Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86d3cb35-4889-3523-ab79-e631a853b1dc.roa
File: 86d3cb35-4889-3523-ab79-e631a853b1dc.roa (raw, json)
Hash identifier: VgPzYKpkNHqIPN/z7P4hw3TJlO3IncbM5yQ8AkYH4yE=
Subject key identifier: 7E:15:88:D5:01:DB:70:11:91:20:44:19:E3:8A:84:8D:BD:30:DC:9C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482549EBC470454CC929527840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86d3cb35-4889-3523-ab79-e631a853b1dc.roa
Signing time: Mon 09 Dec 2024 04:40:44 +0000
ROA not before: Mon 09 Dec 2024 04:40:44 +0000
ROA not after: Sun 09 Mar 2025 04:40:44 +0000
asID: 13335
IP address blocks: 104.20.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:eb:c4:70:45:4c:c9:29:52:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:40:44 2024 GMT
Not After : Mar 9 04:40:44 2025 GMT
Subject: CN=5b29ad30-2b84-4534-9060-6aaf19a46ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:b5:5f:0e:87:34:83:0d:64:1a:f9:84:5b:
17:24:24:92:90:60:2e:29:4d:4d:19:84:a8:8d:2d:
d0:74:3c:ef:78:4c:20:e4:18:45:56:6a:17:1a:a8:
8d:27:b2:65:b7:aa:c1:f9:75:fc:ad:ec:78:96:ca:
c8:a9:d4:3a:90:0d:0e:ce:bb:3c:d3:2e:69:d9:f6:
9f:4f:06:84:7f:6c:16:d3:ac:0c:de:b5:7f:d9:cc:
8c:86:38:cb:d2:3b:00:b3:fe:ec:34:ed:3d:81:e1:
b4:b3:3b:a5:8c:4a:3c:20:17:49:d8:e1:f7:27:10:
3e:52:46:a6:58:0c:68:0e:1e:b5:e5:e6:b6:71:5f:
ef:4b:ef:bd:ba:4b:9d:d7:c9:ae:d3:cd:02:51:89:
a0:6a:78:95:ba:78:50:a0:ed:e7:8c:24:3a:e6:f6:
f5:30:7c:ec:7c:dd:7d:18:58:40:a8:8d:40:fb:89:
04:31:88:9e:ea:dc:56:fa:09:65:89:0b:fb:e3:10:
80:13:11:51:83:66:55:0a:4a:34:27:0f:bf:9f:0c:
45:1b:df:66:a1:47:d4:32:db:fa:66:e2:62:be:e2:
ff:ab:76:ea:28:97:f1:4a:1b:18:b7:c2:4d:34:10:
0a:f6:2e:50:f3:2b:9a:de:d0:be:70:67:a0:8f:7a:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:88:D5:01:DB:70:11:91:20:44:19:E3:8A:84:8D:BD:30:DC:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86d3cb35-4889-3523-ab79-e631a853b1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:d2:61:84:2b:0c:c7:2c:ff:68:62:07:fa:61:94:4c:2a:30:
a0:8c:d5:fd:fe:e3:a1:6a:84:63:b8:a9:66:d6:8a:12:81:60:
34:77:dc:3c:ef:7a:c9:41:03:9a:7c:6a:5e:d0:b3:1a:ea:90:
1b:67:01:0b:19:cb:dc:34:d0:fd:1b:23:55:7e:56:12:59:b6:
56:fd:be:b0:c5:7a:cf:32:f4:c1:83:cd:a2:e3:34:91:9a:0f:
6e:15:bb:d7:c9:84:45:c5:ca:e6:8e:bd:37:b3:5e:08:5d:64:
0b:14:bf:de:9c:a4:26:9a:e8:99:ca:cf:b3:27:48:b0:a3:dd:
0c:27:f0:ca:6f:17:ae:21:15:30:8c:4a:52:20:50:12:81:cd:
2a:85:9c:68:4f:b1:89:2a:9b:3b:2e:0c:2d:de:10:c0:fd:f6:
50:e2:d6:56:22:4d:38:5a:bc:a5:d4:71:d0:f7:c7:ec:75:2f:
0d:f9:70:06:59:3a:7e:c5:8e:a2:7f:e5:29:89:5e:8b:1e:37:
35:0f:dd:1e:25:c6:a3:f9:9b:cb:54:cf:5d:f2:e8:e8:f1:99:
f2:14:5f:60:f4:34:75:ed:59:42:57:cf:eb:16:06:49:5c:fa:
c1:d0:0d:a6:35:65:bd:21:0e:36:1c:c9:b4:56:e5:85:bf:84:
b6:0e:ed:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSevEcEVMySlSeEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0NDA0NFoXDTI1MDMwOTA0NDA0NFowLzEtMCsGA1UEAxMk
NWIyOWFkMzAtMmI4NC00NTM0LTkwNjAtNmFhZjE5YTQ2ZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0om1Xw6HNIMNZBr5hFsXJCSSkGAuKU1NGYSo
jS3QdDzveEwg5BhFVmoXGqiNJ7Jlt6rB+XX8rex4lsrIqdQ6kA0Ozrs80y5p2faf
TwaEf2wW06wM3rV/2cyMhjjL0jsAs/7sNO09geG0szuljEo8IBdJ2OH3JxA+Ukam
WAxoDh615ea2cV/vS++9ukud18mu080CUYmganiVunhQoO3njCQ65vb1MHzsfN19
GFhAqI1A+4kEMYie6txW+glliQv74xCAExFRg2ZVCko0Jw+/nwxFG99moUfUMtv6
ZuJivuL/q3bqKJfxShsYt8JNNBAK9i5Q8yua3tC+cGegj3qqDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4ViNUB23ARkSBEGeOKhI29MNycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODZkM2NiMzUtNDg4OS0z
NTIzLWFiNzktZTYzMWE4NTNiMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbSYYQrDMcs/2hiB/phlEwqMKCM1f3+46FqhGO4qWbWihKBYDR33Dzv
eslBA5p8al7QsxrqkBtnAQsZy9w00P0bI1V+VhJZtlb9vrDFes8y9MGDzaLjNJGa
D24Vu9fJhEXFyuaOvTezXghdZAsUv96cpCaa6JnKz7MnSLCj3Qwn8MpvF64hFTCM
SlIgUBKBzSqFnGhPsYkqmzsuDC3eEMD99lDi1lYiTThavKXUcdD3x+x1Lw35cAZZ
On7FjqJ/5SmJXoseNzUP3R4lxqP5m8tUz13y6OjxmfIUX2D0NHXtWUJXz+sWBklc
+sHQDaY1Zb0hDjYcybRW5YW/hLYO7WU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:14 2025 by rpki-client