Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
File: b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa (raw, json)
Hash identifier: tLX6FsDs3E9G9YKE64jbtZWDNpHUo/0lOLXonxPAmyo=
Subject key identifier: 2B:FB:D1:CE:C0:45:2C:F8:9E:C6:1B:B0:B6:C0:B9:80:42:79:5D:33
Certificate issuer: /CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
Certificate serial: 010D0C9F4328584858A05D3DF4D2C671409D3C00
Authority key identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 13319
IP address blocks: 104.192.232.0/22 maxlen: 24
199.167.116.0/22 maxlen: 24
199.246.168.0/23 maxlen: 24
209.87.224.0/19 maxlen: 24
216.106.96.0/20 maxlen: 24
2607:f0b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5d:3d:f4:d2:c6:71:40:9d:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce440a32-2e1e-4948-9661-7ae2aa059c20
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=cfec2f78-c249-406b-b324-acbbf7fe2a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:5f:ef:85:2a:f3:c2:fd:aa:f1:b7:5d:18:
3f:51:cf:02:6d:ac:8a:e9:7b:81:1d:9c:8b:04:fc:
bc:33:15:74:d1:ec:ba:30:af:a3:08:52:92:86:39:
24:4e:51:49:24:a3:4d:39:c8:28:e7:e2:4c:c4:cb:
4b:59:b9:2b:ad:22:7d:f3:9b:96:26:3d:a1:66:6c:
4b:9a:0a:79:0c:57:06:ab:e9:99:dc:8e:1b:8f:63:
29:a6:52:ef:71:8d:36:cf:3b:19:b6:29:b3:67:ee:
70:95:3f:91:2e:fe:94:05:04:bc:1e:b8:1b:8d:1e:
1f:f4:56:ff:bc:c1:aa:ec:99:d5:fe:46:52:5c:c6:
f6:e8:94:a0:f1:da:e5:69:de:bb:22:1d:fd:01:f4:
75:44:8d:fb:b7:92:5b:95:05:40:99:d7:37:54:5f:
b3:af:2e:32:e3:63:6d:ff:19:7b:07:4f:1e:2b:c7:
6d:53:f5:7d:4b:f1:64:14:d4:af:bc:99:b6:d7:ee:
79:8e:1c:b5:cc:06:f6:98:b9:9f:1e:c3:be:ac:0c:
f5:eb:48:63:ff:d3:24:db:db:6e:ce:41:4d:40:d9:
b4:82:c9:25:1d:08:ba:8f:73:9e:54:af:bd:0a:ee:
96:13:65:7f:45:d4:65:7c:90:17:a0:ab:f0:af:a0:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:D1:CE:C0:45:2C:F8:9E:C6:1B:B0:B6:C0:B9:80:42:79:5D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl
X509v3 Authority Key Identifier:
keyid:8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.232.0/22
199.167.116.0/22
199.246.168.0/23
209.87.224.0/19
216.106.96.0/20
IPv6:
2607:f0b0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:98:45:65:29:bc:ba:5b:33:e0:f9:e4:fd:fc:bb:a8:a9:71:
f4:a0:54:40:16:f5:9a:e2:88:af:47:95:0a:d4:17:93:50:83:
16:f4:6d:d3:b3:da:3e:4e:23:7a:00:53:0a:03:e4:53:ea:e2:
67:97:30:d6:fb:0f:d3:da:d2:b2:85:be:f1:fa:4a:e9:24:2b:
7e:6a:06:d9:5a:9c:68:22:87:c5:29:ae:92:5b:dc:b7:af:8f:
0d:b2:ef:60:ad:50:71:66:89:f5:a5:d7:0f:ff:2c:51:4a:0c:
06:a1:78:d6:4f:4b:e9:f5:78:65:52:8b:57:03:99:d3:da:9f:
8e:1e:ba:e8:c8:ea:6e:4b:8e:cf:d9:df:43:cc:9a:bc:9f:9f:
f9:87:f4:8e:d3:2b:b5:59:56:46:38:81:9a:d3:26:06:2f:84:
8e:31:c1:ef:3b:bd:e4:8d:43:f6:86:dc:9d:0d:de:be:d8:e6:
01:17:7b:1a:67:4b:da:32:3e:0d:bf:17:0b:5a:28:c0:8d:45:
e6:44:96:7c:10:6d:6b:9f:7a:bf:c8:a0:87:16:01:f2:0d:70:
70:1e:ec:5b:54:d2:7d:73:56:e8:b0:7c:63:89:fd:dc:b1:4e:
22:37:88:b5:49:1f:35:0a:a6:15:40:36:8a:42:8b:b8:fd:b3:
e7:ea:26:29
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEhYoF099NLGcUCdPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0NDBhMzItMmUxZS00OTQ4LTk2NjEtN2FlMmFhMDU5
YzIwMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2ZlYzJmNzgtYzI0OS00MDZiLWIzMjQtYWNiYmY3ZmUyYTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp09f74Uq88L9qvG3XRg/Uc8CbayK6XuBHZyL
BPy8MxV00ey6MK+jCFKShjkkTlFJJKNNOcgo5+JMxMtLWbkrrSJ985uWJj2hZmxL
mgp5DFcGq+mZ3I4bj2MpplLvcY02zzsZtimzZ+5wlT+RLv6UBQS8HrgbjR4f9Fb/
vMGq7JnV/kZSXMb26JSg8drlad67Ih39AfR1RI37t5JblQVAmdc3VF+zry4y42Nt
/xl7B08eK8dtU/V9S/FkFNSvvJm21+55jhy1zAb2mLmfHsO+rAz160hj/9Mk29tu
zkFNQNm0gsklHQi6j3OeVK+9Cu6WE2V/RdRlfJAXoKvwr6BU8wIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFCv70c7ARSz4nsYbsLbAuYBCeV0zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTQ0
MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUyYWEwNTljMjAvYjFmYjE2YTMtYmZkMy0z
YzczLTkzZjQtNTZjNjU2N2U2N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U0NDBhMzItMmUxZS00OTQ4LTk2
NjEtN2FlMmFhMDU5YzIwL2NlNDQwYTMyLTJlMWUtNDk0OC05NjYxLTdhZTJhYTA1
OWMyMC5jcmwwHwYDVR0jBBgwFoAUjqUr0BDypIJJ2Q9kuCksmmtY9lUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTQ0MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUy
YWEwNTljMjAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCaMDoAwQC
x6d0AwQBx/aoAwQF0VfgAwQE2GpgMA0EAgACMAcDBQAmB/CwMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGSY
RWUpvLpbM+D55P38u6ipcfSgVEAW9ZriiK9HlQrUF5NQgxb0bdOz2j5OI3oAUwoD
5FPq4meXMNb7D9Pa0rKFvvH6SukkK35qBtlanGgih8UprpJb3Levjw2y72CtUHFm
ifWl1w//LFFKDAaheNZPS+n1eGVSi1cDmdPan44euujI6m5Ljs/Z30PMmryfn/mH
9I7TK7VZVkY4gZrTJgYvhI4xwe87veSNQ/aG3J0N3r7Y5gEXexpnS9oyPg2/Fwta
KMCNReZElnwQbWufer/IoIcWAfINcHAe7FtU0n1zVuiwfGOJ/dyxTiI3iLVJHzUK
phVANopCi7j9s+fqJik=
-----END CERTIFICATE-----
Generated at Sun May 11 11:40:14 2025 by rpki-client