Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa
File: 2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa (raw, json)
Hash identifier: 3onDy34Lsxtp9mbcixCboQTLKNHefhYaxOnwC+cAW28=
Subject key identifier: D9:79:A3:59:29:74:26:82:FC:CF:B1:4A:1D:54:6C:37:71:B0:3A:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243FB0C6B42EEEEFBCD4F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.76.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:fb:0c:6b:42:ee:ee:fb:cd:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=6a9b3a14-f8ed-41dd-a9f0-01fe5838cf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:d9:fb:13:bc:f2:c9:f0:fd:41:76:6b:6b:
09:2a:7e:1e:e6:73:40:d8:b5:b9:8b:ec:6f:b1:2b:
1d:9a:ff:1b:7a:37:45:59:37:bb:fb:f1:54:08:d3:
4c:0c:5c:45:52:e4:e7:98:74:36:74:c9:f4:ab:bd:
90:19:ea:bf:86:e3:67:56:f3:57:bd:fb:2a:53:9d:
1e:36:68:c6:48:19:68:9a:43:94:41:75:1c:4f:48:
9a:43:bb:3e:8b:43:d8:38:5b:e8:79:38:28:16:fd:
f0:ce:ad:b5:b3:fc:1b:6f:de:20:32:a1:6b:4e:dd:
7a:cf:ba:85:72:6a:04:93:93:fc:4e:41:5a:8b:1e:
f3:84:44:82:3f:c8:a1:02:00:89:98:03:7c:7d:54:
2a:ea:cb:97:aa:13:5c:28:ec:4d:72:7a:0a:c0:6e:
c0:14:8c:ed:8a:bf:a6:8f:76:04:9f:df:03:92:ab:
8b:7e:d5:5e:0d:8b:60:d9:40:04:4c:f7:37:2c:87:
52:dd:87:41:a3:23:5d:81:3f:a3:68:75:ad:3d:8a:
fc:30:ab:68:c1:ed:6d:ab:2b:fe:c1:be:c6:31:f9:
fb:aa:99:a1:7d:40:17:cf:14:fb:e3:ce:5c:ce:4d:
ac:14:19:19:55:f7:46:11:2d:e3:53:b3:c2:1b:7d:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:79:A3:59:29:74:26:82:FC:CF:B1:4A:1D:54:6C:37:71:B0:3A:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.76.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:a9:33:99:38:be:32:5a:11:24:4f:4c:8e:65:54:ac:78:30:
ed:7f:9f:f9:b0:0e:73:a9:75:3e:b3:d2:b9:97:58:cf:24:b2:
c6:51:8f:d3:d1:dd:e6:91:16:5a:ee:12:ee:c7:05:4a:04:4a:
7b:a4:9b:9e:1a:b3:1d:d4:38:a6:1b:31:2a:70:35:4e:6a:13:
23:bb:f7:31:c2:52:4f:93:96:60:14:c6:9a:2a:6a:9e:98:42:
e9:70:21:a8:41:1b:9a:5e:70:c8:fe:64:7e:94:15:db:89:e2:
6a:47:79:d0:bb:b8:ed:c2:0f:e3:c9:ed:ae:f3:53:0b:09:4a:
46:94:e8:8d:ab:be:3e:9e:51:a4:a5:2a:55:14:d3:cc:77:1f:
c3:13:df:f6:57:d9:45:0c:b6:de:83:d8:10:fd:4e:f9:1d:27:
50:fe:d4:90:a5:8d:64:36:fb:68:1c:ec:6a:1b:cb:f0:b5:5b:
9b:b9:77:a8:e8:44:9b:c2:81:e9:72:52:bb:a5:64:b6:56:ec:
be:97:c2:ec:cd:52:f8:e3:73:98:dd:a0:93:52:16:06:a1:81:
17:91:a0:4c:a8:5c:70:ec:7f:65:99:59:9d:08:d3:de:a9:a5:
28:02:e4:b9:d2:b1:b4:cd:8a:e5:cb:75:0a:68:e6:a0:e1:59:
12:5f:99:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ/sMa0Lu7vvNTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NmE5YjNhMTQtZjhlZC00MWRkLWE5ZjAtMDFmZTU4MzhjZjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmPZ+xO88snw/UF2a2sJKn4e5nNA2LW5i+xv
sSsdmv8bejdFWTe7+/FUCNNMDFxFUuTnmHQ2dMn0q72QGeq/huNnVvNXvfsqU50e
NmjGSBlomkOUQXUcT0iaQ7s+i0PYOFvoeTgoFv3wzq21s/wbb94gMqFrTt16z7qF
cmoEk5P8TkFaix7zhESCP8ihAgCJmAN8fVQq6suXqhNcKOxNcnoKwG7AFIztir+m
j3YEn98DkquLftVeDYtg2UAETPc3LIdS3YdBoyNdgT+jaHWtPYr8MKtowe1tqyv+
wb7GMfn7qpmhfUAXzxT7485czk2sFBkZVfdGES3jU7PCG32hlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNl5o1kpdCaC/M+xSh1UbDdxsDpNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmJkNWQ4YmEtOTdkYS0z
YjQ0LWE2ZmItNTU2ODdiOGEwNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGepM5k4vjJaESRPTI5lVKx4MO1/n/mwDnOpdT6z0rmXWM8kssZRj9PR
3eaRFlruEu7HBUoESnukm54asx3UOKYbMSpwNU5qEyO79zHCUk+TlmAUxpoqap6Y
QulwIahBG5pecMj+ZH6UFduJ4mpHedC7uO3CD+PJ7a7zUwsJSkaU6I2rvj6eUaSl
KlUU08x3H8MT3/ZX2UUMtt6D2BD9TvkdJ1D+1JCljWQ2+2gc7Goby/C1W5u5d6jo
RJvCgelyUrulZLZW7L6XwuzNUvjjc5jdoJNSFgahgReRoEyoXHDsf2WZWZ0I096p
pSgC5LnSsbTNiuXLdQpo5qDhWRJfmUI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:06 2025 by rpki-client