Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa
File: b1b9a4af-067f-3d2e-8910-c15ad31de484.roa (raw, json)
Hash identifier: kh5pzAuTjDcvLRXf1z3NJARqc8ecWrNyIoWMCtM0Mck=
Subject key identifier: 78:A0:A3:74:09:49:1F:87:4A:74:70:D0:53:1D:D1:C3:13:F0:9E:7F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482527866D022B41627F48A300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa
Signing time: Mon 09 Dec 2024 03:31:26 +0000
ROA not before: Mon 09 Dec 2024 03:31:26 +0000
ROA not after: Sun 09 Mar 2025 03:31:26 +0000
asID: 13335
IP address blocks: 104.17.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:27:86:6d:02:2b:41:62:7f:48:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:31:26 2024 GMT
Not After : Mar 9 03:31:26 2025 GMT
Subject: CN=2847248b-c642-4a21-bac2-56176d495895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:b4:1f:c9:63:ad:95:2f:ef:8c:41:22:cf:
69:22:09:6c:d4:f3:32:7c:16:34:df:92:5c:67:27:
84:29:36:75:24:77:cb:ac:62:a4:bb:2f:a5:af:d1:
46:50:48:41:e3:cb:bb:70:24:e0:be:f7:52:73:fe:
ca:f8:07:ca:5b:dc:55:97:98:74:86:b7:23:1f:41:
37:34:d2:fd:55:71:e8:bf:87:ac:e3:48:a1:b0:c0:
f9:67:ac:1e:eb:c6:18:28:5a:2d:99:a6:1b:39:32:
18:1e:ae:61:f1:b6:f0:8b:41:5f:fa:cc:6d:fc:79:
bb:e8:34:ed:c9:ed:cd:09:3f:c2:f1:cf:51:bd:c0:
f3:14:f6:3a:d4:23:3f:be:13:b3:0f:c1:15:f8:17:
97:c6:d3:e5:a5:ed:5a:23:62:2c:04:73:6c:2d:ba:
71:1e:a5:6e:12:bb:30:cf:7e:55:1b:19:8b:34:24:
ea:e9:2f:f6:07:ec:04:ba:74:df:ec:e9:e2:84:22:
f9:d0:7b:9b:3a:b8:ad:1b:29:fe:47:26:24:a7:47:
e0:40:c3:f0:87:e4:4d:4a:aa:3c:87:76:5e:0a:c8:
f5:12:df:83:40:7e:ab:a8:ba:62:3c:f7:ce:0b:ba:
bf:c8:3b:a0:45:af:af:d3:bc:ab:a8:50:76:84:b7:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:A3:74:09:49:1F:87:4A:74:70:D0:53:1D:D1:C3:13:F0:9E:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1b9a4af-067f-3d2e-8910-c15ad31de484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:cd:a1:74:0d:13:53:30:27:85:18:dc:0a:0e:13:4a:7c:59:
12:2c:04:f1:e3:2e:27:e7:c1:a8:c5:c5:cc:a7:82:5e:dd:44:
9f:d8:94:93:44:2e:81:fc:a2:d3:ab:9e:c9:1b:95:5b:7d:94:
fc:8e:a7:9e:d6:1c:50:21:cf:d2:77:ca:a8:3b:76:41:c4:f6:
e9:2d:7e:79:b9:39:8e:1e:92:a0:bc:78:fb:52:38:70:13:d1:
61:f2:48:6f:f4:4d:78:f2:2e:11:5a:6f:42:d5:44:8a:9e:9a:
9d:f0:30:5c:ca:f7:0d:52:e5:ac:5a:b8:6a:f2:4c:55:4f:b0:
b0:17:7f:aa:ca:6a:8b:3d:cd:eb:13:3a:fd:1e:f2:4f:7c:28:
92:86:5d:fc:2c:41:12:d9:c3:14:1a:8c:d4:1f:e6:3c:7f:4c:
78:01:c2:02:46:40:5c:15:24:54:6e:fc:df:48:16:c9:3f:73:
31:3d:29:87:bd:12:d5:88:ff:1e:32:d8:0c:fd:0d:60:55:d8:
aa:ac:ef:2a:be:f9:99:30:3c:81:8e:84:0c:4b:f0:2f:01:b7:
9d:99:d1:ba:ff:d6:1b:09:4c:9f:96:51:3f:5a:cb:10:25:ab:
60:b8:95:0d:d9:ac:37:ca:a5:63:fa:05:84:13:47:8f:70:78:
06:97:7f:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglJ4ZtAitBYn9IowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTAzMzEyNloXDTI1MDMwOTAzMzEyNlowLzEtMCsGA1UEAxMk
Mjg0NzI0OGItYzY0Mi00YTIxLWJhYzItNTYxNzZkNDk1ODk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziS0H8ljrZUv74xBIs9pIgls1PMyfBY035Jc
ZyeEKTZ1JHfLrGKkuy+lr9FGUEhB48u7cCTgvvdSc/7K+AfKW9xVl5h0hrcjH0E3
NNL9VXHov4es40ihsMD5Z6we68YYKFotmaYbOTIYHq5h8bbwi0Ff+sxt/Hm76DTt
ye3NCT/C8c9RvcDzFPY61CM/vhOzD8EV+BeXxtPlpe1aI2IsBHNsLbpxHqVuErsw
z35VGxmLNCTq6S/2B+wEunTf7OnihCL50HubOritGyn+RyYkp0fgQMPwh+RNSqo8
h3ZeCsj1Et+DQH6rqLpiPPfOC7q/yDugRa+v07yrqFB2hLd/uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHigo3QJSR+HSnRw0FMd0cMT8J5/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjFiOWE0YWYtMDY3Zi0z
ZDJlLTg5MTAtYzE1YWQzMWRlNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTNoXQNE1MwJ4UY3AoOE0p8WRIsBPHjLifnwajFxcyngl7dRJ/YlJNE
LoH8otOrnskblVt9lPyOp57WHFAhz9J3yqg7dkHE9uktfnm5OY4ekqC8ePtSOHAT
0WHySG/0TXjyLhFab0LVRIqemp3wMFzK9w1S5axauGryTFVPsLAXf6rKaos9zesT
Ov0e8k98KJKGXfwsQRLZwxQajNQf5jx/THgBwgJGQFwVJFRu/N9IFsk/czE9KYe9
EtWI/x4y2Az9DWBV2Kqs7yq++ZkwPIGOhAxL8C8Bt52Z0br/1hsJTJ+WUT9ayxAl
q2C4lQ3ZrDfKpWP6BYQTR49weAaXf30=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:52 2025 by rpki-client