Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa
File: c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa (raw, json)
Hash identifier: 2IcSWckOMceeO8Z1oXjNIRVaMutA1UwjweOfMPOPWxQ=
Subject key identifier: 0F:55:A5:82:BC:89:9F:E0:E3:9B:9F:D9:FB:EC:A5:66:30:7D:0E:EB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825496F93D7F6CA0BA477F8C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa
Signing time: Mon 09 Dec 2024 04:39:46 +0000
ROA not before: Mon 09 Dec 2024 04:39:46 +0000
ROA not after: Sun 09 Mar 2025 04:39:46 +0000
asID: 13335
IP address blocks: 104.20.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:6f:93:d7:f6:ca:0b:a4:77:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:39:46 2024 GMT
Not After : Mar 9 04:39:46 2025 GMT
Subject: CN=1ff64cd6-7d49-463e-8326-e5babcc97b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:94:28:2b:ad:fb:bf:84:34:0d:c3:89:53:
ba:6a:b5:92:e0:30:65:e6:f8:9c:7c:90:18:68:97:
7e:c7:be:3c:51:43:af:ed:b3:98:ce:ab:d6:6d:0b:
ec:1b:16:29:a3:fb:1a:34:0d:53:4d:62:6c:6a:68:
6c:26:3a:c8:04:a6:c1:e0:d7:b3:e8:f2:7b:fe:e7:
63:61:23:b9:d0:1d:47:14:59:37:4f:7a:a3:d4:43:
99:2c:a6:ed:49:dd:b5:54:98:e4:68:5e:0e:a5:c1:
af:81:24:99:18:44:d4:65:92:a0:aa:8f:4a:e5:0e:
db:2d:35:38:39:24:87:44:e9:5f:10:bd:eb:8f:19:
f9:ae:16:d7:2c:35:38:7c:cd:5d:54:05:2d:fc:65:
0f:5a:e9:40:cd:a2:bf:82:f6:51:05:af:15:e3:95:
3e:a0:07:31:71:96:8c:b4:68:45:eb:4d:16:cb:22:
e2:3c:4e:81:63:41:a2:24:d2:1d:ce:1c:58:4b:9f:
be:c1:fe:5d:fd:d6:53:26:f6:1f:be:41:fe:12:bd:
ea:d5:e4:92:f6:af:cb:48:68:fb:6b:45:b6:4b:fa:
b8:84:81:96:06:5c:45:e8:e4:e9:87:28:ef:a2:70:
0b:0d:27:fe:18:6e:d0:9d:59:10:d8:96:b8:d0:2b:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:A5:82:BC:89:9F:E0:E3:9B:9F:D9:FB:EC:A5:66:30:7D:0E:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:16:6a:b7:d0:00:2d:ce:13:01:e0:8e:c1:41:fc:ef:26:9e:
3c:34:f6:9c:91:95:3d:31:3d:00:33:f0:09:84:39:bc:4c:49:
59:52:fe:ca:93:4e:aa:2b:3e:9a:eb:f8:07:fa:98:41:fa:a9:
0a:ee:ad:7b:b7:36:96:b8:95:1e:38:d2:51:be:06:95:3a:2e:
02:cd:1d:a5:69:a3:4f:f8:da:b5:ba:fc:fb:be:a7:8f:c4:62:
b1:da:d0:f5:d8:c0:b4:f8:48:dc:65:59:06:a1:77:a8:b6:29:
3f:a9:a8:80:b6:ec:22:e9:10:00:3b:e0:58:1f:18:c1:5c:56:
a7:83:0f:91:be:aa:b2:a8:a5:01:67:3b:c1:08:00:20:b3:8e:
38:c0:ff:39:97:46:4b:2e:09:a5:e3:06:bd:66:2d:69:ae:a6:
da:f1:6b:8b:5a:f7:63:7e:7a:61:f7:06:5b:ac:01:6c:88:45:
8b:33:3b:00:42:9c:70:f9:6d:b1:b1:50:da:48:3d:98:35:10:
6e:14:49:26:d3:bd:bf:48:e7:a6:5a:5e:3f:02:ea:25:c0:e9:
79:91:f7:75:ec:59:12:7c:4e:db:57:89:f2:f3:f6:ea:b5:b8:
5e:7a:fa:3d:aa:0d:f9:d0:b9:69:6d:bf:b6:27:d5:f1:eb:07:
55:81:75:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSW+T1/bKC6R3+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0Mzk0NloXDTI1MDMwOTA0Mzk0NlowLzEtMCsGA1UEAxMk
MWZmNjRjZDYtN2Q0OS00NjNlLTgzMjYtZTViYWJjYzk3YjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDSUKCut+7+ENA3DiVO6arWS4DBl5vicfJAY
aJd+x748UUOv7bOYzqvWbQvsGxYpo/saNA1TTWJsamhsJjrIBKbB4Nez6PJ7/udj
YSO50B1HFFk3T3qj1EOZLKbtSd21VJjkaF4OpcGvgSSZGETUZZKgqo9K5Q7bLTU4
OSSHROlfEL3rjxn5rhbXLDU4fM1dVAUt/GUPWulAzaK/gvZRBa8V45U+oAcxcZaM
tGhF600WyyLiPE6BY0GiJNIdzhxYS5++wf5d/dZTJvYfvkH+Er3q1eSS9q/LSGj7
a0W2S/q4hIGWBlxF6OTphyjvonALDSf+GG7QnVkQ2Ja40Cv9LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9VpYK8iZ/g45uf2fvspWYwfQ7rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzI0Y2Y4OTctMzIyMS0z
NTgzLWE2ZjgtOTdkNmEyYTZlYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEWarfQAC3OEwHgjsFB/O8mnjw09pyRlT0xPQAz8AmEObxMSVlS/sqT
TqorPprr+Af6mEH6qQrurXu3Npa4lR440lG+BpU6LgLNHaVpo0/42rW6/Pu+p4/E
YrHa0PXYwLT4SNxlWQahd6i2KT+pqIC27CLpEAA74FgfGMFcVqeDD5G+qrKopQFn
O8EIACCzjjjA/zmXRksuCaXjBr1mLWmuptrxa4ta92N+emH3BlusAWyIRYszOwBC
nHD5bbGxUNpIPZg1EG4USSbTvb9I56ZaXj8C6iXA6XmR93XsWRJ8TttXifLz9uq1
uF56+j2qDfnQuWltv7Yn1fHrB1WBdTU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:05 2025 by rpki-client