Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ce1ec45-dcea-377b-a697-8f5ff33fb55d.roa
File: 0ce1ec45-dcea-377b-a697-8f5ff33fb55d.roa (raw, json)
Hash identifier: 13qb3PstiDrLZLA1hrmwAFEKZmrNWdAEaeXhxLCvJHk=
Subject key identifier: E1:AB:94:35:B8:D2:A0:F5:CF:45:71:BC:37:D4:C5:CD:04:95:C4:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490881699110B9A4831616E4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ce1ec45-dcea-377b-a697-8f5ff33fb55d.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 24319
IP address blocks: 104.123.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:69:91:10:b9:a4:83:16:16:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=c0ae0ea7-745f-40c8-9e3e-3e9f5168b39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:44:aa:4a:32:15:af:64:c6:ad:e8:05:59:
cb:b8:5c:49:9d:3d:2f:99:2d:02:17:a3:48:ea:e7:
48:27:cf:22:db:c9:0a:c0:68:a0:26:66:81:02:6b:
cc:5f:65:49:cc:aa:85:97:49:16:cd:9a:ef:c6:dc:
e1:7b:fb:19:59:d0:77:e2:ce:09:99:a1:93:19:c3:
c0:b6:2c:36:32:59:f7:26:c7:00:07:74:0e:59:26:
10:e6:6a:b3:1e:01:d6:f6:ce:c1:d9:77:d2:49:d0:
8b:cf:c6:30:d6:36:44:24:58:3f:2e:52:fe:8f:44:
88:d3:59:26:b4:22:2c:ee:75:60:89:d2:37:2d:77:
3f:e2:2a:e8:09:f9:48:bd:3a:77:be:2e:10:84:71:
08:2b:51:af:19:f1:4c:5c:54:cd:8c:14:4e:2d:24:
45:2e:f5:87:9d:aa:ac:56:bc:4f:1e:81:46:03:44:
fd:8b:61:73:47:74:e6:1b:70:e6:c2:a1:2c:0b:28:
67:b0:19:77:30:5a:e6:fd:97:bf:76:17:03:e7:14:
26:9c:12:85:cb:8c:71:06:01:f1:46:61:4d:39:49:
c2:77:dc:01:5c:4a:6c:14:03:96:32:a9:d9:96:b5:
a2:45:ec:c9:4d:35:35:b0:91:04:ea:25:38:a2:be:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:94:35:B8:D2:A0:F5:CF:45:71:BC:37:D4:C5:CD:04:95:C4:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ce1ec45-dcea-377b-a697-8f5ff33fb55d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:63:b5:84:bb:bb:b4:24:a2:9e:cd:fe:21:6a:28:bd:c4:54:
3d:f0:9a:79:3c:cf:b1:84:3d:85:ae:ca:ef:2b:5c:ee:de:52:
d3:b2:8e:38:de:47:c4:7b:dc:ba:ed:3a:46:0e:ea:3c:91:3f:
36:f2:e5:52:64:7a:92:15:9c:13:2c:fd:42:af:40:1f:90:b3:
49:aa:69:49:8c:1b:5d:7d:39:17:fd:5b:70:da:a1:ae:bf:f9:
49:15:fd:35:fa:ff:a7:f7:83:86:d6:1a:70:e0:3a:86:67:4e:
8b:ec:da:33:96:37:e9:92:07:20:bb:21:cf:63:64:ac:51:16:
c7:a5:de:d8:db:4a:1d:33:59:61:4a:9a:98:2e:8e:39:91:30:
7d:bc:c7:c5:6b:d5:40:88:6f:ee:fa:65:99:1f:f6:6f:d1:8a:
6d:6a:85:96:d2:60:61:56:91:85:82:61:9a:94:e6:34:a7:99:
80:7b:cf:b4:3e:01:24:40:53:25:42:d6:6b:74:ff:07:04:ee:
8e:e4:3d:04:c4:ef:97:ed:9a:a1:a8:69:c0:1e:a9:83:e6:c4:
e4:6b:47:f0:32:36:36:51:66:e8:d4:0f:69:7f:60:50:00:be:
f7:2e:e7:46:a1:eb:ad:70:f6:73:78:c3:14:c4:c5:5f:c5:32:
39:26:18:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWmRELmkgxYW5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
YzBhZTBlYTctNzQ1Zi00MGM4LTllM2UtM2U5ZjUxNjhiMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UdEqkoyFa9kxq3oBVnLuFxJnT0vmS0CF6NI
6udIJ88i28kKwGigJmaBAmvMX2VJzKqFl0kWzZrvxtzhe/sZWdB34s4JmaGTGcPA
tiw2Mln3JscAB3QOWSYQ5mqzHgHW9s7B2XfSSdCLz8Yw1jZEJFg/LlL+j0SI01km
tCIs7nVgidI3LXc/4iroCflIvTp3vi4QhHEIK1GvGfFMXFTNjBROLSRFLvWHnaqs
VrxPHoFGA0T9i2FzR3TmG3DmwqEsCyhnsBl3MFrm/Ze/dhcD5xQmnBKFy4xxBgHx
RmFNOUnCd9wBXEpsFAOWMqnZlrWiRezJTTU1sJEE6iU4or6JCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGrlDW40qD1z0VxvDfUxc0ElcTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNlMWVjNDUtZGNlYS0z
NzdiLWE2OTctOGY1ZmYzM2ZiNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHs6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVjtYS7u7Qkop7N/iFqKL3EVD3wmnk8z7GEPYWuyu8rXO7eUtOyjjje
R8R73LrtOkYO6jyRPzby5VJkepIVnBMs/UKvQB+Qs0mqaUmMG119ORf9W3Daoa6/
+UkV/TX6/6f3g4bWGnDgOoZnTovs2jOWN+mSByC7Ic9jZKxRFsel3tjbSh0zWWFK
mpgujjmRMH28x8Vr1UCIb+76ZZkf9m/Rim1qhZbSYGFWkYWCYZqU5jSnmYB7z7Q+
ASRAUyVC1mt0/wcE7o7kPQTE75ftmqGoacAeqYPmxORrR/AyNjZRZujUD2l/YFAA
vvcu50ah661w9nN4wxTExV/FMjkmGPM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:00 2025 by rpki-client