Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10d78f7a-2948-386a-87d6-99562cf49edc.roa
File: 10d78f7a-2948-386a-87d6-99562cf49edc.roa (raw, json)
Hash identifier: P7uKFr0dS7Nb8p2801mBDYF1UGZ4RKl/VQARusdJpjc=
Subject key identifier: 45:76:F0:1F:D7:4F:02:04:80:4D:51:01:00:56:44:F5:E0:C8:0A:8C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254ABB34ABB4B69B29004D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10d78f7a-2948-386a-87d6-99562cf49edc.roa
Signing time: Mon 09 Dec 2024 04:42:22 +0000
ROA not before: Mon 09 Dec 2024 04:42:22 +0000
ROA not after: Sun 09 Mar 2025 04:42:22 +0000
asID: 13335
IP address blocks: 104.21.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4a:bb:34:ab:b4:b6:9b:29:00:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:42:22 2024 GMT
Not After : Mar 9 04:42:22 2025 GMT
Subject: CN=ce471130-3238-4bd9-84c8-81667357fca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:c8:79:bd:e7:32:6d:18:b4:84:75:72:96:
39:98:a5:08:ea:24:b7:35:d1:d5:d0:c2:f3:e4:bc:
97:72:71:6a:1a:27:12:15:46:06:a8:99:cd:8f:af:
3e:c8:ce:09:7d:b9:94:f9:17:b1:58:89:5a:45:3c:
a7:71:53:87:58:e5:33:ed:79:71:49:81:6f:8d:40:
9b:92:5e:f2:d9:df:c2:09:96:92:13:a4:53:af:ae:
57:2a:b9:b1:94:a7:4a:9c:e8:f9:42:ce:ad:6a:32:
68:22:87:36:6c:57:38:12:b1:54:9a:44:07:d8:5d:
4d:dd:46:60:d6:09:5b:a2:8b:83:c9:59:b5:ee:88:
28:7a:81:ab:26:0a:31:f6:ce:92:60:34:46:32:ea:
23:95:d8:a4:92:5d:59:e7:4f:91:35:65:3a:d8:05:
5e:78:08:ca:5b:b5:c0:2d:11:58:b1:2b:1b:6b:7f:
33:ae:54:a3:41:2f:45:75:a1:0c:4b:ff:7e:59:22:
07:fb:5e:4e:58:03:39:1b:b7:23:53:ae:7b:99:29:
a2:ad:66:0f:4a:b5:b4:5d:d4:d8:4e:fe:66:3c:11:
12:33:70:7f:ca:ff:68:5a:d1:7b:b4:ba:18:15:6c:
50:c5:49:45:82:64:1d:e2:9d:16:a6:0b:1a:ae:2c:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:F0:1F:D7:4F:02:04:80:4D:51:01:00:56:44:F5:E0:C8:0A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/10d78f7a-2948-386a-87d6-99562cf49edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:c3:55:71:af:27:43:9b:20:a7:b6:71:6d:7d:4a:92:c8:86:
20:1c:38:a7:73:16:f6:ea:ae:8d:4c:03:7c:d0:7b:15:83:bd:
cc:30:4c:65:94:98:4f:03:ea:47:a7:fb:55:15:74:66:1c:d0:
31:2a:40:ea:ec:b1:cd:0d:3f:84:ee:0f:7f:55:8d:50:bc:5f:
52:4c:a1:dc:cf:06:bb:dd:4a:5d:6f:57:5d:e8:53:97:6d:ef:
77:5d:77:c4:52:32:42:f0:bf:32:cb:21:87:a9:86:1d:3d:c5:
0b:f1:1c:f8:27:2e:31:88:0b:62:a8:7e:e3:f6:24:71:19:e0:
87:33:0f:0e:f2:b6:eb:5a:85:ef:f0:19:bb:55:05:50:12:64:
1d:11:bd:49:ec:56:63:2b:00:e9:33:81:3b:2a:f2:53:ed:c2:
fd:42:52:1b:72:e1:09:a1:f7:53:3d:1f:ed:20:08:39:85:76:
42:eb:00:36:7c:6d:f3:e6:9d:4a:35:09:f7:de:e7:e2:a7:cb:
e4:3e:ad:95:34:d6:88:18:09:fc:d6:67:19:3c:2a:21:bc:42:
b5:fb:a3:8e:95:40:cf:64:44:0f:c7:2b:3e:ad:ae:1c:6b:53:
9d:7e:2d:cd:ed:c1:5d:bf:8e:c7:0a:46:f8:7b:42:2e:ae:fd:
c1:65:c0:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSrs0q7S2mykATQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0NDIyMloXDTI1MDMwOTA0NDIyMlowLzEtMCsGA1UEAxMk
Y2U0NzExMzAtMzIzOC00YmQ5LTg0YzgtODE2NjczNTdmY2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhynIeb3nMm0YtIR1cpY5mKUI6iS3NdHV0MLz
5LyXcnFqGicSFUYGqJnNj68+yM4JfbmU+RexWIlaRTyncVOHWOUz7XlxSYFvjUCb
kl7y2d/CCZaSE6RTr65XKrmxlKdKnOj5Qs6tajJoIoc2bFc4ErFUmkQH2F1N3UZg
1glboouDyVm17ogoeoGrJgox9s6SYDRGMuojldikkl1Z50+RNWU62AVeeAjKW7XA
LRFYsSsba38zrlSjQS9FdaEMS/9+WSIH+15OWAM5G7cjU657mSmirWYPSrW0XdTY
Tv5mPBESM3B/yv9oWtF7tLoYFWxQxUlFgmQd4p0WpgsarixH1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEV28B/XTwIEgE1RAQBWRPXgyAqMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTBkNzhmN2EtMjk0OC0z
ODZhLTg3ZDYtOTk1NjJjZjQ5ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLDVXGvJ0ObIKe2cW19SpLIhiAcOKdzFvbqro1MA3zQexWDvcwwTGWU
mE8D6ken+1UVdGYc0DEqQOrssc0NP4TuD39VjVC8X1JModzPBrvdSl1vV13oU5dt
73ddd8RSMkLwvzLLIYephh09xQvxHPgnLjGIC2KofuP2JHEZ4IczDw7ytutahe/w
GbtVBVASZB0RvUnsVmMrAOkzgTsq8lPtwv1CUhty4Qmh91M9H+0gCDmFdkLrADZ8
bfPmnUo1Cffe5+Kny+Q+rZU01ogYCfzWZxk8KiG8QrX7o46VQM9kRA/HKz6trhxr
U51+Lc3twV2/jscKRvh7Qi6u/cFlwDY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:28:12 2025 by rpki-client