Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa
File: 1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa (raw, json)
Hash identifier: epzSTxrLBqB2gkvmfyfFwywh4YcEld5Hg3c7r7ZK/eE=
Subject key identifier: 13:42:AE:A3:F9:D4:05:AF:6B:99:1E:B3:8C:B6:C5:AD:C8:C0:CC:57
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254A64B2332B2B1A27D66C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa
Signing time: Mon 09 Dec 2024 04:41:41 +0000
ROA not before: Mon 09 Dec 2024 04:41:41 +0000
ROA not after: Sun 09 Mar 2025 04:41:41 +0000
asID: 13335
IP address blocks: 104.20.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4a:64:b2:33:2b:2b:1a:27:d6:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:41:41 2024 GMT
Not After : Mar 9 04:41:41 2025 GMT
Subject: CN=5da1b9e6-17eb-4425-8827-0154ecdea754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:b1:38:17:28:67:fc:26:c6:d1:6b:60:7f:
f1:ca:8b:ae:7e:69:9d:7a:f6:68:dc:cf:cd:16:f5:
85:9e:f8:60:46:f0:c5:05:3f:c1:34:30:24:b0:5d:
67:36:7a:26:16:dc:9c:bf:23:14:ab:42:a8:24:a8:
fa:a6:5d:6b:a4:fb:bf:9b:0b:df:18:7a:29:9c:c9:
d9:e6:62:69:e3:5d:34:85:62:8f:a6:99:9c:2f:d0:
2a:6a:a3:ea:11:5e:fe:56:c2:d6:32:05:83:3c:c7:
42:1d:ad:8d:47:7d:53:b1:4b:e9:b8:db:58:bb:79:
a2:00:54:82:fc:4d:2f:f2:a9:06:d8:05:53:8d:d1:
aa:d4:a5:ea:f0:c5:98:31:97:28:d7:be:5b:61:96:
b4:4d:c2:5f:1b:9b:6d:3a:33:f7:9d:16:97:2b:cf:
d9:7c:81:cc:bd:5f:01:e8:d5:14:6a:f4:14:a5:3e:
5b:05:e2:2b:e6:66:90:16:72:31:35:c7:63:b4:89:
59:fa:21:b7:dc:83:d3:e0:75:bd:24:ec:86:b9:6a:
0e:3e:ec:aa:a8:74:ec:11:9d:41:bb:50:d8:55:8a:
b8:a4:99:a8:e6:a3:8d:da:c9:d3:fd:e8:9c:59:49:
7a:32:7e:e2:fc:53:aa:2a:61:d1:2b:ce:5d:6c:da:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:42:AE:A3:F9:D4:05:AF:6B:99:1E:B3:8C:B6:C5:AD:C8:C0:CC:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:64:5d:a8:5a:f7:1e:57:38:9b:62:ce:b9:f4:82:83:5b:da:
74:f1:9c:1c:69:6d:17:ae:1d:3a:3e:c9:2b:9c:d0:aa:31:2e:
d2:fc:ad:7b:63:0c:fa:66:d9:95:ee:d2:6f:aa:dd:a8:25:4c:
d9:62:b1:34:a8:2d:62:d5:c5:3c:50:c1:bc:28:ac:51:b4:8a:
aa:48:b1:6e:22:ca:67:c3:b4:d9:2c:d1:25:dc:c4:ba:f4:fb:
ff:23:41:f7:4c:d2:ef:9b:8d:f9:94:c4:3f:67:21:55:e5:0a:
f8:1d:93:dd:4f:6d:30:6f:dc:6d:9c:54:e9:24:93:32:74:b0:
9f:b4:a9:b0:90:fa:4d:20:bf:7f:11:09:a4:c3:81:88:42:b7:
f4:cb:a1:87:3f:35:ca:ab:d1:cd:27:61:38:f7:5c:df:5a:ab:
0c:b5:91:f6:ac:7a:38:4e:db:d1:51:49:27:93:94:3f:d0:73:
33:37:66:37:03:e0:01:dd:e3:49:0a:ad:0f:3e:26:4e:5d:d2:
07:74:a8:f8:14:a7:0e:e5:f4:9b:4c:4e:33:0f:93:c2:72:a7:
d3:81:d7:10:26:88:dd:8a:bb:39:2f:ed:31:0c:24:b9:50:32:
b5:c7:60:e4:ea:a3:f6:d6:c7:13:88:3b:97:19:e3:4d:00:25:
3d:67:b5:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSmSyMysrGifWbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0NDE0MVoXDTI1MDMwOTA0NDE0MVowLzEtMCsGA1UEAxMk
NWRhMWI5ZTYtMTdlYi00NDI1LTg4MjctMDE1NGVjZGVhNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32xOBcoZ/wmxtFrYH/xyouufmmdevZo3M/N
FvWFnvhgRvDFBT/BNDAksF1nNnomFtycvyMUq0KoJKj6pl1rpPu/mwvfGHopnMnZ
5mJp4100hWKPppmcL9AqaqPqEV7+VsLWMgWDPMdCHa2NR31TsUvpuNtYu3miAFSC
/E0v8qkG2AVTjdGq1KXq8MWYMZco175bYZa0TcJfG5ttOjP3nRaXK8/ZfIHMvV8B
6NUUavQUpT5bBeIr5maQFnIxNcdjtIlZ+iG33IPT4HW9JOyGuWoOPuyqqHTsEZ1B
u1DYVYq4pJmo5qON2snT/eicWUl6Mn7i/FOqKmHRK85dbNqVywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNCrqP51AWva5kes4y2xa3IwMxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWM4ZWRkODAtNjFhMi0z
MmQ5LWEwYzctYTQwYzc3ZDYwNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhkXaha9x5XOJtizrn0goNb2nTxnBxpbReuHTo+ySuc0KoxLtL8rXtj
DPpm2ZXu0m+q3aglTNlisTSoLWLVxTxQwbworFG0iqpIsW4iymfDtNks0SXcxLr0
+/8jQfdM0u+bjfmUxD9nIVXlCvgdk91PbTBv3G2cVOkkkzJ0sJ+0qbCQ+k0gv38R
CaTDgYhCt/TLoYc/Ncqr0c0nYTj3XN9aqwy1kfasejhO29FRSSeTlD/QczM3ZjcD
4AHd40kKrQ8+Jk5d0gd0qPgUpw7l9JtMTjMPk8Jyp9OB1xAmiN2Kuzkv7TEMJLlQ
MrXHYOTqo/bWxxOIO5cZ400AJT1ntcs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:23 2025 by rpki-client