Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/527e95a4-2aab-3fa0-bc0e-d50bd93812cf.roa
File: 527e95a4-2aab-3fa0-bc0e-d50bd93812cf.roa (raw, json)
Hash identifier: XnYFjvKe3DW4wdVtUS5PXO7Nd9ftCgqqIkPa6lu4h0M=
Subject key identifier: 64:55:A0:EC:83:6A:5E:05:25:DE:33:5D:0C:E3:28:F3:75:88:72:61
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C01C5DD857930DAC79680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/527e95a4-2aab-3fa0-bc0e-d50bd93812cf.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.31.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:01:c5:dd:85:79:30:da:c7:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=aebbd1ea-73fd-4ea5-93df-943694c716fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:5d:44:b3:72:89:97:82:4b:83:b8:39:dc:
30:f6:99:24:d8:ef:b7:67:75:91:f6:30:e8:9b:35:
de:06:08:2a:7a:f5:60:13:00:00:2f:fa:7e:a8:ba:
ea:67:58:cd:2c:05:80:9a:63:5a:c4:c2:67:c3:1f:
8d:92:ed:66:95:c9:83:ea:e6:08:ed:6e:58:18:4d:
df:ab:ee:98:c7:e5:0a:aa:b8:aa:92:1c:a7:e7:2b:
a8:56:d0:cb:fd:63:13:e1:5c:44:31:5b:d2:5d:a9:
ff:c3:39:b5:3d:03:37:05:50:d3:af:61:d7:6c:c1:
14:a6:43:b3:c9:39:c4:99:10:65:a3:30:a7:15:a2:
b6:b4:ea:2d:e9:15:43:f0:e1:b2:21:20:ed:28:30:
b6:c4:00:82:cf:00:ad:7c:8f:5d:b5:f6:80:81:ff:
23:d5:5e:0a:89:f9:6e:98:0d:28:e3:35:b7:a7:22:
a6:d0:d0:be:91:64:48:bc:86:6a:a4:20:b8:9a:c0:
19:ab:11:09:57:52:f7:46:f0:23:80:e0:a1:fa:ac:
d2:f3:46:4a:d9:8f:5a:69:47:88:1b:06:aa:cc:5c:
fb:af:f0:53:a3:63:a0:a0:7e:4f:24:80:85:2f:00:
6e:d7:61:45:0b:f4:b3:31:4e:dc:ea:4b:72:b0:8c:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:A0:EC:83:6A:5E:05:25:DE:33:5D:0C:E3:28:F3:75:88:72:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/527e95a4-2aab-3fa0-bc0e-d50bd93812cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f0:d8:d8:f4:06:59:17:cd:1d:55:94:e7:db:ed:08:74:09:
54:a9:00:59:ca:e8:de:dc:fd:aa:37:c8:a2:f9:a9:fe:0b:f5:
00:a0:70:d1:ec:4f:5c:d1:4c:c5:f3:7d:e4:ce:41:11:4f:92:
af:96:1e:2b:e1:53:9b:cf:dc:1a:11:bb:0f:3c:85:d9:2e:91:
5e:6c:1e:d7:31:cb:9f:02:ef:ac:1c:2d:33:eb:9c:70:fa:d8:
6b:60:86:1f:d1:b3:35:61:73:b3:49:f8:76:db:ba:9d:f5:9d:
8f:2d:db:92:30:36:f9:16:1b:44:9f:aa:c6:4b:e9:cb:be:19:
ca:4a:da:27:66:b1:5c:c6:a6:d2:0a:2c:dd:be:f5:3a:47:c5:
bf:64:50:ff:50:c9:4f:8e:ed:10:07:eb:0d:29:58:25:8e:6e:
81:6c:6e:d0:53:9d:3b:11:21:bd:02:c8:eb:cd:4a:2b:9e:4d:
a2:8c:03:fe:90:46:7c:a1:b1:ec:7f:54:bd:2f:eb:74:91:ac:
c5:f3:dc:c8:2b:f1:00:48:6a:7b:6f:4b:d5:a2:44:93:b4:62:
99:5e:ce:25:97:d4:2f:31:53:ed:46:c9:a2:e4:e9:ed:9c:c4:
53:3f:88:b0:5b:07:99:dd:a3:12:01:a5:d1:f8:6a:03:95:d6:
e0:72:e7:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAHF3YV5MNrHloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
YWViYmQxZWEtNzNmZC00ZWE1LTkzZGYtOTQzNjk0YzcxNmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYVdRLNyiZeCS4O4Odww9pkk2O+3Z3WR9jDo
mzXeBggqevVgEwAAL/p+qLrqZ1jNLAWAmmNaxMJnwx+Nku1mlcmD6uYI7W5YGE3f
q+6Yx+UKqriqkhyn5yuoVtDL/WMT4VxEMVvSXan/wzm1PQM3BVDTr2HXbMEUpkOz
yTnEmRBlozCnFaK2tOot6RVD8OGyISDtKDC2xACCzwCtfI9dtfaAgf8j1V4Kiflu
mA0o4zW3pyKm0NC+kWRIvIZqpCC4msAZqxEJV1L3RvAjgOCh+qzS80ZK2Y9aaUeI
GwaqzFz7r/BTo2OgoH5PJICFLwBu12FFC/SzMU7c6ktysIyHvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGRVoOyDal4FJd4zXQzjKPN1iHJhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTI3ZTk1YTQtMmFhYi0z
ZmEwLWJjMGUtZDUwYmQ5MzgxMmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaB+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrw2Nj0BlkXzR1VlOfb7Qh0CVSpAFnK6N7c/ao3yKL5qf4L9QCgcNHs
T1zRTMXzfeTOQRFPkq+WHivhU5vP3BoRuw88hdkukV5sHtcxy58C76wcLTPrnHD6
2Gtghh/RszVhc7NJ+Hbbup31nY8t25IwNvkWG0SfqsZL6cu+GcpK2idmsVzGptIK
LN2+9TpHxb9kUP9QyU+O7RAH6w0pWCWOboFsbtBTnTsRIb0CyOvNSiueTaKMA/6Q
Rnyhsex/VL0v63SRrMXz3Mgr8QBIantvS9WiRJO0YpleziWX1C8xU+1GyaLk6e2c
xFM/iLBbB5ndoxIBpdH4agOV1uBy5x4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:48 2025 by rpki-client