Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16f415cb-13a5-369e-9ad5-84ca94ef7683.roa
File: 16f415cb-13a5-369e-9ad5-84ca94ef7683.roa (raw, json)
Hash identifier: sDi1C94tUCaxGWUkqvqDPKqSa8KQDKvlalgQOdbozn4=
Subject key identifier: 4A:BE:95:A4:FB:97:C4:19:19:CF:81:0C:3C:E6:3B:2D:19:B3:F5:37
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254AEF842FB1A8148FA8DF40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16f415cb-13a5-369e-9ad5-84ca94ef7683.roa
Signing time: Mon 09 Dec 2024 04:42:47 +0000
ROA not before: Mon 09 Dec 2024 04:42:47 +0000
ROA not after: Sun 09 Mar 2025 04:42:47 +0000
asID: 13335
IP address blocks: 104.21.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4a:ef:84:2f:b1:a8:14:8f:a8:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:42:47 2024 GMT
Not After : Mar 9 04:42:47 2025 GMT
Subject: CN=4801eaef-2794-4079-90e7-9d1522e72969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:d1:0a:cf:21:c7:5f:0c:09:53:1b:8b:9e:
fb:67:56:29:57:c8:fc:6d:93:69:30:96:33:ff:1d:
2a:d1:4d:77:9e:ef:8c:6c:56:a3:0c:5a:ac:46:5f:
b5:a9:ec:e6:1c:03:8d:b7:9d:36:ef:cd:94:79:e3:
1e:01:69:b5:b1:e4:03:44:d7:82:b3:04:5b:23:8e:
d2:05:d2:82:ec:8a:02:21:b9:40:7b:84:17:2f:0e:
e8:00:7d:d2:f0:7c:5a:17:77:1b:98:f3:cf:67:9b:
2b:dc:f0:dd:44:45:1c:04:dd:1e:ce:b0:5f:1c:1b:
e3:07:b8:d7:04:ea:d9:8a:69:6a:5c:6d:c8:68:0e:
e1:a7:da:10:50:63:40:91:19:ea:f2:67:60:38:0e:
12:b8:a2:a1:d7:43:12:c2:02:75:a9:1a:f8:1a:90:
d9:c2:6a:26:26:6a:7c:8b:a5:44:02:86:44:33:90:
ab:c2:fb:81:ba:71:18:01:56:ea:ca:a5:49:fc:f2:
d8:63:47:2b:0c:2f:20:a5:87:6c:ff:96:63:b7:4e:
f0:e9:be:ef:f6:11:cb:2d:8d:49:ff:0a:1e:26:ad:
09:df:3e:d1:5f:a3:e5:0c:9b:67:4f:de:4e:f6:89:
3a:48:a2:4f:1e:7e:98:95:b1:96:cb:56:65:d0:2f:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BE:95:A4:FB:97:C4:19:19:CF:81:0C:3C:E6:3B:2D:19:B3:F5:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16f415cb-13a5-369e-9ad5-84ca94ef7683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:2e:86:52:86:a0:68:1e:c5:ce:95:79:7c:8c:13:64:5e:2e:
d8:a7:df:32:11:3e:12:34:bb:e5:6c:f4:59:77:1f:48:14:ff:
7c:75:08:a8:98:7f:de:8f:ea:8a:0b:e3:4e:06:a1:b1:51:05:
9d:e2:41:96:ef:25:c5:4c:d8:2b:d2:b9:d7:ff:c2:37:81:32:
80:8a:4b:6c:37:41:54:ba:a3:fe:cd:c9:df:de:dc:c8:ee:c0:
aa:c5:84:9b:64:9a:81:63:81:de:f0:01:ef:7a:3a:4b:33:4c:
86:06:e2:13:28:e9:c6:8f:cf:5e:71:f1:1d:be:17:5c:0e:b6:
46:c0:54:ff:3d:56:da:3e:15:36:c3:d9:1f:dc:75:b1:7f:9e:
c7:c0:2f:33:38:c5:bd:f9:fb:c8:77:3d:d8:09:52:a9:ba:5a:
a5:4f:4a:2b:d9:05:20:7f:f7:8a:d7:97:a7:39:4f:df:a0:21:
a4:13:59:3b:4a:24:41:ae:a8:12:5d:ec:67:89:85:30:96:82:
b5:be:6e:70:63:6c:5b:e8:52:08:26:71:04:aa:50:ec:6c:4b:
53:39:31:50:a9:af:01:94:85:c2:7e:72:24:d2:e8:db:75:b7:
d5:82:3d:ab:31:58:59:a6:07:81:12:40:08:4b:c5:31:49:65:
8a:a4:93:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSu+EL7GoFI+o30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0NDI0N1oXDTI1MDMwOTA0NDI0N1owLzEtMCsGA1UEAxMk
NDgwMWVhZWYtMjc5NC00MDc5LTkwZTctOWQxNTIyZTcyOTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt/RCs8hx18MCVMbi577Z1YpV8j8bZNpMJYz
/x0q0U13nu+MbFajDFqsRl+1qezmHAONt502782UeeMeAWm1seQDRNeCswRbI47S
BdKC7IoCIblAe4QXLw7oAH3S8HxaF3cbmPPPZ5sr3PDdREUcBN0ezrBfHBvjB7jX
BOrZimlqXG3IaA7hp9oQUGNAkRnq8mdgOA4SuKKh10MSwgJ1qRr4GpDZwmomJmp8
i6VEAoZEM5CrwvuBunEYAVbqyqVJ/PLYY0crDC8gpYds/5Zjt07w6b7v9hHLLY1J
/woeJq0J3z7RX6PlDJtnT95O9ok6SKJPHn6YlbGWy1Zl0C/luQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEq+laT7l8QZGc+BDDzmOy0Zs/U3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTZmNDE1Y2ItMTNhNS0z
NjllLTlhZDUtODRjYTk0ZWY3NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaBVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYuhlKGoGgexc6VeXyME2ReLtin3zIRPhI0u+Vs9Fl3H0gU/3x1CKiY
f96P6ooL404GobFRBZ3iQZbvJcVM2CvSudf/wjeBMoCKS2w3QVS6o/7Nyd/e3Mju
wKrFhJtkmoFjgd7wAe96OkszTIYG4hMo6caPz15x8R2+F1wOtkbAVP89Vto+FTbD
2R/cdbF/nsfALzM4xb35+8h3PdgJUqm6WqVPSivZBSB/94rXl6c5T9+gIaQTWTtK
JEGuqBJd7GeJhTCWgrW+bnBjbFvoUggmcQSqUOxsS1M5MVCprwGUhcJ+ciTS6Nt1
t9WCPasxWFmmB4ESQAhLxTFJZYqkk+c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:08 2025 by rpki-client