Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46817e25-b911-3130-9927-4d87f6034750.roa
File: 46817e25-b911-3130-9927-4d87f6034750.roa (raw, json)
Hash identifier: 1kAxyzCi1xe6oL36Ma2fmkkkKkg40g+e6NFYjlSoJ5Y=
Subject key identifier: 84:62:EA:F0:E6:E1:E4:02:4D:3B:C2:A0:71:5E:DF:9B:6C:05:C1:60
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254B342C36F86560D72A1080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46817e25-b911-3130-9927-4d87f6034750.roa
Signing time: Mon 09 Dec 2024 04:43:19 +0000
ROA not before: Mon 09 Dec 2024 04:43:19 +0000
ROA not after: Sun 09 Mar 2025 04:43:19 +0000
asID: 13335
IP address blocks: 104.21.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4b:34:2c:36:f8:65:60:d7:2a:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:43:19 2024 GMT
Not After : Mar 9 04:43:19 2025 GMT
Subject: CN=abfd56a4-0bc4-4f4b-b4b0-1725f48fb9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:0f:30:40:da:28:d1:a1:aa:a7:ef:a6:1d:
94:e5:63:ee:a6:07:9d:ff:f1:c1:f1:72:4c:42:a5:
70:67:c2:79:20:3d:ac:d9:bd:b7:99:a3:22:ab:b8:
ff:13:ce:9a:38:a9:c7:71:79:05:b5:30:bf:04:f6:
2b:aa:fb:6b:84:75:6a:41:80:7e:92:9e:b0:42:54:
9c:ed:21:bb:26:85:2d:28:ce:49:59:9b:c6:63:4b:
a8:18:a6:b5:b0:1d:b7:a1:7a:2c:81:20:eb:2c:15:
95:16:07:76:4f:aa:ef:9d:81:cc:00:79:d7:b8:8c:
78:31:1c:ee:88:92:5c:67:07:d7:da:1f:d4:c4:c4:
ae:30:06:59:c1:e7:07:a8:d0:29:8e:65:1d:cc:95:
3d:28:89:e0:66:4c:46:4e:f5:73:b0:e5:c3:d9:cc:
27:81:47:ae:e2:6b:67:13:e5:e6:5d:a4:fd:6f:c5:
09:8d:41:d8:1f:ff:32:c9:f0:e5:0b:27:f3:85:53:
17:1e:d2:45:7b:b3:d2:25:f8:fa:ba:a6:16:9c:29:
c9:ab:f8:08:cf:99:0c:fe:f3:d0:da:8b:7a:60:f5:
81:e7:4b:30:20:f2:e2:3a:18:03:38:ef:59:d1:c1:
33:a1:8b:2c:7c:a8:73:a7:88:a3:00:52:5d:ee:3d:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:EA:F0:E6:E1:E4:02:4D:3B:C2:A0:71:5E:DF:9B:6C:05:C1:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46817e25-b911-3130-9927-4d87f6034750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:af:20:6e:74:4c:c4:3a:83:99:1e:28:9f:33:3a:ec:74:34:
f0:59:e8:96:ba:58:e9:06:b4:d6:a2:98:f4:39:54:91:69:a7:
38:ac:9e:8b:04:cf:dc:08:17:d7:ee:44:a5:2c:25:05:7f:bc:
9a:e7:32:ee:12:17:06:53:25:85:28:ce:36:ee:a6:86:a7:08:
f4:da:8f:2f:32:bc:11:e1:09:54:5a:53:e3:60:dc:77:1f:70:
76:19:a0:7b:4a:a5:86:3b:d6:ef:d8:b8:b5:3b:e9:c2:01:ac:
8e:63:9c:a6:97:40:a0:f6:23:3b:28:04:ef:f1:b3:72:f2:79:
73:a7:88:b1:f9:5a:0a:ee:5a:ed:12:87:d6:2c:b6:91:6c:f9:
fb:2f:47:23:bd:54:cd:fe:57:46:92:4a:02:81:0d:f6:7f:7d:
7d:f7:75:1e:0c:3d:45:6f:e6:97:27:38:d1:32:75:80:ba:f5:
32:3d:f8:c1:af:33:73:24:77:3f:56:1b:46:fc:fd:88:28:8e:
24:71:fb:f8:81:55:12:39:23:d6:40:66:2e:9f:7f:9b:59:eb:
f0:ba:f2:78:ca:b8:e5:bc:ee:bd:64:6b:a5:1d:8d:7d:35:a5:
0a:8b:e4:d6:24:93:a0:56:e9:da:90:98:e5:d9:cb:8a:28:74:
01:4d:8f:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSzQsNvhlYNcqEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0NDMxOVoXDTI1MDMwOTA0NDMxOVowLzEtMCsGA1UEAxMk
YWJmZDU2YTQtMGJjNC00ZjRiLWI0YjAtMTcyNWY0OGZiOWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk0PMEDaKNGhqqfvph2U5WPupged//HB8XJM
QqVwZ8J5ID2s2b23maMiq7j/E86aOKnHcXkFtTC/BPYrqvtrhHVqQYB+kp6wQlSc
7SG7JoUtKM5JWZvGY0uoGKa1sB23oXosgSDrLBWVFgd2T6rvnYHMAHnXuIx4MRzu
iJJcZwfX2h/UxMSuMAZZwecHqNApjmUdzJU9KIngZkxGTvVzsOXD2cwngUeu4mtn
E+XmXaT9b8UJjUHYH/8yyfDlCyfzhVMXHtJFe7PSJfj6uqYWnCnJq/gIz5kM/vPQ
2ot6YPWB50swIPLiOhgDOO9Z0cEzoYssfKhzp4ijAFJd7j0WVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRi6vDm4eQCTTvCoHFe35tsBcFgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDY4MTdlMjUtYjkxMS0z
MTMwLTk5MjctNGQ4N2Y2MDM0NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADevIG50TMQ6g5keKJ8zOux0NPBZ6Ja6WOkGtNaimPQ5VJFppzisnosE
z9wIF9fuRKUsJQV/vJrnMu4SFwZTJYUozjbupoanCPTajy8yvBHhCVRaU+Ng3Hcf
cHYZoHtKpYY71u/YuLU76cIBrI5jnKaXQKD2IzsoBO/xs3LyeXOniLH5WgruWu0S
h9YstpFs+fsvRyO9VM3+V0aSSgKBDfZ/fX33dR4MPUVv5pcnONEydYC69TI9+MGv
M3Mkdz9WG0b8/YgojiRx+/iBVRI5I9ZAZi6ff5tZ6/C68njKuOW87r1ka6UdjX01
pQqL5NYkk6BW6dqQmOXZy4oodAFNj5A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:55 2025 by rpki-client