Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
File: d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa (raw, json)
Hash identifier: oWoRuNa+J5hMnvRq2XSUyvrTuvgz2bqMyX7Vj/Q3T3Y=
Subject key identifier: 06:8D:A6:00:60:A1:CF:7F:A5:5D:1A:55:55:BF:DE:E5:4F:E0:EA:1D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254B11DAE470A195EBC61EC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
Signing time: Mon 09 Dec 2024 04:43:03 +0000
ROA not before: Mon 09 Dec 2024 04:43:03 +0000
ROA not after: Sun 09 Mar 2025 04:43:03 +0000
asID: 13335
IP address blocks: 104.21.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4b:11:da:e4:70:a1:95:eb:c6:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:43:03 2024 GMT
Not After : Mar 9 04:43:03 2025 GMT
Subject: CN=f56f57ed-4d08-4afc-a594-f284edf0a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:be:30:a2:d3:9a:4b:47:c1:72:df:e1:4c:
77:88:94:94:a3:3b:80:3a:17:e3:cb:71:36:1a:86:
af:3d:af:95:29:d3:53:b2:56:53:c8:35:8a:b7:6c:
40:0f:64:bf:2d:1e:d3:a5:99:16:73:ea:d0:a7:08:
0a:1a:f2:0a:e3:79:30:0a:2b:6b:5a:3f:c0:60:1a:
c2:c0:df:84:cb:db:7a:46:63:93:5b:70:f7:c8:75:
d4:73:0b:5b:30:df:87:a6:2e:c3:56:29:80:9c:57:
e7:94:70:ad:34:1e:7d:81:47:31:e5:bd:50:74:21:
47:00:8d:50:b3:05:77:d8:fd:2f:08:db:4e:45:08:
db:81:f9:03:23:a8:47:4f:04:f1:a9:ba:50:84:34:
83:af:b9:64:72:13:06:c7:ed:92:38:01:31:2b:ce:
e2:20:98:fe:0b:67:d6:6e:81:3b:9a:ae:94:92:9e:
13:b2:a1:32:5a:5e:0b:f2:27:d4:0f:ce:4d:bc:2c:
35:b5:5c:ca:33:cc:fc:ce:b0:b3:e6:c9:e7:03:11:
a5:61:d7:14:d6:93:7d:b3:01:a1:ec:fd:0b:cc:b1:
aa:57:5f:75:ef:e1:58:94:c0:82:bd:2c:28:0c:66:
dc:04:f7:d5:26:cf:2f:d8:33:9a:61:79:56:f3:8d:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:A6:00:60:A1:CF:7F:A5:5D:1A:55:55:BF:DE:E5:4F:E0:EA:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5315ec0-8229-3da7-abbd-ab8cedf9ba5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:c9:e2:30:36:52:da:eb:48:1e:12:35:66:61:ed:ea:75:ed:
a9:47:b9:46:7e:e4:9e:4b:61:51:47:c2:74:e6:73:c1:9e:ba:
15:a9:40:ef:84:7c:49:97:72:28:19:2f:76:29:1d:98:c0:1f:
16:0b:ed:4a:4e:9b:14:77:4a:91:db:d8:63:95:ca:d7:fe:64:
79:b5:17:32:ed:0f:34:ce:92:12:ee:ba:13:fd:74:13:7d:7a:
c7:ca:b6:7b:43:8d:c6:9e:de:4c:fe:f3:06:b6:dc:e2:fa:00:
a9:89:b2:d0:cc:d3:54:ea:97:fb:41:d0:b5:54:7f:04:a2:d3:
23:4c:6e:5c:a9:ac:67:8b:52:e6:09:bf:bb:fe:99:eb:67:b1:
a5:f1:bf:ca:5b:71:84:f4:2e:99:ba:37:cf:c2:dd:0d:74:bf:
42:da:4a:ff:a8:ec:9f:4f:09:d8:fd:b8:65:d0:15:55:b5:4a:
13:16:4c:5a:d9:c0:3e:02:aa:2f:2d:19:07:87:af:8e:25:5e:
8e:2c:fb:7e:6e:e4:a3:b1:47:c7:20:5d:c7:2e:4a:2b:79:50:
70:32:37:52:20:cc:6d:0a:8a:e8:bd:78:7b:6b:04:d5:74:d2:
99:2f:1a:41:72:b6:81:8f:56:f1:c7:28:ec:68:fc:b2:a8:44:
9e:8a:43:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSxHa5HChlevGHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0NDMwM1oXDTI1MDMwOTA0NDMwM1owLzEtMCsGA1UEAxMk
ZjU2ZjU3ZWQtNGQwOC00YWZjLWE1OTQtZjI4NGVkZjBhMTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAa+MKLTmktHwXLf4Ux3iJSUozuAOhfjy3E2
GoavPa+VKdNTslZTyDWKt2xAD2S/LR7TpZkWc+rQpwgKGvIK43kwCitrWj/AYBrC
wN+Ey9t6RmOTW3D3yHXUcwtbMN+Hpi7DVimAnFfnlHCtNB59gUcx5b1QdCFHAI1Q
swV32P0vCNtORQjbgfkDI6hHTwTxqbpQhDSDr7lkchMGx+2SOAExK87iIJj+C2fW
boE7mq6Ukp4TsqEyWl4L8ifUD85NvCw1tVzKM8z8zrCz5snnAxGlYdcU1pN9swGh
7P0LzLGqV1917+FYlMCCvSwoDGbcBPfVJs8v2DOaYXlW842TpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaNpgBgoc9/pV0aVVW/3uVP4OodMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUzMTVlYzAtODIyOS0z
ZGE3LWFiYmQtYWI4Y2VkZjliYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBVQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbJ4jA2UtrrSB4SNWZh7ep17alHuUZ+5J5LYVFHwnTmc8GeuhWpQO+E
fEmXcigZL3YpHZjAHxYL7UpOmxR3SpHb2GOVytf+ZHm1FzLtDzTOkhLuuhP9dBN9
esfKtntDjcae3kz+8wa23OL6AKmJstDM01Tql/tB0LVUfwSi0yNMblyprGeLUuYJ
v7v+metnsaXxv8pbcYT0Lpm6N8/C3Q10v0LaSv+o7J9PCdj9uGXQFVW1ShMWTFrZ
wD4Cqi8tGQeHr44lXo4s+35u5KOxR8cgXccuSit5UHAyN1IgzG0Kiui9eHtrBNV0
0pkvGkFytoGPVvHHKOxo/LKoRJ6KQ0s=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:03 2025 by rpki-client