Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
File: 8be1effc-cfa7-3b8d-a081-510cb1054720.roa (raw, json)
Hash identifier: URIjPQkWCRCNLPSoP9mp+SpNPv0BdOPLenG8eHoEHJ8=
Subject key identifier: B4:ED:A4:CC:F3:7F:1A:D2:6A:1A:1E:80:40:8F:CD:E4:30:F4:47:8B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825272F9FBA7184BEC764A180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
Signing time: Mon 09 Dec 2024 03:30:45 +0000
ROA not before: Mon 09 Dec 2024 03:30:45 +0000
ROA not after: Sun 09 Mar 2025 03:30:45 +0000
asID: 13335
IP address blocks: 104.16.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:27:2f:9f:ba:71:84:be:c7:64:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:30:45 2024 GMT
Not After : Mar 9 03:30:45 2025 GMT
Subject: CN=d7d70062-d3d7-4e40-9f8d-08679e3a2ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:b2:78:cd:32:c3:74:53:be:e8:94:2e:e4:
1e:7c:81:53:ac:d2:fc:de:86:24:07:66:54:18:9e:
9c:03:59:b9:db:75:37:8f:2a:d4:57:80:49:dc:cc:
ea:b5:26:7c:1c:ea:d6:3b:d8:f9:77:bb:f4:d5:77:
f9:26:7b:ef:6e:ef:ba:fa:97:b0:36:25:b1:c2:bb:
29:aa:69:4d:73:36:17:2e:06:7e:e3:bc:37:77:d7:
7f:47:d1:2b:ee:af:4b:32:01:d5:29:a6:45:02:e8:
4c:c6:c1:2b:34:8d:a7:ef:6a:8e:22:b2:26:b9:f3:
a6:17:a6:11:4d:7e:db:44:60:5f:bf:43:c8:7c:17:
e1:d4:50:3e:b2:c5:80:85:8a:e4:3c:e3:48:18:21:
67:ed:68:b0:73:25:2b:bb:20:1c:4e:9d:be:81:27:
2b:7a:0a:34:6a:87:49:62:ea:40:30:fa:9d:0b:79:
af:91:df:fc:4a:b2:52:3a:39:66:74:54:19:82:b1:
2d:39:ad:79:ea:0a:5a:2b:41:b0:b4:d4:ef:98:ab:
fe:7b:01:e6:65:ed:c7:ad:bd:33:b2:5d:a5:3d:41:
e1:e4:4f:20:12:02:36:53:f2:3e:6b:00:8f:b7:03:
bd:9a:d3:da:6f:04:37:d2:d4:f1:76:35:54:2b:0e:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:ED:A4:CC:F3:7F:1A:D2:6A:1A:1E:80:40:8F:CD:E4:30:F4:47:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:03:8f:1a:70:4f:2a:46:18:89:03:82:f0:11:45:b8:ae:d0:
10:ae:85:77:d6:11:12:6d:c7:0b:e5:f8:61:3d:85:aa:34:c5:
5b:7b:c5:9c:c6:0a:cb:03:f3:ea:78:49:da:89:ac:76:76:22:
ff:45:0f:d7:9d:dd:9c:d9:09:3e:c9:36:ff:38:1d:27:3e:77:
4f:86:5e:40:b1:d5:01:ae:cb:b6:76:7e:bd:fb:10:33:f4:e9:
63:38:79:49:0b:af:80:8d:fd:ba:c1:9c:00:aa:78:42:0c:56:
41:cb:66:8b:37:30:c5:f8:a1:0b:ec:87:65:06:1c:e0:22:d6:
16:8c:f4:c3:5b:73:33:34:c0:e2:c5:3b:3a:ae:b1:1b:a4:b4:
e5:6a:07:cc:b7:0c:4a:ab:6b:b1:6b:ec:17:1a:6e:94:a3:89:
02:87:55:bd:43:9c:dc:9f:2c:a9:3b:3d:f3:2d:00:54:73:f6:
be:1d:77:d1:26:d8:64:55:28:5f:d5:5b:9d:3a:f3:51:b2:34:
d1:53:fa:50:d6:e7:a2:fc:46:53:d2:70:45:b7:e6:ca:31:01:
4a:3a:86:fe:e6:06:d7:d8:ca:45:c0:8f:e5:2f:fd:8c:a5:50:
ab:34:76:56:33:2b:ef:89:8a:c0:a2:2e:cb:66:2c:65:67:42:
c4:cb:75:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglJy+funGEvsdkoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTAzMzA0NVoXDTI1MDMwOTAzMzA0NVowLzEtMCsGA1UEAxMk
ZDdkNzAwNjItZDNkNy00ZTQwLTlmOGQtMDg2NzllM2EyZWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9CyeM0yw3RTvuiULuQefIFTrNL83oYkB2ZU
GJ6cA1m523U3jyrUV4BJ3MzqtSZ8HOrWO9j5d7v01Xf5Jnvvbu+6+pewNiWxwrsp
qmlNczYXLgZ+47w3d9d/R9Er7q9LMgHVKaZFAuhMxsErNI2n72qOIrImufOmF6YR
TX7bRGBfv0PIfBfh1FA+ssWAhYrkPONIGCFn7WiwcyUruyAcTp2+gScrego0aodJ
YupAMPqdC3mvkd/8SrJSOjlmdFQZgrEtOa156gpaK0GwtNTvmKv+ewHmZe3Hrb0z
sl2lPUHh5E8gEgI2U/I+awCPtwO9mtPabwQ30tTxdjVUKw66UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTtpMzzfxrSahoegECPzeQw9EeLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGJlMWVmZmMtY2ZhNy0z
YjhkLWEwODEtNTEwY2IxMDU0NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMcDjxpwTypGGIkDgvARRbiu0BCuhXfWERJtxwvl+GE9hao0xVt7xZzG
CssD8+p4SdqJrHZ2Iv9FD9ed3ZzZCT7JNv84HSc+d0+GXkCx1QGuy7Z2fr37EDP0
6WM4eUkLr4CN/brBnACqeEIMVkHLZos3MMX4oQvsh2UGHOAi1haM9MNbczM0wOLF
OzqusRuktOVqB8y3DEqra7Fr7BcabpSjiQKHVb1DnNyfLKk7PfMtAFRz9r4dd9Em
2GRVKF/VW50681GyNNFT+lDW56L8RlPScEW35soxAUo6hv7mBtfYykXAj+Uv/Yyl
UKs0dlYzK++JisCiLstmLGVnQsTLdak=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:41 2025 by rpki-client