Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
File: 94302007-379c-3d0e-b144-b33108e8a99d.roa (raw, json)
Hash identifier: 5SAQ7unb1z9nGjXgTNjFepTxCbfgX7ZyFpc0pv1TcbU=
Subject key identifier: CF:F1:9D:19:8E:6F:1C:C2:CC:C5:FE:F6:C2:33:E6:CE:03:7B:F6:6F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AC8A147BEF1EC4E51BC000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
Signing time: Tue 10 Dec 2024 01:11:03 +0000
ROA not before: Tue 10 Dec 2024 01:11:03 +0000
ROA not after: Mon 10 Mar 2025 00:11:03 +0000
asID: 13335
IP address blocks: 104.31.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ac:8a:14:7b:ef:1e:c4:e5:1b:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:11:03 2024 GMT
Not After : Mar 10 00:11:03 2025 GMT
Subject: CN=cb80aea9-74f8-49cc-8ac4-012a63669f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:e1:03:d1:20:41:44:b8:6e:08:c8:06:d4:
65:ae:51:4e:a2:77:1e:2d:36:22:16:e6:74:50:13:
02:01:9f:c0:e0:88:5a:a3:6f:9c:be:e0:cb:3d:4b:
8e:23:79:a9:6a:a5:e7:3e:cb:51:e6:ac:f4:e8:3b:
64:c5:42:c3:e4:6f:18:74:d0:64:8b:25:28:4b:1c:
4f:01:92:1d:e8:42:eb:ba:0c:65:16:fd:f0:88:74:
6b:d4:d3:23:b9:28:f9:45:6b:db:f1:05:01:65:f2:
b6:d2:24:af:47:be:9e:6f:90:f2:30:bf:ca:53:f7:
86:63:93:57:0a:d3:cc:12:52:de:92:64:11:aa:bf:
5f:1a:ae:4e:ed:e5:d0:e3:66:ab:d3:38:64:7a:9d:
bd:71:1c:c0:bb:26:f8:87:10:1e:25:e6:bd:7a:63:
d9:eb:cc:20:81:47:0d:da:ab:74:47:49:6e:b8:e2:
88:14:7c:c9:1f:b2:17:2f:9c:48:0a:26:96:5d:47:
af:0a:20:be:e9:e7:4b:a7:ca:7a:9f:29:ba:1a:e1:
81:08:16:b9:ab:ae:46:9e:23:17:ef:68:84:f7:bc:
0e:82:ad:53:67:1d:15:17:66:09:81:5c:16:fe:30:
eb:a8:d5:c3:70:18:5f:f4:2d:4a:05:ed:8a:62:a1:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:9D:19:8E:6F:1C:C2:CC:C5:FE:F6:C2:33:E6:CE:03:7B:F6:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ec:4a:c1:55:4f:62:e3:38:e8:9d:94:74:4a:52:f6:a2:f1:
c2:c0:ba:d6:0f:f3:36:78:c5:14:c1:34:3e:21:a0:11:9b:4c:
af:bd:bb:0b:13:e1:fd:09:6f:54:c7:63:37:20:c3:52:10:75:
c9:9b:b0:b3:51:b0:6f:e7:b0:38:29:ac:8b:e9:bb:9a:4d:1a:
01:63:eb:fa:98:77:cb:88:f8:1a:16:e4:29:94:51:4e:fc:99:
a0:e3:fd:bd:87:7e:77:0b:9f:88:27:65:d7:0a:44:10:c4:af:
d8:cd:5b:7a:6e:1b:56:72:06:2b:84:d9:24:20:d3:5b:3b:ac:
aa:a1:71:96:c7:ed:01:50:32:63:9b:56:84:2c:50:3e:70:c2:
0f:af:a7:d3:79:7e:02:67:97:45:80:c0:50:12:e5:b3:08:62:
60:61:1b:b4:0d:be:1f:15:1a:d3:52:bf:24:b4:ba:e8:87:d6:
e7:89:72:58:38:75:97:13:45:45:eb:45:74:e8:76:e5:f1:d5:
dd:f8:2c:76:87:5a:44:d1:e7:e3:7c:56:d3:b3:91:1b:96:74:
cf:b1:c9:bf:d4:a9:50:a2:95:f2:81:b6:94:e2:71:61:24:09:
e5:e9:0b:27:13:34:2f:35:ba:81:62:02:cb:af:d4:ce:93:c7:
31:d1:b7:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnrIoUe+8exOUbwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMTEwM1oXDTI1MDMxMDAwMTEwM1owLzEtMCsGA1UEAxMk
Y2I4MGFlYTktNzRmOC00OWNjLThhYzQtMDEyYTYzNjY5ZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LzhA9EgQUS4bgjIBtRlrlFOonceLTYiFuZ0
UBMCAZ/A4Ihao2+cvuDLPUuOI3mpaqXnPstR5qz06DtkxULD5G8YdNBkiyUoSxxP
AZId6ELrugxlFv3wiHRr1NMjuSj5RWvb8QUBZfK20iSvR76eb5DyML/KU/eGY5NX
CtPMElLekmQRqr9fGq5O7eXQ42ar0zhkep29cRzAuyb4hxAeJea9emPZ68wggUcN
2qt0R0luuOKIFHzJH7IXL5xICiaWXUevCiC+6edLp8p6nym6GuGBCBa5q65GniMX
72iE97wOgq1TZx0VF2YJgVwW/jDrqNXDcBhf9C1KBe2KYqGVTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/xnRmObxzCzMX+9sIz5s4De/ZvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTQzMDIwMDctMzc5Yy0z
ZDBlLWIxNDQtYjMzMTA4ZThhOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnsSsFVT2LjOOidlHRKUvai8cLAutYP8zZ4xRTBND4hoBGbTK+9uwsT
4f0Jb1THYzcgw1IQdcmbsLNRsG/nsDgprIvpu5pNGgFj6/qYd8uI+BoW5CmUUU78
maDj/b2HfncLn4gnZdcKRBDEr9jNW3puG1ZyBiuE2SQg01s7rKqhcZbH7QFQMmOb
VoQsUD5wwg+vp9N5fgJnl0WAwFAS5bMIYmBhG7QNvh8VGtNSvyS0uuiH1ueJclg4
dZcTRUXrRXToduXx1d34LHaHWkTR5+N8VtOzkRuWdM+xyb/UqVCilfKBtpTicWEk
CeXpCycTNC81uoFiAsuv1M6TxzHRt6U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:37 2025 by rpki-client