Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35a0e6ba-1d88-3a58-a76a-8aba8b74a95a.roa
File: 35a0e6ba-1d88-3a58-a76a-8aba8b74a95a.roa (raw, json)
Hash identifier: IL6VS9ecX/121npeStq8gInScVp5G0V1FvjTGBhtEoY=
Subject key identifier: 2E:EA:89:52:96:FC:90:64:76:1A:C5:20:51:2B:21:84:06:15:7E:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC1A73E97585CEDCEE680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35a0e6ba-1d88-3a58-a76a-8aba8b74a95a.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.94.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c1:a7:3e:97:58:5c:ed:ce:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=e145d895-a82e-4c32-b4e3-76a9658e413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:48:37:e3:94:a0:36:19:7b:56:be:a9:22:
aa:df:ca:44:92:e2:fa:4a:e6:33:4b:16:4c:ae:b7:
15:2e:16:f2:65:f9:c9:d9:11:9b:3a:45:3a:1d:91:
af:cf:be:51:cc:b2:9d:7b:51:a6:94:53:6c:cc:05:
78:26:5b:22:7a:cb:fc:25:4a:11:64:80:14:0a:2f:
15:40:88:f2:ec:27:53:39:10:ed:57:43:24:87:7e:
b6:01:f8:0b:19:a9:ef:fa:35:40:8a:11:92:2b:79:
df:1e:b1:e5:09:4a:56:eb:6f:7e:5b:2f:29:dd:43:
fc:9f:4e:12:21:43:10:02:04:33:51:19:88:d8:96:
b8:71:f0:39:89:4a:f7:52:fa:52:f8:3c:d2:c2:37:
91:cb:b3:29:40:75:41:79:65:d8:32:b9:3c:65:28:
35:3b:e0:0f:0c:04:be:f1:a2:55:81:81:d3:e7:71:
d5:d1:d0:69:03:2d:cd:0a:6a:8f:04:be:b1:27:89:
6a:47:e1:e6:36:99:eb:64:31:48:ea:d0:3d:bf:b7:
c4:2c:14:57:2c:32:e8:1b:45:ce:cc:89:14:7a:f0:
38:65:f1:c4:86:80:80:89:12:b6:30:17:ed:5b:3d:
a1:3b:cf:71:30:de:49:a6:e8:fc:16:a2:1d:86:c7:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:89:52:96:FC:90:64:76:1A:C5:20:51:2B:21:84:06:15:7E:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35a0e6ba-1d88-3a58-a76a-8aba8b74a95a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.94.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f1:31:5c:a5:7c:97:a7:39:9d:24:60:9e:e2:c6:ab:f2:53:
6d:59:9f:a0:e8:d4:c3:ff:62:39:c9:0e:34:82:8f:6b:2c:7a:
2a:31:e0:23:19:0a:7f:87:4a:78:01:73:f7:ff:ee:0d:03:cb:
55:f9:c8:15:84:18:7c:23:c8:61:24:08:6d:82:f4:21:26:99:
f6:73:0b:d2:96:ae:eb:24:24:46:84:0a:e0:96:a3:2b:24:d6:
8f:40:1a:7e:dd:04:2e:82:ab:eb:be:49:d8:7a:b8:fa:83:6d:
29:26:a8:47:e5:cd:ce:24:b5:15:86:de:e2:c5:1e:5f:5d:97:
f5:59:2f:e0:c8:1a:51:c9:7a:bc:d7:b5:8b:4d:67:9a:97:00:
79:26:c4:43:5c:0d:81:c9:fa:c2:db:b5:7e:2d:b0:51:06:1b:
da:75:47:b3:86:94:b4:85:38:8c:cf:fa:20:60:1d:a9:37:2c:
b9:00:4d:e6:21:04:67:83:0e:93:1a:a6:dc:b4:53:3c:f6:79:
3f:c4:e4:68:8a:33:75:90:45:af:9c:c2:d0:f0:43:12:85:e4:
ef:ef:f3:72:bc:d9:83:b4:96:63:65:98:ff:29:4d:dd:6d:79:
0e:25:52:7b:ea:e5:4e:a2:75:4a:e2:36:67:13:d6:a4:d1:56:
61:98:72:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DsGnPpdYXO3O5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZTE0NWQ4OTUtYTgyZS00YzMyLWI0ZTMtNzZhOTY1OGU0MTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVIN+OUoDYZe1a+qSKq38pEkuL6SuYzSxZM
rrcVLhbyZfnJ2RGbOkU6HZGvz75RzLKde1GmlFNszAV4Jlsiesv8JUoRZIAUCi8V
QIjy7CdTORDtV0Mkh362AfgLGanv+jVAihGSK3nfHrHlCUpW629+Wy8p3UP8n04S
IUMQAgQzURmI2Ja4cfA5iUr3UvpS+DzSwjeRy7MpQHVBeWXYMrk8ZSg1O+APDAS+
8aJVgYHT53HV0dBpAy3NCmqPBL6xJ4lqR+HmNpnrZDFI6tA9v7fELBRXLDLoG0XO
zIkUevA4ZfHEhoCAiRK2MBftWz2hO89xMN5Jpuj8FqIdhse4JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7qiVKW/JBkdhrFIFErIYQGFX4IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVhMGU2YmEtMWQ4OC0z
YTU4LWE3NmEtOGFiYThiNzRhOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaF5lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/xMVylfJenOZ0kYJ7ixqvyU21Zn6Do1MP/YjnJDjSCj2sseiox4CMZ
Cn+HSngBc/f/7g0Dy1X5yBWEGHwjyGEkCG2C9CEmmfZzC9KWruskJEaECuCWoysk
1o9AGn7dBC6Cq+u+Sdh6uPqDbSkmqEflzc4ktRWG3uLFHl9dl/VZL+DIGlHJerzX
tYtNZ5qXAHkmxENcDYHJ+sLbtX4tsFEGG9p1R7OGlLSFOIzP+iBgHak3LLkATeYh
BGeDDpMapty0Uzz2eT/E5GiKM3WQRa+cwtDwQxKF5O/v83K82YO0lmNlmP8pTd1t
eQ4lUnvq5U6idUriNmcT1qTRVmGYcgc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:56 2025 by rpki-client