Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/908965ad-c225-3c6a-9e65-6402687458e8.roa
File: 908965ad-c225-3c6a-9e65-6402687458e8.roa (raw, json)
Hash identifier: 3nosjH6HIJNZNQnGVEz8qQQSIxWpiOht1Zv4UPK26QY=
Subject key identifier: 58:A6:8A:F1:6C:11:EC:B6:8B:21:71:C5:EE:A2:DF:7D:B7:51:B1:0E
Certificate issuer: /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial: 010D0C9F43285840696EDAF43A1D67BCC9F1F280
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/908965ad-c225-3c6a-9e65-6402687458e8.roa
Signing time: Mon 13 Dec 2021 15:18:00 +0000
ROA not before: Mon 13 Dec 2021 15:18:00 +0000
ROA not after: Thu 03 Apr 2025 04:00:00 +0000
asID: 62240
IP address blocks: 104.234.167.0/24 maxlen: 24
104.234.62.0/24 maxlen: 24
104.234.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:69:6e:da:f4:3a:1d:67:bc:c9:f1:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Validity
Not Before: Dec 13 15:18:00 2021 GMT
Not After : Apr 3 04:00:00 2025 GMT
Subject: CN=28194377-cb8e-4535-afb4-19ec01235e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:22:de:93:b4:aa:6a:7a:dd:97:f7:cc:84:
78:15:ef:c5:a4:0e:2c:40:78:4e:7a:d8:77:d1:e0:
fe:51:ee:57:03:31:07:bb:92:c6:fa:70:2d:cd:c5:
e8:97:73:86:99:7a:a9:3e:6e:9d:4d:7d:84:f4:ed:
81:d7:ce:0f:7d:2b:ff:bc:6c:cb:53:8e:07:94:f5:
1a:cc:75:b4:30:29:b9:e7:36:81:67:07:03:f0:44:
7f:df:25:5b:5f:a1:fe:b9:6a:7b:3d:cb:b6:6c:e7:
ab:70:e1:97:fb:57:d8:5b:26:4d:ad:38:a4:4c:b8:
a0:c3:99:a7:c0:18:cc:0c:57:ba:62:f3:48:64:93:
d9:9b:77:de:44:72:80:ad:e6:b6:dc:51:2a:f9:3c:
6d:47:cc:7e:12:33:be:46:ee:16:e7:fe:14:e0:f1:
e8:7f:38:98:b3:a6:08:38:9f:c4:22:67:11:dd:16:
3b:3b:c4:9c:0d:29:d6:e2:e7:94:d6:9f:3e:6f:5c:
e0:42:2b:63:d8:69:99:d0:61:1b:51:21:fc:7d:0f:
35:ae:1a:33:c8:9a:77:37:47:20:95:1f:c0:a8:cd:
5a:e2:b3:96:0a:d5:f9:24:bd:d9:51:56:8e:f6:f7:
fd:7c:46:33:19:a9:1a:ae:74:ac:83:b1:00:a1:88:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:8A:F1:6C:11:EC:B6:8B:21:71:C5:EE:A2:DF:7D:B7:51:B1:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/908965ad-c225-3c6a-9e65-6402687458e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl
X509v3 Authority Key Identifier:
keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.234.3.0/24
104.234.62.0/24
104.234.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:79:f7:92:d9:e4:04:f9:b2:29:70:10:61:98:cf:dc:8c:90:
1c:0a:1b:c7:ee:bf:6b:0c:a2:58:12:36:76:ed:11:f2:25:4f:
eb:89:0a:c3:bf:9c:a4:7f:c7:b5:2e:cb:ce:f0:f8:91:f3:70:
33:f5:f0:1f:bc:63:c8:3d:70:4a:69:79:4a:af:77:43:81:38:
1b:a3:5a:cc:99:25:10:74:96:04:af:8d:41:41:c9:65:a5:68:
74:09:1a:4e:ae:f8:32:c7:e0:54:ae:33:a2:5e:0b:28:18:f3:
73:b5:f1:2e:13:fa:b3:15:05:35:6e:4d:06:70:0c:c1:be:b8:
62:95:ae:a9:7d:c4:f8:d6:40:ba:e9:79:33:67:45:d9:ca:ee:
bc:3d:36:d6:18:c9:66:a5:2d:21:67:e2:a9:79:b4:79:69:78:
62:bf:3d:0d:38:0b:b8:3c:4e:4b:59:6b:e3:7a:0d:a9:bc:6f:
9c:87:2f:83:50:3f:b7:e6:4a:f2:7d:b2:92:15:cf:a9:32:c0:
67:7b:e3:3b:e7:d4:06:5d:28:3d:8e:e8:b4:b7:45:12:68:66:
31:d1:73:02:66:ca:fd:f0:01:33:9c:50:8b:22:5b:7e:2f:00:
4b:46:2e:c5:5e:81:e6:46:db:77:b1:d1:89:5c:ae:65:74:b8:
96:fb:26:41
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEBpbtr0Oh1nvMnx8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI1MDQwMzA0MDAwMFowLzEtMCsGA1UEAxMk
MjgxOTQzNzctY2I4ZS00NTM1LWFmYjQtMTllYzAxMjM1ZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnesi3pO0qmp63Zf3zIR4Fe/FpA4sQHhOeth3
0eD+Ue5XAzEHu5LG+nAtzcXol3OGmXqpPm6dTX2E9O2B184PfSv/vGzLU44HlPUa
zHW0MCm55zaBZwcD8ER/3yVbX6H+uWp7Pcu2bOercOGX+1fYWyZNrTikTLigw5mn
wBjMDFe6YvNIZJPZm3feRHKArea23FEq+TxtR8x+EjO+Ru4W5/4U4PHofziYs6YI
OJ/EImcR3RY7O8ScDSnW4ueU1p8+b1zgQitj2GmZ0GEbUSH8fQ81rhozyJp3N0cg
lR/AqM1a4rOWCtX5JL3ZUVaO9vf9fEYzGakarnSsg7EAoYhjYQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFFimivFsEey2iyFxxe6i3323UbEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvOTA4OTY1YWQtYzIyNS0z
YzZhLTllNjUtNjQwMjY4NzQ1OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOoDAwQA
aOo+AwQAaOqnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABN595LZ5AT5silwEGGYz9yMkBwKG8fuv2sMolgS
NnbtEfIlT+uJCsO/nKR/x7Uuy87w+JHzcDP18B+8Y8g9cEppeUqvd0OBOBujWsyZ
JRB0lgSvjUFByWWlaHQJGk6u+DLH4FSuM6JeCygY83O18S4T+rMVBTVuTQZwDMG+
uGKVrql9xPjWQLrpeTNnRdnK7rw9NtYYyWalLSFn4ql5tHlpeGK/PQ04C7g8TktZ
a+N6Dam8b5yHL4NQP7fmSvJ9spIVz6kywGd74zvn1AZdKD2O6LS3RRJoZjHRcwJm
yv3wATOcUIsiW34vAEtGLsVegeZG23ex0YlcrmV0uJb7JkE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:55 2023 by rpki-client on console-fra.rpki-client.org