Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa
File: da9a4408-8b68-391a-8e54-a150697293fa.roa (raw, json)
Hash identifier: egwQdjE+4ne0szEcxd4G2EIlfEAyTDgkWp34g6q6Xkg=
Subject key identifier: 2F:13:C7:E2:98:77:A6:C7:E1:05:94:1B:49:F4:CF:DE:F0:D6:C7:09
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827ABFDE89D52B44E2DE7A0C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa
Signing time: Tue 10 Dec 2024 01:09:57 +0000
ROA not before: Tue 10 Dec 2024 01:09:57 +0000
ROA not after: Mon 10 Mar 2025 00:09:57 +0000
asID: 13335
IP address blocks: 104.31.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ab:fd:e8:9d:52:b4:4e:2d:e7:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:09:57 2024 GMT
Not After : Mar 10 00:09:57 2025 GMT
Subject: CN=201f85fc-10ff-435f-bbca-0905e9b3ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:1a:43:e9:c7:28:69:7b:aa:29:7c:2d:ce:
c0:ae:9c:0a:3f:61:56:1e:4a:0d:ad:36:8a:08:9b:
85:4f:fd:3d:3a:e6:df:39:dc:cd:df:18:41:15:fc:
26:94:a1:13:04:8b:d4:bb:61:83:93:9e:e3:30:c7:
1b:51:28:9b:59:91:45:82:ee:d5:0b:36:34:4b:98:
4c:ac:c9:35:a4:35:45:fe:3b:2c:0a:01:b2:d1:ef:
fb:7b:ee:88:7d:91:e0:e9:88:cd:d1:ed:4d:db:7a:
a2:39:02:a5:e5:13:c2:1a:62:35:6d:64:59:b9:1a:
91:f5:3d:e4:f7:e7:e2:b7:b3:d6:1c:bf:82:c5:9f:
4d:dc:f5:78:19:3d:24:40:b7:74:da:98:a6:5f:1c:
99:c4:52:92:2e:dd:bf:59:c0:c3:03:4f:47:a9:0e:
58:84:b9:7f:b7:8e:3b:ce:5c:31:92:03:bf:6c:8e:
15:2c:6a:a3:09:e3:7c:7b:df:86:f0:1b:91:f3:3f:
a5:1b:e0:3b:05:be:8d:1a:76:98:3d:df:79:8a:03:
0e:0e:b9:8a:d8:37:9f:47:3e:84:af:67:4a:c7:97:
5d:57:6b:34:fc:67:2f:0a:26:f3:a0:75:a7:a9:75:
a3:a8:99:3c:96:4a:fd:ca:7c:79:91:d4:19:6e:2e:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:C7:E2:98:77:A6:C7:E1:05:94:1B:49:F4:CF:DE:F0:D6:C7:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da9a4408-8b68-391a-8e54-a150697293fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:82:25:0f:47:68:af:dc:10:20:2e:0a:f0:89:af:25:1f:01:
f0:f3:14:10:1c:de:2b:3c:f4:b8:bc:c3:68:9d:40:8f:b6:d9:
12:ad:6f:d3:08:6a:ea:a7:ab:64:bb:04:24:f9:2c:9b:5d:22:
9a:bd:80:b5:e9:b8:b0:ce:76:0b:36:6b:77:0c:dd:a7:3a:fe:
04:b1:3f:6c:4c:f0:80:c5:25:d4:43:09:a0:ca:e4:6d:42:e7:
3e:64:90:9a:71:75:30:85:16:9a:4c:10:0c:b7:48:39:69:a9:
75:e6:9f:7e:1c:2b:72:40:46:03:91:97:55:ef:56:9f:e3:a3:
0d:ee:96:27:59:85:7a:64:31:0c:d2:df:6a:ef:7a:ca:5d:10:
1b:22:75:cc:38:69:a5:83:17:e8:58:de:c0:31:d5:e9:c3:6b:
b8:3b:fd:cc:75:95:e1:74:33:57:61:b2:cd:b6:2b:1f:f5:e1:
a1:50:2b:30:3f:38:48:3d:2e:3b:a0:ba:7b:85:8e:56:7f:5c:
b5:a5:f2:09:fe:7d:85:0f:18:b3:8c:17:41:a5:87:66:23:dc:
4d:1c:bb:c2:ac:a3:cb:af:f7:0b:31:86:a5:95:bf:28:e2:be:
79:4e:37:bb:a9:a8:3f:e7:c9:93:de:9a:c3:34:40:7c:20:78:
9e:82:a6:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnq/3onVK0Ti3noMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMDk1N1oXDTI1MDMxMDAwMDk1N1owLzEtMCsGA1UEAxMk
MjAxZjg1ZmMtMTBmZi00MzVmLWJiY2EtMDkwNWU5YjNlYzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYYaQ+nHKGl7qil8Lc7ArpwKP2FWHkoNrTaK
CJuFT/09OubfOdzN3xhBFfwmlKETBIvUu2GDk57jMMcbUSibWZFFgu7VCzY0S5hM
rMk1pDVF/jssCgGy0e/7e+6IfZHg6YjN0e1N23qiOQKl5RPCGmI1bWRZuRqR9T3k
9+fit7PWHL+CxZ9N3PV4GT0kQLd02pimXxyZxFKSLt2/WcDDA09HqQ5YhLl/t447
zlwxkgO/bI4VLGqjCeN8e9+G8BuR8z+lG+A7Bb6NGnaYPd95igMODrmK2DefRz6E
r2dKx5ddV2s0/GcvCibzoHWnqXWjqJk8lkr9ynx5kdQZbi6dOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC8Tx+KYd6bH4QWUG0n0z97w1scJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE5YTQ0MDgtOGI2OC0z
OTFhLThlNTQtYTE1MDY5NzI5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaB+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmCJQ9HaK/cECAuCvCJryUfAfDzFBAc3is89Li8w2idQI+22RKtb9MI
auqnq2S7BCT5LJtdIpq9gLXpuLDOdgs2a3cM3ac6/gSxP2xM8IDFJdRDCaDK5G1C
5z5kkJpxdTCFFppMEAy3SDlpqXXmn34cK3JARgORl1XvVp/jow3ulidZhXpkMQzS
32rvespdEBsidcw4aaWDF+hY3sAx1enDa7g7/cx1leF0M1dhss22Kx/14aFQKzA/
OEg9LjugunuFjlZ/XLWl8gn+fYUPGLOMF0Glh2Yj3E0cu8Kso8uv9wsxhqWVvyji
vnlON7upqD/nyZPemsM0QHwgeJ6CphI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:52:55 2025 by rpki-client