Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa
File: 99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa (raw, json)
Hash identifier: fMZ3HpGlLb6BY7xPCLVC6WrtOxfAEgbaMjSHIXxcKDU=
Subject key identifier: 3A:15:25:64:8D:84:B4:7D:85:A5:9B:20:90:E7:EB:58:1C:23:69:9B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482549813104B4EF70DAE20360
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa
Signing time: Mon 09 Dec 2024 04:39:54 +0000
ROA not before: Mon 09 Dec 2024 04:39:54 +0000
ROA not after: Sun 09 Mar 2025 04:39:54 +0000
asID: 13335
IP address blocks: 104.20.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:81:31:04:b4:ef:70:da:e2:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:39:54 2024 GMT
Not After : Mar 9 04:39:54 2025 GMT
Subject: CN=02e59a74-392d-479c-bd3e-1f920cd92335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:0a:34:db:f6:02:c6:ca:fc:e9:78:52:14:
f3:9d:d1:6f:b1:82:54:99:65:fe:d6:f3:06:6e:ba:
0c:f0:e0:0c:88:0b:18:4f:00:0d:2b:83:4e:95:3c:
56:54:3e:fa:3f:bf:6d:a4:8c:36:1a:59:ba:55:c3:
94:e3:5e:57:b1:17:b8:e9:df:ce:ca:8e:4b:31:ae:
56:0a:22:a3:53:6b:8c:40:bc:5c:d7:db:69:4b:b9:
fe:1e:1e:7c:bc:b4:aa:bd:56:eb:fa:05:20:b5:f5:
73:3d:c7:47:62:d5:8f:11:70:ad:c1:ed:b4:7e:97:
e2:15:91:bd:c7:0a:65:12:af:f8:46:6c:02:5c:14:
59:9d:00:a1:63:5f:9e:e1:c4:71:74:fd:64:b9:50:
f7:81:34:9b:95:1d:91:56:01:e6:bd:15:63:37:38:
9a:84:eb:22:3b:a6:13:76:6a:f0:2d:df:ae:1b:4d:
12:12:d7:4f:5e:5d:28:f1:d7:f5:af:71:8f:9f:15:
8a:4a:f1:31:b4:74:de:44:c2:1d:e5:ed:a5:87:62:
2c:6e:d2:56:e3:e8:b8:ad:f8:9f:83:67:62:3a:2a:
4a:37:cb:43:12:8a:de:d1:51:e4:b7:dd:29:ab:ea:
4e:fb:a9:17:e6:91:e6:a7:ab:22:ad:6c:3e:ca:94:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:15:25:64:8D:84:B4:7D:85:A5:9B:20:90:E7:EB:58:1C:23:69:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99c34a1c-c3af-3080-9e98-df2f1bf1b50c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:73:b9:4d:06:9d:46:7a:74:10:b7:30:2d:22:3b:a3:92:87:
d8:9b:e0:29:1e:8c:a6:53:05:4d:cc:93:b9:01:4b:54:9a:5a:
5a:d6:4a:91:4f:d1:0d:57:08:58:dc:8e:6d:3d:6e:85:da:5a:
fd:04:f9:12:58:49:9f:01:9d:07:42:8e:e7:67:3b:99:c5:27:
4f:5a:9a:fd:16:99:ff:03:e3:9e:37:7d:d1:55:ea:50:32:e7:
b9:b2:9c:5a:de:d7:31:5a:3d:ee:56:4c:5e:53:b7:a0:60:b7:
16:46:6c:04:b9:36:a2:4e:d3:d0:47:a3:2c:87:75:f0:cb:f2:
b3:55:b6:f9:57:c0:ab:b6:1e:d1:2c:96:f9:af:a9:10:ac:b9:
9c:d3:63:3e:3a:5c:fd:9a:b2:86:14:ef:c2:4a:24:09:a3:7f:
2f:4b:c1:97:11:2d:07:30:a1:e8:f5:e4:b8:c9:61:0b:d6:d3:
49:72:bb:c8:ac:9b:83:3f:3f:94:2c:12:84:ad:66:40:75:49:
f5:75:5b:13:51:0c:48:ee:f9:9d:4f:da:19:b3:fc:b5:bd:56:
a3:1c:5b:7d:39:db:38:e7:bb:1b:cb:70:56:bb:bb:f8:55:bd:
dc:6d:07:2e:a3:cc:a1:19:76:f2:80:3a:df:a6:fa:fa:f8:ee:
15:93:b7:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSYExBLTvcNriA2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0Mzk1NFoXDTI1MDMwOTA0Mzk1NFowLzEtMCsGA1UEAxMk
MDJlNTlhNzQtMzkyZC00NzljLWJkM2UtMWY5MjBjZDkyMzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCEKNNv2AsbK/Ol4UhTzndFvsYJUmWX+1vMG
broM8OAMiAsYTwANK4NOlTxWVD76P79tpIw2Glm6VcOU415XsRe46d/Oyo5LMa5W
CiKjU2uMQLxc19tpS7n+Hh58vLSqvVbr+gUgtfVzPcdHYtWPEXCtwe20fpfiFZG9
xwplEq/4RmwCXBRZnQChY1+e4cRxdP1kuVD3gTSblR2RVgHmvRVjNziahOsiO6YT
dmrwLd+uG00SEtdPXl0o8df1r3GPnxWKSvExtHTeRMId5e2lh2IsbtJW4+i4rfif
g2diOipKN8tDEore0VHkt90pq+pO+6kX5pHmp6sirWw+ypR9lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoVJWSNhLR9haWbIJDn61gcI2mbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTljMzRhMWMtYzNhZi0z
MDgwLTllOTgtZGYyZjFiZjFiNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALlzuU0GnUZ6dBC3MC0iO6OSh9ib4CkejKZTBU3Mk7kBS1SaWlrWSpFP
0Q1XCFjcjm09boXaWv0E+RJYSZ8BnQdCjudnO5nFJ09amv0Wmf8D4543fdFV6lAy
57mynFre1zFaPe5WTF5Tt6BgtxZGbAS5NqJO09BHoyyHdfDL8rNVtvlXwKu2HtEs
lvmvqRCsuZzTYz46XP2asoYU78JKJAmjfy9LwZcRLQcwoej15LjJYQvW00lyu8is
m4M/P5QsEoStZkB1SfV1WxNRDEju+Z1P2hmz/LW9VqMcW3052zjnuxvLcFa7u/hV
vdxtBy6jzKEZdvKAOt+m+vr47hWTtwg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:20 2025 by rpki-client