Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa
File: 891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa (raw, json)
Hash identifier: /iFUDgMxNC8sg4OMH5aCyGrdC07FJeFf9kX5krQFZLA=
Subject key identifier: 12:54:1F:60:31:68:6E:53:97:39:75:EA:06:1C:A9:7F:CF:65:1E:5E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AA914FD59A843BD3A44F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa
Signing time: Tue 10 Dec 2024 01:07:05 +0000
ROA not before: Tue 10 Dec 2024 01:07:05 +0000
ROA not after: Mon 10 Mar 2025 00:07:05 +0000
asID: 13335
IP address blocks: 104.31.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:aa:91:4f:d5:9a:84:3b:d3:a4:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:07:05 2024 GMT
Not After : Mar 10 00:07:05 2025 GMT
Subject: CN=0d69621f-a4f8-4ebb-8cfc-90351b8d95cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:4b:8a:d1:f3:c4:d4:53:f4:bc:62:49:66:
4d:97:f5:41:31:75:2e:aa:2a:07:ae:48:f9:b3:db:
32:fc:bc:bd:6d:2d:ac:ba:cc:a9:8e:6d:0f:c2:83:
e4:80:d8:39:92:fb:6a:50:c7:da:06:4c:42:e3:bc:
86:9f:51:2a:d7:ba:8c:12:a2:5e:9d:9a:ce:92:07:
56:7a:3b:3f:61:fd:c1:05:8d:d5:7a:24:07:f5:e1:
fe:72:7f:ed:15:93:a6:04:b9:00:15:24:51:67:f0:
a9:b1:3c:d7:00:db:e7:52:6b:96:e9:10:e8:fe:5a:
1d:70:f1:0f:1a:95:6b:98:63:e3:d6:7f:77:e8:5c:
38:5c:87:b5:e5:00:af:55:5d:6a:0b:a1:5b:af:e4:
f8:8e:f2:f8:6b:ac:3b:1b:0c:60:e5:99:dc:7d:66:
36:45:0c:ed:8c:04:10:25:d2:87:0b:38:fe:02:24:
ad:54:e0:89:0a:62:92:34:b0:3d:bf:87:72:a7:7c:
b9:07:cb:2d:23:ac:c4:1e:e5:af:c6:2d:7b:a1:2e:
83:7a:90:f9:c2:fd:e0:66:b8:0d:2b:c6:b3:7d:7f:
b6:1b:24:33:81:0c:5c:70:5a:d6:3d:a0:c2:27:34:
09:22:01:40:9b:4a:b6:70:e3:8c:a3:cd:58:53:cb:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:1F:60:31:68:6E:53:97:39:75:EA:06:1C:A9:7F:CF:65:1E:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:18:a1:6e:c9:01:70:84:16:b9:13:56:f0:85:ce:1b:4e:8c:
39:c1:f2:c9:d4:a5:95:3e:17:8d:58:2b:e2:15:c8:d7:59:9e:
d5:8c:16:c8:b2:92:d1:2b:19:51:81:a6:ca:f5:06:d0:6f:1b:
4c:91:63:ff:59:16:ba:84:a0:20:2f:c0:ec:3b:45:32:4d:fc:
0c:40:0f:34:50:f1:4f:e4:57:db:b5:2b:b8:54:7c:54:95:20:
f0:50:dc:8c:57:99:93:83:40:18:99:ca:df:f0:df:9b:d9:2f:
fb:f7:8a:21:2b:79:f5:b6:e6:f9:c4:c8:12:f1:9e:68:68:67:
b4:3d:09:08:33:30:c1:6b:b0:ba:b2:45:34:cf:db:58:65:23:
44:61:18:7a:f2:3d:c2:8e:9e:70:87:44:4e:a3:ca:97:90:9d:
c3:80:8e:46:c9:3d:89:87:8b:84:78:fd:00:d3:61:c0:b6:ab:
05:2a:b2:99:50:7d:55:33:95:d7:09:1a:6c:5c:53:25:7a:24:
2c:20:b9:c5:01:b5:af:ae:04:bb:c4:b1:20:b9:a0:74:f5:95:
6e:7e:63:88:c9:b7:cf:f6:4e:7c:1d:d2:ba:c2:e1:83:c7:c7:
d0:05:09:a2:37:5b:ee:87:2a:44:da:79:91:59:e0:1d:b4:6e:
92:e5:90:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnqpFP1ZqEO9OkT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMDcwNVoXDTI1MDMxMDAwMDcwNVowLzEtMCsGA1UEAxMk
MGQ2OTYyMWYtYTRmOC00ZWJiLThjZmMtOTAzNTFiOGQ5NWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlJLitHzxNRT9LxiSWZNl/VBMXUuqioHrkj5
s9sy/Ly9bS2susypjm0PwoPkgNg5kvtqUMfaBkxC47yGn1Eq17qMEqJenZrOkgdW
ejs/Yf3BBY3VeiQH9eH+cn/tFZOmBLkAFSRRZ/CpsTzXANvnUmuW6RDo/lodcPEP
GpVrmGPj1n936Fw4XIe15QCvVV1qC6Fbr+T4jvL4a6w7Gwxg5ZncfWY2RQztjAQQ
JdKHCzj+AiStVOCJCmKSNLA9v4dyp3y5B8stI6zEHuWvxi17oS6DepD5wv3gZrgN
K8azfX+2GyQzgQxccFrWPaDCJzQJIgFAm0q2cOOMo81YU8s3jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJUH2AxaG5Tlzl16gYcqX/PZR5eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODkxNTI3YmItYjAxNC0z
MmNjLTg0YjMtZDhiM2NlMDZjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8YoW7JAXCEFrkTVvCFzhtOjDnB8snUpZU+F41YK+IVyNdZntWMFsiy
ktErGVGBpsr1BtBvG0yRY/9ZFrqEoCAvwOw7RTJN/AxADzRQ8U/kV9u1K7hUfFSV
IPBQ3IxXmZODQBiZyt/w35vZL/v3iiErefW25vnEyBLxnmhoZ7Q9CQgzMMFrsLqy
RTTP21hlI0RhGHryPcKOnnCHRE6jypeQncOAjkbJPYmHi4R4/QDTYcC2qwUqsplQ
fVUzldcJGmxcUyV6JCwgucUBta+uBLvEsSC5oHT1lW5+Y4jJt8/2Tnwd0rrC4YPH
x9AFCaI3W+6HKkTaeZFZ4B20bpLlkIk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:07 2025 by rpki-client