Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e228152-c567-36b3-b8cd-eacf21d1ce62.roa
File: 6e228152-c567-36b3-b8cd-eacf21d1ce62.roa (raw, json)
Hash identifier: Js2jJ/d17EZFFDy4ZpV+l803aoZEU3Y20fkg6FG0LAI=
Subject key identifier: 89:D0:37:9C:59:A8:DB:A1:DD:F9:DF:7F:DB:CF:1E:CE:CD:39:C2:76
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6CFA97829AED0469BA480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e228152-c567-36b3-b8cd-eacf21d1ce62.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.29.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:cf:a9:78:29:ae:d0:46:9b:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=e5f59e2d-77de-45e0-ad0e-7c0faef556b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:65:96:83:3f:3b:a4:af:18:6e:a0:fc:0a:
ba:9b:99:fb:a7:d6:4d:ce:be:27:c5:0f:6b:91:75:
79:e9:ea:0d:d4:54:37:a5:01:a0:f3:05:af:88:9d:
f8:01:84:cb:ad:4f:8d:f5:45:bf:2d:a4:6c:0e:27:
c9:50:97:e3:08:f1:b8:2d:32:31:98:de:2b:7e:69:
29:44:7b:f0:51:8f:d2:bb:cc:c0:73:7b:97:a4:b9:
5b:6f:20:d1:30:f0:db:f6:f6:ff:97:00:50:2c:04:
e5:c7:d6:87:43:99:4f:32:4f:ad:a9:42:67:91:c0:
89:cd:f9:96:f0:71:1e:14:99:bb:5c:1a:dd:eb:7b:
9f:2c:43:05:6c:e2:05:e8:26:c0:77:b3:73:6c:5a:
cc:5c:13:96:bf:43:8f:ff:f6:c6:90:c9:c5:01:22:
30:e0:e4:78:69:45:85:9f:62:66:96:80:7c:ca:87:
45:b2:fd:7e:d2:6d:5d:f1:cb:f6:32:31:d1:3f:da:
53:01:66:67:88:57:13:63:d5:8b:b9:53:eb:ff:32:
68:6d:ed:c0:2b:20:06:f7:4c:db:f7:7d:9f:14:4d:
4c:48:62:8d:ea:01:1f:b2:cd:ed:c9:82:db:23:1c:
14:dd:e7:8c:a4:44:6c:ba:6b:31:0f:95:a8:7b:9f:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:37:9C:59:A8:DB:A1:DD:F9:DF:7F:DB:CF:1E:CE:CD:39:C2:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6e228152-c567-36b3-b8cd-eacf21d1ce62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f6:b0:4a:5d:62:a2:de:10:41:92:94:82:8e:21:3d:a4:d2:
36:d0:eb:97:bc:b3:10:2f:59:51:0b:5c:43:8e:77:8a:e5:df:
85:a8:82:1b:a3:d0:4d:ed:df:69:a9:08:8b:e1:6b:23:08:13:
25:77:0a:5e:e7:8e:64:d3:ca:4d:06:62:1f:2c:c3:f1:a7:1f:
73:8f:85:c0:b8:51:94:39:9e:ab:1a:f8:a5:1d:b4:6c:4a:ad:
97:e3:89:26:bf:52:c9:f3:47:fa:21:76:3a:4c:50:48:43:05:
4d:ca:82:f0:6a:9b:6e:9d:6f:77:2b:1e:6c:5b:c8:36:51:d8:
1f:fa:4f:91:3b:15:45:e4:32:b3:f6:16:45:a9:00:20:f1:cb:
66:33:e2:4f:84:33:39:b6:44:b7:a5:91:dd:d3:f6:03:94:4d:
93:d1:f3:45:e2:61:e4:58:80:91:a8:10:01:24:4f:5e:a2:67:
ea:c5:8e:50:88:4f:a1:5e:94:02:25:d7:35:74:df:59:1a:67:
10:2d:30:de:aa:62:ae:90:3c:37:00:b0:fb:86:0b:3e:c4:bc:
93:fe:80:88:6c:62:2a:07:66:fe:0d:2a:31:32:9c:6e:2d:b1:
5f:f6:1b:cd:b0:ff:04:09:e0:02:2a:d6:6f:c1:58:5a:5b:ac:
40:f6:27:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFts+peCmu0EabpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
ZTVmNTllMmQtNzdkZS00NWUwLWFkMGUtN2MwZmFlZjU1NmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDZlloM/O6SvGG6g/Aq6m5n7p9ZNzr4nxQ9r
kXV56eoN1FQ3pQGg8wWviJ34AYTLrU+N9UW/LaRsDifJUJfjCPG4LTIxmN4rfmkp
RHvwUY/Su8zAc3uXpLlbbyDRMPDb9vb/lwBQLATlx9aHQ5lPMk+tqUJnkcCJzfmW
8HEeFJm7XBrd63ufLEMFbOIF6CbAd7NzbFrMXBOWv0OP//bGkMnFASIw4OR4aUWF
n2JmloB8yodFsv1+0m1d8cv2MjHRP9pTAWZniFcTY9WLuVPr/zJobe3AKyAG90zb
932fFE1MSGKN6gEfss3tyYLbIxwU3eeMpERsumsxD5Woe5/ZgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInQN5xZqNuh3fnff9vPHs7NOcJ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmUyMjgxNTItYzU2Ny0z
NmIzLWI4Y2QtZWFjZjIxZDFjZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB05MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIr2sEpdYqLeEEGSlIKOIT2k0jbQ65e8sxAvWVELXEOOd4rl34Woghuj
0E3t32mpCIvhayMIEyV3Cl7njmTTyk0GYh8sw/GnH3OPhcC4UZQ5nqsa+KUdtGxK
rZfjiSa/UsnzR/ohdjpMUEhDBU3KgvBqm26db3crHmxbyDZR2B/6T5E7FUXkMrP2
FkWpACDxy2Yz4k+EMzm2RLelkd3T9gOUTZPR80XiYeRYgJGoEAEkT16iZ+rFjlCI
T6FelAIl1zV031kaZxAtMN6qYq6QPDcAsPuGCz7EvJP+gIhsYioHZv4NKjEynG4t
sV/2G82w/wQJ4AIq1m/BWFpbrED2J4k=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:35:49 2025 by rpki-client