Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e69f3230-b374-310b-91d0-1988f6dd87fe.roa
File: e69f3230-b374-310b-91d0-1988f6dd87fe.roa (raw, json)
Hash identifier: DRlb7F0kgzDcGCR5qr4vIYqAdog5FJkkRzo8OXWVyfo=
Subject key identifier: 2E:C9:E7:5B:77:12:C9:0B:79:52:52:31:0C:63:28:1E:DE:C5:FD:F5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A3628E3FEEF549A644468C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e69f3230-b374-310b-91d0-1988f6dd87fe.roa
Signing time: Tue 10 Dec 2024 00:52:37 +0000
ROA not before: Tue 10 Dec 2024 00:52:37 +0000
ROA not after: Sun 09 Mar 2025 23:52:37 +0000
asID: 13335
IP address blocks: 104.29.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a3:62:8e:3f:ee:f5:49:a6:44:46:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:52:37 2024 GMT
Not After : Mar 9 23:52:37 2025 GMT
Subject: CN=543ea266-0ea6-4fd3-a451-2448053a06f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:75:d0:fe:af:d4:a4:bc:0d:52:85:8a:1e:
22:7a:e7:e4:bb:bf:2b:35:90:bd:04:25:8c:18:41:
54:af:4b:03:16:c6:d2:13:92:e2:68:8e:5e:e1:f1:
10:87:c7:ec:aa:00:23:6c:b8:25:df:fb:8f:3b:bc:
6a:fa:ee:c7:1d:53:3e:b6:ac:de:08:8a:fa:41:f4:
b4:47:e6:c9:04:ac:e4:ef:f6:9a:82:29:3f:74:03:
83:d7:1a:6f:97:eb:8f:39:98:1e:59:30:6d:02:00:
7a:b3:ed:9f:a2:8c:4f:fc:0e:09:53:a3:98:2b:2b:
e5:ac:ff:ff:2c:e4:e1:8f:9f:4f:34:a5:96:46:ae:
50:8f:1a:74:cc:90:1f:d0:e2:72:63:c3:04:78:a4:
43:8a:6c:ab:7f:62:a8:98:f6:d7:b0:8b:1e:0c:72:
92:0f:5c:00:a1:24:98:23:2e:99:4a:b1:ca:21:be:
86:1b:fd:a0:c0:5f:eb:14:f7:91:ee:54:bb:8a:0e:
d8:5d:dd:33:32:41:f6:23:2c:90:e0:c3:b6:9e:48:
5c:19:fa:23:9f:fe:b2:5f:3b:24:7e:d1:77:d0:3c:
c8:f9:fe:33:b7:81:bc:63:7e:95:69:99:8e:d4:aa:
1f:f9:4c:62:30:6b:08:e7:61:ee:6f:85:9e:2e:fb:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:E7:5B:77:12:C9:0B:79:52:52:31:0C:63:28:1E:DE:C5:FD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e69f3230-b374-310b-91d0-1988f6dd87fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:83:87:e8:aa:1c:b2:86:c6:d0:56:f4:19:bd:b3:89:24:b7:
27:a5:cf:e1:e6:27:50:51:d5:c3:3a:92:8d:ce:bc:18:e6:bf:
9e:a1:cc:d4:cb:51:37:3c:27:20:df:78:02:f7:b5:d4:33:72:
d7:08:a3:90:e2:85:fc:4a:94:0f:24:a4:ac:f7:77:ba:74:d3:
34:2c:69:ab:42:59:71:8d:1e:22:71:f1:3d:a9:01:97:1b:3d:
cc:53:f4:67:b9:a5:66:d7:b4:01:3b:79:a7:b7:85:c7:de:d6:
94:a7:aa:c8:73:0e:0a:47:3f:08:f6:83:d7:32:8b:f1:a6:50:
11:ed:68:89:24:1e:f9:cb:e0:73:dc:99:48:f9:d5:90:2c:16:
e3:aa:7c:25:c6:e1:38:57:3c:ea:e5:06:68:78:77:80:1e:82:
f7:14:26:00:e3:42:ac:73:b6:9e:d6:58:89:61:13:2b:ed:90:
f5:47:c1:ce:27:d6:7d:40:f3:2d:7e:02:c8:4d:42:63:ef:65:
72:b0:00:51:a0:14:97:67:b8:b3:e2:57:a6:f9:4d:97:d7:e3:
23:7c:4a:7f:c6:c4:f1:53:12:2b:3c:fa:e7:9c:14:9b:61:58:
77:ef:95:3a:70:0f:83:fd:d0:a2:5e:e4:49:da:e5:9d:bb:4a:
99:b2:55:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgno2KOP+71SaZERowwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAwNTIzN1oXDTI1MDMwOTIzNTIzN1owLzEtMCsGA1UEAxMk
NTQzZWEyNjYtMGVhNi00ZmQzLWE0NTEtMjQ0ODA1M2EwNmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPp10P6v1KS8DVKFih4ieufku78rNZC9BCWM
GEFUr0sDFsbSE5LiaI5e4fEQh8fsqgAjbLgl3/uPO7xq+u7HHVM+tqzeCIr6QfS0
R+bJBKzk7/aagik/dAOD1xpvl+uPOZgeWTBtAgB6s+2fooxP/A4JU6OYKyvlrP//
LOThj59PNKWWRq5Qjxp0zJAf0OJyY8MEeKRDimyrf2KomPbXsIseDHKSD1wAoSSY
Iy6ZSrHKIb6GG/2gwF/rFPeR7lS7ig7YXd0zMkH2IyyQ4MO2nkhcGfojn/6yXzsk
ftF30DzI+f4zt4G8Y36VaZmO1Kof+UxiMGsI52Hub4WeLvtSkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7J51t3EskLeVJSMQxjKB7exf31MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTY5ZjMyMzAtYjM3NC0z
MTBiLTkxZDAtMTk4OGY2ZGQ4N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCDh+iqHLKGxtBW9Bm9s4kktyelz+HmJ1BR1cM6ko3OvBjmv56hzNTL
UTc8JyDfeAL3tdQzctcIo5DihfxKlA8kpKz3d7p00zQsaatCWXGNHiJx8T2pAZcb
PcxT9Ge5pWbXtAE7eae3hcfe1pSnqshzDgpHPwj2g9cyi/GmUBHtaIkkHvnL4HPc
mUj51ZAsFuOqfCXG4ThXPOrlBmh4d4AegvcUJgDjQqxztp7WWIlhEyvtkPVHwc4n
1n1A8y1+AshNQmPvZXKwAFGgFJdnuLPiV6b5TZfX4yN8Sn/GxPFTEis8+uecFJth
WHfvlTpwD4P90KJe5Ena5Z27SpmyVXs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:56 2025 by rpki-client