsyixQ
7fGWpo2lbmFU7R/V02ReQhGFcqkwGrLaCtAXOVLjQkxEfKiSQT7zzxfjJtgN6w3t
5Rg4cfeX4N9l4cApqwf0s5uvae/tdss=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:35 2025 by rpki-client