Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa
File: 2d04850b-c425-399f-a2a3-1e07cbe5340a.roa (raw, json)
Hash identifier: 9GLnmTzrRYWvLx6GTiIPjIBK9rMp4lYBQcbhtE44Ujg=
Subject key identifier: 93:91:F8:B1:D8:9E:6C:C9:5D:61:3B:A6:AC:A7:A0:02:8B:E8:3E:34
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A17A55985BFE7A4B592040
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa
Signing time: Tue 10 Dec 2024 00:48:46 +0000
ROA not before: Tue 10 Dec 2024 00:48:46 +0000
ROA not after: Sun 09 Mar 2025 23:48:46 +0000
asID: 13335
IP address blocks: 104.29.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a1:7a:55:98:5b:fe:7a:4b:59:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:48:46 2024 GMT
Not After : Mar 9 23:48:46 2025 GMT
Subject: CN=221a424d-2842-41a6-8508-3334bf5dedd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:0d:8f:27:fa:bd:b5:81:bf:d5:5d:24:36:
8c:d4:18:3f:31:86:fb:e0:56:b3:cc:b8:58:e7:92:
80:c2:52:d1:1b:57:55:a4:41:d0:fb:c2:2c:80:1f:
03:1d:55:f9:ab:d2:be:47:38:6e:41:e1:36:cd:f6:
ab:99:eb:e8:62:95:9c:e7:0d:8c:e8:13:6e:66:f6:
a3:88:ce:89:af:7d:ec:8c:f5:af:0a:40:ce:01:e0:
20:9b:10:6d:aa:c6:b3:02:31:a0:c9:49:66:e7:cb:
e6:63:b2:de:30:d6:98:3e:3d:b1:3f:c8:2d:75:ec:
f4:3a:48:b4:b3:c9:04:5f:f7:2c:fd:9e:85:60:55:
ed:6f:3f:63:80:44:82:75:96:1c:da:bf:33:f4:ad:
da:77:69:1e:2b:71:6c:fc:ff:d8:87:18:5b:ee:ba:
ea:4f:2e:ec:04:e1:8d:d5:03:61:47:b4:9b:be:96:
55:a2:20:88:32:a9:8a:e0:99:d8:45:2a:29:33:53:
3f:c0:7e:7e:01:d7:45:ad:47:e2:2c:4e:ac:db:2e:
f1:49:62:fc:57:d6:f1:64:fa:09:5c:c7:31:b4:22:
55:68:5b:86:e2:64:3b:28:2b:4f:24:f0:30:be:cc:
8c:72:ea:33:f9:91:03:d9:3b:6d:b3:04:a7:28:11:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:F8:B1:D8:9E:6C:C9:5D:61:3B:A6:AC:A7:A0:02:8B:E8:3E:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d04850b-c425-399f-a2a3-1e07cbe5340a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:92:5e:5f:db:50:19:9b:4a:e3:e3:6f:57:a0:85:64:71:51:
dd:d8:ac:1b:ba:84:19:82:ab:cb:41:88:05:68:0a:ca:3e:56:
fd:1d:9b:b9:8d:33:a4:0a:94:a2:c7:5d:c6:91:71:d6:75:37:
45:60:d6:b4:18:ab:61:35:df:e7:4d:8e:58:f7:45:b5:99:59:
da:dd:dd:4c:5e:3b:17:91:ad:f0:8a:04:8a:a5:f4:d5:75:c9:
88:70:a0:6f:f7:b4:29:97:07:6c:48:49:b7:7c:8a:8c:55:b6:
65:62:bf:0b:90:67:5a:5f:b9:47:06:53:77:a1:aa:b1:12:c5:
03:b1:b8:f8:e3:fb:cb:d5:3d:d8:8f:55:68:60:6d:ce:d7:16:
2a:91:63:45:73:d7:91:bb:14:a7:cf:71:44:92:ab:3b:f0:05:
f6:5c:30:b1:4b:c7:6d:e5:79:cd:07:dd:63:7e:51:ac:18:ff:
25:96:00:e3:68:42:9e:15:90:b9:f1:e1:de:e0:18:26:5e:60:
f3:18:e3:92:de:6b:17:0a:c9:a6:10:91:01:d4:33:10:aa:2a:
9e:e6:26:93:de:5c:a9:24:cc:10:36:d7:b6:45:21:9e:47:41:
88:6c:e4:ef:37:7a:3f:c9:6e:70:d9:07:e4:b2:ae:15:4d:c1:
7d:dd:f9:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnoXpVmFv+ektZIEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAwNDg0NloXDTI1MDMwOTIzNDg0NlowLzEtMCsGA1UEAxMk
MjIxYTQyNGQtMjg0Mi00MWE2LTg1MDgtMzMzNGJmNWRlZGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygNjyf6vbWBv9VdJDaM1Bg/MYb74FazzLhY
55KAwlLRG1dVpEHQ+8IsgB8DHVX5q9K+RzhuQeE2zfarmevoYpWc5w2M6BNuZvaj
iM6Jr33sjPWvCkDOAeAgmxBtqsazAjGgyUlm58vmY7LeMNaYPj2xP8gtdez0Oki0
s8kEX/cs/Z6FYFXtbz9jgESCdZYc2r8z9K3ad2keK3Fs/P/Yhxhb7rrqTy7sBOGN
1QNhR7SbvpZVoiCIMqmK4JnYRSopM1M/wH5+AddFrUfiLE6s2y7xSWL8V9bxZPoJ
XMcxtCJVaFuG4mQ7KCtPJPAwvsyMcuoz+ZED2TttswSnKBFs9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOR+LHYnmzJXWE7pqynoAKL6D40MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQwNDg1MGItYzQyNS0z
OTlmLWEyYTMtMWUwN2NiZTUzNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWSXl/bUBmbSuPjb1eghWRxUd3YrBu6hBmCq8tBiAVoCso+Vv0dm7mN
M6QKlKLHXcaRcdZ1N0Vg1rQYq2E13+dNjlj3RbWZWdrd3UxeOxeRrfCKBIql9NV1
yYhwoG/3tCmXB2xISbd8ioxVtmVivwuQZ1pfuUcGU3ehqrESxQOxuPjj+8vVPdiP
VWhgbc7XFiqRY0Vz15G7FKfPcUSSqzvwBfZcMLFLx23lec0H3WN+UawY/yWWAONo
Qp4VkLnx4d7gGCZeYPMY45LeaxcKyaYQkQHUMxCqKp7mJpPeXKkkzBA217ZFIZ5H
QYhs5O83ej/JbnDZB+SyrhVNwX3d+Zk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:02 2025 by rpki-client