Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa
File: 5b65e206-849c-3cf1-a6e0-7265114b7c15.roa (raw, json)
Hash identifier: sf2/E9t36/BNcQGkL+IdzdxxL1ubyu18ugoBrsHzXRk=
Subject key identifier: C1:E6:E4:F5:CB:CA:BD:D2:2C:FC:F3:2D:0B:86:14:34:45:D3:ED:DE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C8A236F41CBB3374EE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.25.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c8:a2:36:f4:1c:bb:33:74:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=b5da2d6a-6df3-4009-b747-935a7bccf7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:01:e1:56:11:8b:63:9d:12:19:f0:ea:39:87:
e1:c8:f7:30:72:de:ac:67:8c:00:a5:5c:73:6c:9c:
e9:ff:6e:9e:6a:7e:3b:77:5a:e7:9c:f9:46:ec:7b:
b8:9a:73:0f:45:3c:83:50:7e:9b:10:08:5d:b4:31:
d6:46:ac:a3:76:5a:5d:cc:47:0c:6d:1e:78:6c:00:
d6:6e:32:89:2d:6f:2b:fb:55:6b:7c:b4:da:39:5c:
ac:a1:f7:e7:67:a0:5c:ec:e5:b3:79:17:03:5f:e5:
e4:db:6c:7d:a6:64:f0:2e:8d:29:ab:26:ba:5a:f3:
1e:72:b4:4b:8c:77:81:12:fc:67:ec:b7:9e:38:38:
3f:5a:f1:3a:1b:73:88:09:00:a9:0c:49:4c:fb:ab:
e3:42:d1:5c:1c:0d:61:40:cc:f3:c1:03:ea:dc:49:
c9:07:7a:4a:0d:f5:f5:79:43:6b:1c:9f:c9:fd:0b:
87:27:ef:31:a4:04:3c:96:94:65:94:2f:55:00:bb:
8b:70:c1:82:0a:88:9e:5b:4b:fd:7f:c7:35:06:fc:
65:cb:66:b4:43:d2:94:22:75:58:4f:ab:4e:c0:be:
25:41:44:32:37:b6:63:7d:0d:38:48:86:91:b6:12:
ce:0c:89:7c:3a:0c:d7:16:60:50:8d:4b:94:e1:a5:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:E4:F5:CB:CA:BD:D2:2C:FC:F3:2D:0B:86:14:34:45:D3:ED:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5b65e206-849c-3cf1-a6e0-7265114b7c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:75:08:a2:fe:fe:0a:86:a3:67:d5:73:83:f3:59:2f:ea:ee:
70:99:8a:bc:17:61:e4:6c:a7:b0:26:bf:e4:a1:f1:97:02:c5:
60:86:99:3e:c1:43:c1:52:9a:06:49:a6:fa:d2:54:32:a9:5f:
a2:1d:bb:40:55:d2:3a:88:99:94:1f:f0:3b:eb:c2:91:a4:d5:
3f:57:0f:41:da:91:d0:c1:93:26:3e:fe:ba:5e:9f:76:c9:39:
e6:ec:53:bf:72:a5:61:fb:84:f0:15:af:77:6c:2b:89:54:51:
8a:8c:a4:be:26:6c:76:7d:b0:92:df:61:2e:b4:74:13:8a:f3:
7b:3d:2d:e8:95:37:8f:47:28:20:07:53:05:22:bc:6a:c8:9a:
76:e6:a3:9f:bb:57:69:46:84:77:c5:df:f8:1e:1c:5e:ae:96:
c2:99:4e:43:12:55:1f:1d:02:51:b1:76:b6:49:34:5f:62:47:
1b:5e:3a:8e:01:50:cd:11:7e:3b:cd:79:9c:98:09:43:0e:34:
02:b6:c2:51:21:59:cc:8c:83:d8:16:88:61:6d:a2:f9:7f:20:
08:91:9e:c8:4a:c8:d8:ef:e6:22:c1:e9:ff:65:0b:35:21:81:
ac:66:ea:eb:c4:b2:f6:01:92:22:c1:2c:59:7f:26:77:b8:70:
98:19:81:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsiiNvQcuzN07oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
YjVkYTJkNmEtNmRmMy00MDA5LWI3NDctOTM1YTdiY2NmN2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QHhVhGLY50SGfDqOYfhyPcwct6sZ4wApVxz
bJzp/26ean47d1rnnPlG7Hu4mnMPRTyDUH6bEAhdtDHWRqyjdlpdzEcMbR54bADW
bjKJLW8r+1VrfLTaOVysoffnZ6Bc7OWzeRcDX+Xk22x9pmTwLo0pqya6WvMecrRL
jHeBEvxn7LeeODg/WvE6G3OICQCpDElM+6vjQtFcHA1hQMzzwQPq3EnJB3pKDfX1
eUNrHJ/J/QuHJ+8xpAQ8lpRllC9VALuLcMGCCoieW0v9f8c1Bvxly2a0Q9KUInVY
T6tOwL4lQUQyN7ZjfQ04SIaRthLODIl8OgzXFmBQjUuU4aVmyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHm5PXLyr3SLPzzLQuGFDRF0+3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWI2NWUyMDYtODQ5Yy0z
Y2YxLWE2ZTAtNzI2NTExNGI3YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD91CKL+/gqGo2fVc4PzWS/q7nCZirwXYeRsp7Amv+Sh8ZcCxWCGmT7B
Q8FSmgZJpvrSVDKpX6Idu0BV0jqImZQf8DvrwpGk1T9XD0HakdDBkyY+/rpen3bJ
OebsU79ypWH7hPAVr3dsK4lUUYqMpL4mbHZ9sJLfYS60dBOK83s9LeiVN49HKCAH
UwUivGrImnbmo5+7V2lGhHfF3/geHF6ulsKZTkMSVR8dAlGxdrZJNF9iRxteOo4B
UM0RfjvNeZyYCUMONAK2wlEhWcyMg9gWiGFtovl/IAiRnshKyNjv5iLB6f9lCzUh
gaxm6uvEsvYBkiLBLFl/Jne4cJgZgQA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:37 2025 by rpki-client