Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fadf28-ea31-371e-b63d-eb0a5142679c.roa
File: 00fadf28-ea31-371e-b63d-eb0a5142679c.roa (raw, json)
Hash identifier: k6U801Xh2MKmL84uNNbnAEE8Ur8Vc1C86N5gnrU1rjc=
Subject key identifier: 6A:8D:29:73:AF:D3:EC:61:00:02:C7:52:E6:30:DA:1C:30:64:70:A5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BB531EF0DAFEC25DF000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fadf28-ea31-371e-b63d-eb0a5142679c.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.16.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bb:53:1e:f0:da:fe:c2:5d:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=b995f82f-3aec-4a0f-9c50-1e7f10076fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:49:c4:5b:b9:1a:29:fc:55:9d:1a:8b:93:
44:b8:02:91:6b:0b:3f:5b:97:66:47:ae:d5:55:a3:
8f:c7:00:0b:71:65:65:91:6f:66:68:4d:2e:9b:ad:
8e:6a:e6:ee:61:d3:24:9e:54:72:9f:07:37:34:43:
cf:0a:12:d1:33:57:36:af:5a:bf:c1:b7:4d:5a:e4:
21:90:1c:b2:5c:39:83:c5:5f:f7:b6:2e:75:a4:a9:
cf:14:95:e1:3f:db:18:69:b0:ee:8f:4a:bc:08:7e:
40:76:31:ff:97:17:92:cf:b2:e9:b4:6c:1c:b1:17:
33:31:37:04:0f:16:44:09:ba:d6:66:33:7c:77:13:
42:e3:97:69:ce:93:ee:f2:6b:71:10:2c:f6:54:c6:
04:74:2e:4a:f4:78:88:a0:ba:40:01:00:52:5a:a1:
5e:65:b0:5d:70:81:a0:71:47:4e:f8:b7:37:41:f9:
3e:f6:30:3d:7a:1d:a8:4c:48:72:ef:22:9e:33:22:
42:fe:2b:44:50:b5:92:89:15:cd:41:a4:9c:63:50:
dd:90:c6:f0:15:7f:1c:57:4f:dd:ac:2a:36:8c:f4:
9b:49:c2:d4:4d:51:6b:2f:15:2b:b5:b0:6d:7d:80:
7d:bd:21:6c:29:7b:91:1b:15:82:8f:39:b8:8c:6f:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:29:73:AF:D3:EC:61:00:02:C7:52:E6:30:DA:1C:30:64:70:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fadf28-ea31-371e-b63d-eb0a5142679c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:7c:dc:6c:31:c7:7a:80:43:4c:f8:0a:a0:ec:5d:0f:16:23:
08:9d:78:0e:5b:bf:d9:96:c2:00:87:ac:aa:e5:6d:ed:3d:32:
c7:3c:0c:8f:62:40:f8:e2:89:08:b3:65:15:33:cd:9b:77:5e:
84:58:99:f6:7c:55:e1:4d:16:c6:60:a4:6c:74:d0:9f:99:f2:
39:17:17:6a:69:2b:9c:1e:6c:cb:46:60:ab:02:78:5f:c4:73:
23:d3:1a:e6:66:7b:4e:30:3b:9a:64:f8:91:a7:46:b1:6b:81:
e7:a5:66:d9:17:86:e6:c8:54:fc:25:27:ff:b3:78:6d:e8:5e:
38:63:26:95:0e:81:7b:cf:b5:d1:28:37:ff:a1:bb:f7:3a:9c:
60:20:4a:8e:4a:f0:f4:ef:66:ea:80:d1:a9:52:ee:b1:61:a2:
6e:d8:9b:3d:46:53:9f:f4:10:a8:5b:5a:a7:be:4a:0f:c0:2b:
77:ee:c8:55:55:7e:be:23:3b:26:55:d5:bc:59:87:2f:94:6a:
76:3b:bc:00:5e:90:1d:4f:8f:ec:70:05:df:c3:dd:c3:35:e3:
0b:73:06:68:db:7c:fa:d8:b1:7b:27:e6:a3:6f:c2:8f:10:0c:
a6:72:de:45:f4:05:52:e5:59:47:5c:31:f1:f3:af:8e:73:ac:
3a:ce:25:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrtTHvDa/sJd8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
Yjk5NWY4MmYtM2FlYy00YTBmLTljNTAtMWU3ZjEwMDc2ZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3RJxFu5Gin8VZ0ai5NEuAKRaws/W5dmR67V
VaOPxwALcWVlkW9maE0um62OaubuYdMknlRynwc3NEPPChLRM1c2r1q/wbdNWuQh
kByyXDmDxV/3ti51pKnPFJXhP9sYabDuj0q8CH5AdjH/lxeSz7LptGwcsRczMTcE
DxZECbrWZjN8dxNC45dpzpPu8mtxECz2VMYEdC5K9HiIoLpAAQBSWqFeZbBdcIGg
cUdO+Lc3Qfk+9jA9eh2oTEhy7yKeMyJC/itEULWSiRXNQaScY1DdkMbwFX8cV0/d
rCo2jPSbScLUTVFrLxUrtbBtfYB9vSFsKXuRGxWCjzm4jG+hsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqNKXOv0+xhAALHUuYw2hwwZHClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDBmYWRmMjgtZWEzMS0z
NzFlLWI2M2QtZWIwYTUxNDI2NzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBAwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJ83Gwxx3qAQ0z4CqDsXQ8WIwideA5bv9mWwgCHrKrlbe09Msc8DI9i
QPjiiQizZRUzzZt3XoRYmfZ8VeFNFsZgpGx00J+Z8jkXF2ppK5webMtGYKsCeF/E
cyPTGuZme04wO5pk+JGnRrFrgeelZtkXhubIVPwlJ/+zeG3oXjhjJpUOgXvPtdEo
N/+hu/c6nGAgSo5K8PTvZuqA0alS7rFhom7Ymz1GU5/0EKhbWqe+Sg/AK3fuyFVV
fr4jOyZV1bxZhy+UanY7vABekB1Pj+xwBd/D3cM14wtzBmjbfPrYsXsn5qNvwo8Q
DKZy3kX0BVLlWUdcMfHzr45zrDrOJZg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:30 2025 by rpki-client