Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f580837-4a0f-3079-8988-dc16fea04018.roa
File: 5f580837-4a0f-3079-8988-dc16fea04018.roa (raw, json)
Hash identifier: U6uhR6HvzNAzewOmTmRwRjUtDevxVfAeCCpQWmqxvIQ=
Subject key identifier: C0:08:C2:4B:3E:F2:45:CB:86:63:15:54:2F:D5:51:86:92:DC:9F:02
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255A7467E1526778DAE17980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f580837-4a0f-3079-8988-dc16fea04018.roa
Signing time: Mon 09 Dec 2024 05:14:03 +0000
ROA not before: Mon 09 Dec 2024 05:14:03 +0000
ROA not after: Sun 09 Mar 2025 05:14:03 +0000
asID: 13335
IP address blocks: 104.25.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5a:74:67:e1:52:67:78:da:e1:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:14:03 2024 GMT
Not After : Mar 9 05:14:03 2025 GMT
Subject: CN=2737692c-2aaf-4f25-8269-1efbb7f000ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:ae:75:e7:3e:67:23:41:0d:9d:db:78:6a:
27:52:a7:56:9e:f5:e8:25:58:e6:d1:cd:2b:25:79:
f9:39:ad:06:9e:dc:60:5e:b3:8d:51:ad:fb:ba:bd:
46:68:47:9a:48:1f:9b:ab:b3:e9:b5:b9:58:72:6c:
ba:a2:ba:2b:fe:ed:7c:4f:27:33:d1:9b:4f:70:ce:
cd:0e:ee:25:39:af:4f:2d:8f:23:e7:32:81:ac:32:
05:e8:a8:0a:34:b9:6b:6b:80:85:40:20:9f:e9:8a:
39:6e:d7:65:fd:a9:cf:5a:59:8b:f9:08:ee:8e:e7:
c9:81:36:5f:9c:1d:9c:18:b2:e7:b2:dd:ee:b9:18:
0e:a9:2b:26:5a:41:f9:de:3b:28:69:96:90:53:12:
bb:7d:0e:5a:8b:0b:19:78:41:59:1b:98:9d:bf:a7:
f0:55:cc:9f:8f:56:09:94:96:8d:bb:a1:08:7b:e1:
81:95:2b:8e:66:f6:1b:78:2d:3b:9c:77:1a:93:68:
e7:5b:32:ae:c6:62:69:bf:8a:b7:7e:9c:bd:68:9b:
15:55:ab:1d:65:29:4f:7d:c1:49:ec:58:13:f3:71:
0b:1c:6d:69:c1:a6:83:f9:97:ba:a4:12:9c:d2:f2:
ff:2b:12:74:9f:be:25:f4:0d:bd:1f:dc:88:ee:89:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:C2:4B:3E:F2:45:CB:86:63:15:54:2F:D5:51:86:92:DC:9F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f580837-4a0f-3079-8988-dc16fea04018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:3b:3f:02:a8:23:0f:97:6f:9f:b4:9c:39:ba:c0:6a:a5:74:
03:46:19:68:bf:7c:54:2c:39:35:65:40:a8:95:51:71:91:84:
c0:33:68:8c:9c:ec:3b:e9:9c:d8:59:cc:bd:ed:6c:51:5f:30:
38:fc:5c:36:14:34:15:5b:57:6c:eb:3c:94:8b:68:3b:02:1e:
71:21:2b:91:17:68:be:cf:1e:5d:0a:87:85:aa:46:80:2d:95:
0c:a7:7e:99:d7:41:c1:06:b4:f8:f2:5b:aa:c9:9d:0e:fa:5f:
ba:e2:95:55:0f:5f:94:cb:3b:07:43:33:6e:51:ad:c7:1e:93:
ba:4f:e9:ef:89:ca:b5:7f:ba:8b:f6:02:04:eb:4a:26:88:33:
ad:17:d9:0f:ca:7e:ae:3c:99:66:5e:65:d8:a0:0b:c0:74:98:
42:06:2e:22:28:8f:a3:20:ab:90:5e:ec:e9:db:26:c5:01:d5:
c3:71:ef:21:48:f4:3d:eb:39:7d:b6:11:b0:aa:9a:cb:16:9e:
1c:f8:6a:96:c1:c4:ff:f6:cb:62:8c:5f:88:fd:18:71:46:dc:
73:dc:72:b7:04:57:e4:fc:08:ed:29:b1:22:55:d4:c6:c0:8e:
0c:89:d2:1e:90:f3:12:be:49:b1:34:48:c1:07:64:41:40:19:
1e:d8:33:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglWnRn4VJneNrheYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA1MTQwM1oXDTI1MDMwOTA1MTQwM1owLzEtMCsGA1UEAxMk
MjczNzY5MmMtMmFhZi00ZjI1LTgyNjktMWVmYmI3ZjAwMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroKudec+ZyNBDZ3beGonUqdWnvXoJVjm0c0r
JXn5Oa0GntxgXrONUa37ur1GaEeaSB+bq7PptblYcmy6oror/u18Tycz0ZtPcM7N
Du4lOa9PLY8j5zKBrDIF6KgKNLlra4CFQCCf6Yo5btdl/anPWlmL+QjujufJgTZf
nB2cGLLnst3uuRgOqSsmWkH53jsoaZaQUxK7fQ5aiwsZeEFZG5idv6fwVcyfj1YJ
lJaNu6EIe+GBlSuOZvYbeC07nHcak2jnWzKuxmJpv4q3fpy9aJsVVasdZSlPfcFJ
7FgT83ELHG1pwaaD+Ze6pBKc0vL/KxJ0n74l9A29H9yI7on3ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAIwks+8kXLhmMVVC/VUYaS3J8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWY1ODA4MzctNGEwZi0z
MDc5LTg5ODgtZGMxNmZlYTA0MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAs7PwKoIw+Xb5+0nDm6wGqldANGGWi/fFQsOTVlQKiVUXGRhMAzaIyc
7DvpnNhZzL3tbFFfMDj8XDYUNBVbV2zrPJSLaDsCHnEhK5EXaL7PHl0Kh4WqRoAt
lQynfpnXQcEGtPjyW6rJnQ76X7rilVUPX5TLOwdDM25Rrccek7pP6e+JyrV/uov2
AgTrSiaIM60X2Q/Kfq48mWZeZdigC8B0mEIGLiIoj6Mgq5Be7OnbJsUB1cNx7yFI
9D3rOX22EbCqmssWnhz4apbBxP/2y2KMX4j9GHFG3HPccrcEV+T8CO0psSJV1MbA
jgyJ0h6Q8xK+SbE0SMEHZEFAGR7YM4s=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:55:14 2025 by rpki-client