Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
File: 22ae559c-7964-3592-a823-156a667290bf.roa (raw, json)
Hash identifier: 4qeGflpvAXWcmwzXVpPRhizszQp8Hp2WK/ufotUirdo=
Subject key identifier: C7:8E:26:DC:B4:4C:72:94:58:42:CC:5F:F2:A9:5F:38:35:E2:50:D8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFC88ACDA715D26EE6EC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.29.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fc:88:ac:da:71:5d:26:ee:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=cbd534e0-f5ba-49f9-a2ae-8c23f44d8256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:0e:f8:d9:b8:a6:6f:68:60:ba:f0:24:a4:
25:8b:5c:a5:fa:cc:2a:aa:9a:ba:43:99:cc:e2:96:
a5:16:9d:3d:e0:35:7e:be:b9:bb:9e:e0:20:77:ff:
39:b5:36:29:03:f2:04:1d:8c:97:a3:4a:59:f3:f6:
3c:c5:7b:25:97:c9:72:8e:27:59:88:59:62:cb:7e:
b7:3e:01:9c:34:28:22:66:23:cd:9c:46:fd:7d:8a:
c0:bc:b6:92:8e:e4:e3:b5:a5:3a:19:e7:45:c6:6d:
b4:5d:11:81:bc:5a:e0:17:83:1d:00:0f:bf:b0:ae:
a4:ec:d5:13:b4:c6:f9:b4:2d:56:b9:d1:5d:8c:91:
ce:a1:f6:eb:d5:2f:82:c5:3e:e8:84:b5:8c:72:a5:
ec:9e:37:33:7b:4c:4c:6d:29:58:ec:c3:92:0f:f7:
03:f9:24:02:b2:2a:36:3c:6c:4a:1c:44:84:0b:8f:
5a:14:c1:b4:a4:a0:e9:d8:bb:a1:91:22:92:c7:70:
06:fb:d6:2c:c9:73:75:b3:c3:41:04:57:3c:30:3a:
1e:c1:81:ea:d2:80:e7:c7:ef:40:2d:7a:74:cd:13:
f0:c5:e7:6c:e0:0f:82:a3:2b:c6:00:32:12:83:3a:
69:0b:92:56:a8:85:6e:52:d6:02:01:32:81:5c:d7:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:26:DC:B4:4C:72:94:58:42:CC:5F:F2:A9:5F:38:35:E2:50:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:af:52:04:50:75:cd:76:6c:92:17:d6:ad:25:35:81:3f:2c:
00:c6:e1:34:07:c4:ac:7b:c4:32:13:2e:83:49:32:4d:75:31:
f6:64:4e:cf:bc:4a:17:f9:71:86:93:28:5b:9f:af:57:4a:13:
82:8c:18:03:f8:00:d2:92:3b:9e:92:88:b6:82:86:a4:72:ea:
c3:57:d2:f2:f6:a7:6a:64:d1:3c:76:18:89:09:49:0e:7a:e7:
2c:89:2c:2c:ca:22:61:1a:3b:ee:25:7c:47:ab:e7:2f:c6:a9:
a8:1b:97:77:d6:fc:24:6d:fa:2f:3f:61:fd:59:7b:cf:c0:98:
c3:1f:f2:90:62:4a:e8:bf:24:74:3c:7c:c3:93:a1:2c:ae:9c:
f3:31:8a:17:9d:99:d8:09:b4:ea:98:4b:f6:b3:35:c6:2b:28:
f5:80:25:e9:59:ae:c9:76:16:41:6d:c6:1c:11:3f:8e:6f:1d:
5b:22:b6:21:1b:5d:20:ec:b4:b3:81:b7:22:fb:89:65:69:73:
0f:c1:80:20:0f:dc:65:40:3b:41:07:88:3d:90:85:00:f8:d7:
4c:24:d5:ed:70:96:03:c9:34:ef:19:9a:9d:5c:4d:a1:fe:28:
1f:ba:ef:0f:ef:57:0e:a8:5c:29:05:1a:fa:6f:a5:38:80:1a:
f7:f9:72:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/yIrNpxXSbubsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
Y2JkNTM0ZTAtZjViYS00OWY5LWEyYWUtOGMyM2Y0NGQ4MjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojwO+Nm4pm9oYLrwJKQli1yl+swqqpq6Q5nM
4palFp094DV+vrm7nuAgd/85tTYpA/IEHYyXo0pZ8/Y8xXsll8lyjidZiFliy363
PgGcNCgiZiPNnEb9fYrAvLaSjuTjtaU6GedFxm20XRGBvFrgF4MdAA+/sK6k7NUT
tMb5tC1WudFdjJHOofbr1S+CxT7ohLWMcqXsnjcze0xMbSlY7MOSD/cD+SQCsio2
PGxKHESEC49aFMG0pKDp2LuhkSKSx3AG+9YsyXN1s8NBBFc8MDoewYHq0oDnx+9A
LXp0zRPwxeds4A+CoyvGADISgzppC5JWqIVuUtYCATKBXNcgWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeOJty0THKUWELMX/KpXzg14lDYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjJhZTU1OWMtNzk2NC0z
NTkyLWE4MjMtMTU2YTY2NzI5MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+vUgRQdc12bJIX1q0lNYE/LADG4TQHxKx7xDITLoNJMk11MfZkTs+8
Shf5cYaTKFufr1dKE4KMGAP4ANKSO56SiLaChqRy6sNX0vL2p2pk0Tx2GIkJSQ56
5yyJLCzKImEaO+4lfEer5y/Gqagbl3fW/CRt+i8/Yf1Ze8/AmMMf8pBiSui/JHQ8
fMOToSyunPMxihedmdgJtOqYS/azNcYrKPWAJelZrsl2FkFtxhwRP45vHVsitiEb
XSDstLOBtyL7iWVpcw/BgCAP3GVAO0EHiD2QhQD410wk1e1wlgPJNO8Zmp1cTaH+
KB+67w/vVw6oXCkFGvpvpTiAGvf5crk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:44 2025 by rpki-client