Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa
File: 1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa (raw, json)
Hash identifier: 07l2YmElvNHTnkQmlO63oZNlxpforsao8VouR6kRhQs=
Subject key identifier: 6C:17:39:22:CD:ED:91:95:8D:FF:E5:CD:CC:45:45:C5:E3:0B:9B:FB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905FB88927A65B1CFFCBA1040
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa
Signing time: Thu 27 Feb 2025 16:19:41 +0000
ROA not before: Thu 27 Feb 2025 16:19:41 +0000
ROA not after: Wed 28 May 2025 15:19:41 +0000
asID: 13335
IP address blocks: 104.23.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:fb:88:92:7a:65:b1:cf:fc:ba:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 16:19:41 2025 GMT
Not After : May 28 15:19:41 2025 GMT
Subject: CN=2ce8be84-ef74-4708-ae8d-746106601e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:50:12:c4:f9:46:e3:75:3f:af:55:b2:80:
36:48:3d:6f:90:6d:c8:e6:a0:f0:c8:f1:aa:43:0f:
da:7a:96:c2:df:d4:1b:5e:4e:dc:15:65:e2:07:96:
c5:a5:d4:73:82:27:06:c4:4b:16:15:3a:03:2e:c8:
e4:a5:96:8b:95:5d:e6:ec:c8:e5:a1:43:85:d9:41:
6a:f8:9a:81:e3:fd:7e:3f:60:e2:33:78:98:73:65:
49:c0:4b:40:fc:e5:8e:41:25:37:76:be:65:2b:ab:
29:ec:ed:99:db:c4:77:f3:ec:16:01:a1:f6:4d:a3:
20:2f:8f:6e:24:f4:3a:eb:4c:42:0e:67:4d:33:76:
8d:3e:c1:fd:0b:46:65:13:36:0d:3b:a3:b1:8b:98:
e0:0c:15:e5:f3:9d:af:38:25:34:3d:86:6e:d9:b8:
c4:bf:e3:d9:5d:33:8f:61:56:c2:06:e4:36:e3:50:
fa:78:eb:c5:5b:28:c8:d5:64:c8:b1:ac:f2:01:3e:
e3:9a:c0:c3:57:78:61:ed:e7:8e:68:fc:b4:74:22:
7d:40:26:2c:fc:60:fc:cf:33:6f:e7:ee:98:67:d6:
d4:1f:ef:85:bd:9c:db:65:5a:12:4b:4f:03:28:44:
5e:7b:e4:95:50:8d:be:59:19:5f:9b:da:14:d1:83:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:39:22:CD:ED:91:95:8D:FF:E5:CD:CC:45:45:C5:E3:0B:9B:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a880b2b-78cb-3d10-8d95-82acb151fdc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:f0:08:5c:2c:15:68:57:33:e2:70:e3:37:26:23:e3:84:6c:
ff:32:44:48:a4:91:eb:d6:5f:1e:79:60:c6:cb:92:47:01:f4:
d2:30:a5:cc:4b:c0:05:0e:64:ae:91:2f:49:eb:d3:72:43:0f:
82:92:df:50:d3:46:c3:d7:9b:20:93:b3:44:aa:c6:e2:18:2a:
fb:eb:43:f6:84:49:ea:78:f1:63:08:8a:14:85:3c:e0:83:6b:
50:33:74:28:c0:70:10:0e:56:43:f8:ea:95:8d:5b:1e:24:22:
1b:e5:f1:8f:d7:91:9e:92:83:0e:b2:5b:15:03:69:ff:cc:4c:
97:b2:85:19:7c:e2:fb:c5:7f:a1:cd:b0:d8:b8:cb:fe:5c:c5:
e7:e9:32:b2:64:a6:e6:20:21:cd:fd:8b:75:3c:0c:83:de:22:
2b:b3:74:f4:81:2c:c9:b4:5a:7e:37:ab:9f:bb:52:bd:2b:57:
04:0b:d9:13:47:e8:6a:ec:b7:96:6f:ee:0f:ad:03:7d:2c:c1:
81:bb:c4:10:fc:4e:75:83:36:c4:38:3a:c0:7d:78:a1:34:2c:
88:d3:d8:eb:17:7e:68:d4:f3:fb:d4:49:6c:e9:37:b4:aa:80:
99:a0:e1:d0:f0:1e:dd:1a:40:15:97:50:fd:3b:87:17:3f:bb:
60:1d:10:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkF+4iSemWxz/y6EEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE2MTk0MVoXDTI1MDUyODE1MTk0MVowLzEtMCsGA1UEAxMk
MmNlOGJlODQtZWY3NC00NzA4LWFlOGQtNzQ2MTA2NjAxZTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhtQEsT5RuN1P69VsoA2SD1vkG3I5qDwyPGq
Qw/aepbC39QbXk7cFWXiB5bFpdRzgicGxEsWFToDLsjkpZaLlV3m7MjloUOF2UFq
+JqB4/1+P2DiM3iYc2VJwEtA/OWOQSU3dr5lK6sp7O2Z28R38+wWAaH2TaMgL49u
JPQ660xCDmdNM3aNPsH9C0ZlEzYNO6Oxi5jgDBXl852vOCU0PYZu2bjEv+PZXTOP
YVbCBuQ241D6eOvFWyjI1WTIsazyAT7jmsDDV3hh7eeOaPy0dCJ9QCYs/GD8zzNv
5+6YZ9bUH++FvZzbZVoSS08DKERee+SVUI2+WRlfm9oU0YMavwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwXOSLN7ZGVjf/lzcxFRcXjC5v7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWE4ODBiMmItNzhjYi0z
ZDEwLThkOTUtODJhY2IxNTFmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBe6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPwCFwsFWhXM+Jw4zcmI+OEbP8yREikkevWXx55YMbLkkcB9NIwpcxL
wAUOZK6RL0nr03JDD4KS31DTRsPXmyCTs0SqxuIYKvvrQ/aESep48WMIihSFPOCD
a1AzdCjAcBAOVkP46pWNWx4kIhvl8Y/XkZ6Sgw6yWxUDaf/MTJeyhRl84vvFf6HN
sNi4y/5cxefpMrJkpuYgIc39i3U8DIPeIiuzdPSBLMm0Wn43q5+7Ur0rVwQL2RNH
6Grst5Zv7g+tA30swYG7xBD8TnWDNsQ4OsB9eKE0LIjT2OsXfmjU8/vUSWzpN7Sq
gJmg4dDwHt0aQBWXUP07hxc/u2AdEA4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:51 2025 by rpki-client