Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/001b5382-c541-389b-ae28-d0d1b912d2af.roa
File: 001b5382-c541-389b-ae28-d0d1b912d2af.roa (raw, json)
Hash identifier: eZISUM9Ji7qtoWFtKJdMJktYa0RMxVrzrevdJG8oaMc=
Subject key identifier: 66:29:24:D0:32:CD:F2:E4:5C:D3:B9:C3:57:1D:27:71:E4:C9:8C:E9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482548463C25E2FD6FABED66BE
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/001b5382-c541-389b-ae28-d0d1b912d2af.roa
Signing time: Mon 09 Dec 2024 04:37:25 +0000
ROA not before: Mon 09 Dec 2024 04:37:25 +0000
ROA not after: Sun 09 Mar 2025 04:37:25 +0000
asID: 13335
IP address blocks: 104.18.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:48:46:3c:25:e2:fd:6f:ab:ed:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:37:25 2024 GMT
Not After : Mar 9 04:37:25 2025 GMT
Subject: CN=9e5ec7b9-de39-49e7-b419-3083f82acc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:6b:b8:20:7f:f9:3b:f3:ed:45:e6:b0:31:
27:17:a4:e5:ad:99:69:3e:85:d5:b9:f1:ca:41:7b:
fc:9d:9a:a5:57:2b:10:8b:13:b0:92:cd:51:69:f4:
9e:4b:42:f6:87:0f:bc:52:d9:e1:bc:c3:00:ea:1d:
2d:c5:40:06:a4:9d:f3:12:fc:d6:4d:fd:83:81:81:
1d:bd:01:ea:38:14:a0:43:68:11:f5:9d:a8:c3:91:
e6:07:4f:a2:24:b5:49:5b:1d:13:18:df:3a:ad:0b:
9c:f2:dd:ae:e9:64:0a:c6:88:73:54:5f:32:d7:13:
2e:67:08:61:da:23:b0:d3:49:92:36:2b:35:e6:78:
04:1a:77:88:7b:a5:d9:5c:7e:66:52:23:1d:96:40:
d4:15:f1:94:84:9a:45:73:16:5e:79:8b:d7:99:36:
ee:69:4a:10:0e:a1:c2:ad:97:93:38:6b:a3:f7:f4:
c6:70:bd:d1:7b:89:67:b8:7e:68:94:3a:0b:1c:91:
6e:75:00:01:2c:13:6d:b7:ab:aa:22:26:8f:91:fa:
d6:05:0c:b1:0e:e5:e6:a4:a2:cc:01:5a:d3:ac:fd:
01:5e:65:e0:c4:79:f0:11:cb:da:21:0c:f2:2c:dd:
ce:6f:f8:3e:fc:3f:09:2f:7b:e2:80:2b:19:f1:ae:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:24:D0:32:CD:F2:E4:5C:D3:B9:C3:57:1D:27:71:E4:C9:8C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/001b5382-c541-389b-ae28-d0d1b912d2af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:45:e5:8b:ba:f6:76:a7:93:61:8c:bd:cc:5b:4d:86:e9:8f:
9c:3a:26:65:d8:82:f0:06:83:7c:60:71:ad:bf:5d:f0:58:b6:
f5:06:81:78:e8:2c:6d:af:86:35:45:b5:48:c7:5e:c2:96:b4:
bd:8b:55:6a:a1:ff:05:16:71:00:c6:63:f5:1d:1a:b8:f9:4b:
75:2f:21:cc:ca:67:60:3b:20:d7:29:7e:de:e4:c1:76:73:a3:
51:0d:ff:46:76:81:c6:81:9b:8f:02:30:15:df:21:e3:96:d1:
a7:fd:c8:c9:d2:5f:87:ac:6f:0e:4f:23:41:ec:91:9c:5a:e2:
bd:25:49:ec:19:64:4d:3b:5c:d7:e9:5f:65:36:2c:d1:6b:1d:
b9:bb:64:ab:54:b8:9b:71:50:5e:5f:13:d0:63:e7:ab:7c:38:
58:eb:3d:e2:49:df:5e:d6:a5:48:94:57:87:71:99:db:9e:e1:
c1:35:6e:c8:ab:ba:bf:aa:fb:e8:07:79:96:e5:32:40:33:04:
21:09:f8:4a:2c:b4:6d:51:e2:32:93:6c:18:a6:ec:36:10:ea:
71:8c:f6:27:23:b1:b9:e9:5b:55:c4:50:22:59:70:d2:66:51:
ec:02:7f:79:24:93:c7:8c:02:26:b3:d8:16:3a:d8:be:0b:fb:
3e:15:fa:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSEY8JeL9b6vtZr4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0MzcyNVoXDTI1MDMwOTA0MzcyNVowLzEtMCsGA1UEAxMk
OWU1ZWM3YjktZGUzOS00OWU3LWI0MTktMzA4M2Y4MmFjYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeZruCB/+Tvz7UXmsDEnF6TlrZlpPoXVufHK
QXv8nZqlVysQixOwks1RafSeS0L2hw+8UtnhvMMA6h0txUAGpJ3zEvzWTf2DgYEd
vQHqOBSgQ2gR9Z2ow5HmB0+iJLVJWx0TGN86rQuc8t2u6WQKxohzVF8y1xMuZwhh
2iOw00mSNis15ngEGneIe6XZXH5mUiMdlkDUFfGUhJpFcxZeeYvXmTbuaUoQDqHC
rZeTOGuj9/TGcL3Re4lnuH5olDoLHJFudQABLBNtt6uqIiaPkfrWBQyxDuXmpKLM
AVrTrP0BXmXgxHnwEcvaIQzyLN3Ob/g+/D8JL3vigCsZ8a6rvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYpJNAyzfLkXNO5w1cdJ3HkyYzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDAxYjUzODItYzU0MS0z
ODliLWFlMjgtZDBkMWI5MTJkMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBLwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVF5Yu69nank2GMvcxbTYbpj5w6JmXYgvAGg3xgca2/XfBYtvUGgXjo
LG2vhjVFtUjHXsKWtL2LVWqh/wUWcQDGY/UdGrj5S3UvIczKZ2A7INcpft7kwXZz
o1EN/0Z2gcaBm48CMBXfIeOW0af9yMnSX4esbw5PI0HskZxa4r0lSewZZE07XNfp
X2U2LNFrHbm7ZKtUuJtxUF5fE9Bj56t8OFjrPeJJ317WpUiUV4dxmdue4cE1bsir
ur+q++gHeZblMkAzBCEJ+EostG1R4jKTbBim7DYQ6nGM9icjsbnpW1XEUCJZcNJm
UewCf3kkk8eMAiaz2BY62L4L+z4V+iQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:27 2025 by rpki-client