Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa
File: 0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa (raw, json)
Hash identifier: IVTBH20RHkhyEPEOcvj7P+0wYBIcRkFcy/Al/Tj428c=
Subject key identifier: 1C:EB:AF:B4:03:3E:D7:D4:2C:94:16:43:64:E9:A0:6F:2A:9A:B3:70
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C16AB6D393F1C4FE6540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.18.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c1:6a:b6:d3:93:f1:c4:fe:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=b2d94164-e6dd-4a4a-9be5-3c0892bc78ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:5e:5b:93:36:8f:d4:a4:8c:1b:22:d8:0d:
7d:a5:cd:76:07:19:d7:29:22:a4:2f:c6:17:40:45:
c9:4b:9e:b0:b1:e0:8d:c1:6d:1f:c5:a9:83:16:55:
b5:6c:d4:c0:94:73:0d:de:cf:c6:78:31:cf:f6:30:
b4:40:b5:a8:fb:a8:ab:2a:b6:62:76:6b:ad:74:af:
a8:ca:a9:7c:c3:4a:e5:dd:ce:0c:0c:f2:7e:12:fa:
cf:be:9c:f4:ea:a0:14:f2:a9:d2:cd:1f:a9:02:2d:
1c:f7:97:ea:46:43:b5:e0:a4:73:c6:56:64:92:c9:
2b:28:97:6d:5f:14:ea:53:d3:6b:9a:05:44:dd:b6:
c5:48:9e:e0:c0:8d:6d:97:3a:71:b6:1e:ff:b2:66:
64:9e:bb:99:86:ad:45:a3:5f:71:9c:41:e7:c5:d9:
35:a9:45:59:dd:3a:76:73:27:9a:49:c3:8d:72:d5:
14:8b:3e:6e:c1:72:c1:0c:70:bd:f4:bf:2c:53:2c:
e1:61:2d:23:77:03:79:4c:ee:d8:ca:17:4a:b5:32:
32:33:cd:31:9f:24:4d:1f:e6:d4:21:76:cf:19:b1:
90:b5:fd:99:a3:43:72:27:44:ca:1f:e0:14:e4:ae:
be:43:a8:4f:9a:c1:be:1f:a3:41:8d:49:72:ba:ed:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EB:AF:B4:03:3E:D7:D4:2C:94:16:43:64:E9:A0:6F:2A:9A:B3:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:72:43:59:25:e9:bd:a6:22:60:e4:8d:69:21:ce:2b:79:4b:
e4:ab:2b:21:84:9c:2a:e1:f6:dd:6b:1d:3c:b6:1a:da:e8:a1:
ec:55:30:d8:4a:6b:97:77:f9:fe:d8:f5:c9:91:a8:e0:ed:08:
90:bb:f5:ab:14:1e:2b:75:12:a5:1b:b8:78:7b:90:0c:6f:a6:
5f:c6:7d:73:ad:80:82:c6:c3:74:fd:56:6e:ee:fc:78:71:82:
1b:a4:3d:bc:97:54:83:91:5a:b4:2e:f2:45:a0:e7:8c:17:ca:
bb:0b:39:6a:0c:62:ca:cc:84:8c:45:07:84:17:a5:01:d5:17:
ce:86:4f:18:f2:70:cf:ae:93:65:70:22:b9:d9:51:59:bd:7e:
b3:83:8b:e3:52:4e:07:4a:ee:62:7d:07:2f:96:19:e9:2e:4a:
ee:ba:6c:85:af:c6:54:cc:88:30:ed:66:ba:32:6c:c2:eb:b9:
f9:2a:65:e6:72:4e:4f:4a:50:9f:2e:f3:75:0b:97:78:86:24:
0b:b0:5b:0a:e5:be:fb:cb:ea:c6:42:58:7d:54:41:9c:d8:f1:
42:d8:2b:92:56:b1:7c:6c:1d:c5:09:57:29:f3:3b:57:f8:c2:
22:64:1f:b8:7b:fa:89:df:b6:b9:5c:d8:ba:86:ff:9c:f5:a3:
88:91:9e:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsFqttOT8cT+ZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
YjJkOTQxNjQtZTZkZC00YTRhLTliZTUtM2MwODkyYmM3OGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4peW5M2j9SkjBsi2A19pc12BxnXKSKkL8YX
QEXJS56wseCNwW0fxamDFlW1bNTAlHMN3s/GeDHP9jC0QLWo+6irKrZidmutdK+o
yql8w0rl3c4MDPJ+EvrPvpz06qAU8qnSzR+pAi0c95fqRkO14KRzxlZkkskrKJdt
XxTqU9NrmgVE3bbFSJ7gwI1tlzpxth7/smZknruZhq1Fo19xnEHnxdk1qUVZ3Tp2
cyeaScONctUUiz5uwXLBDHC99L8sUyzhYS0jdwN5TO7YyhdKtTIyM80xnyRNH+bU
IXbPGbGQtf2Zo0NyJ0TKH+AU5K6+Q6hPmsG+H6NBjUlyuu0QAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBzrr7QDPtfULJQWQ2TpoG8qmrNwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGZiYjRkZGYtMzRlNi0z
Y2ZlLWJkZjMtYzZmOTU2ZDFlNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBI7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExyQ1kl6b2mImDkjWkhzit5S+SrKyGEnCrh9t1rHTy2GtrooexVMNhK
a5d3+f7Y9cmRqODtCJC79asUHit1EqUbuHh7kAxvpl/GfXOtgILGw3T9Vm7u/Hhx
ghukPbyXVIORWrQu8kWg54wXyrsLOWoMYsrMhIxFB4QXpQHVF86GTxjycM+uk2Vw
IrnZUVm9frODi+NSTgdK7mJ9By+WGekuSu66bIWvxlTMiDDtZroybMLrufkqZeZy
Tk9KUJ8u83ULl3iGJAuwWwrlvvvL6sZCWH1UQZzY8ULYK5JWsXxsHcUJVynzO1f4
wiJkH7h7+onftrlc2LqG/5z1o4iRnqg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:14:03 2025 by rpki-client