Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa
File: a0b3d676-8d81-3776-9084-78bd06aa5966.roa (raw, json)
Hash identifier: EGtGKGhoYQ5AyfbElRZhoPpjJK4bXS8y0tC5rOutR/Q=
Subject key identifier: 41:85:F2:7D:DE:00:9A:71:8A:4C:18:DA:4C:BF:DB:7B:8F:AB:DC:9B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BBB0E8FF4D8222B45C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.16.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bb:b0:e8:ff:4d:82:22:b4:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=848fa7e8-c5d5-43e3-9ccf-9b9b70058fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:f5:26:6b:50:d7:ec:8e:7a:8b:36:4a:da:
a1:85:35:16:d3:53:a5:21:e8:f9:02:c5:2e:dd:95:
7d:a4:ac:c4:9e:0c:76:a9:1c:23:9c:be:48:fd:b9:
75:2e:63:8c:11:5b:34:9f:d4:4f:b0:0c:bd:41:81:
66:8d:7a:49:cd:db:d3:e2:fe:dd:97:f6:b4:af:92:
1a:32:1c:62:b4:41:74:b1:b3:ed:3e:47:22:f1:b9:
7c:53:c2:fd:df:db:b3:5c:35:a8:38:40:5f:b0:4e:
67:8c:ef:3d:7a:5c:bc:5a:a7:8a:2b:b4:13:50:19:
da:bf:07:2a:12:66:00:3b:ea:e4:83:ab:95:3c:14:
5b:be:0b:3e:26:97:3a:0c:50:51:d7:95:d8:2b:59:
38:ee:20:46:0a:e0:4b:9d:fd:d6:c3:7e:29:68:bd:
e2:1a:38:43:c9:b0:0c:30:4c:73:ed:18:de:10:c2:
9c:66:9a:4d:42:20:49:1c:bb:f9:5a:05:6e:bf:39:
51:fe:8d:b7:ba:da:99:32:dd:ed:27:be:4c:24:1e:
12:f9:73:72:a5:98:1f:5f:97:e1:25:ff:7f:68:d5:
84:aa:e4:7b:82:52:df:0b:66:63:3f:a1:3e:1d:8a:
16:ea:5e:53:fc:20:21:2c:33:6a:f9:63:ed:73:8b:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:85:F2:7D:DE:00:9A:71:8A:4C:18:DA:4C:BF:DB:7B:8F:AB:DC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0b3d676-8d81-3776-9084-78bd06aa5966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:20:0b:d9:45:b4:91:bf:e6:f8:97:f2:7d:be:03:44:33:91:
b4:3c:36:e2:e2:e0:58:0f:91:af:c2:be:22:f1:42:c6:98:3f:
ae:c0:31:24:45:d4:21:d6:bc:1f:87:7e:a3:59:03:e6:4c:3d:
b7:e1:6e:31:75:b4:d5:57:6f:5f:8c:b9:0a:87:c0:9b:e0:4b:
82:e5:be:6c:48:cd:5f:16:57:0b:d5:1d:4e:96:10:e1:e2:3c:
bd:3d:e5:69:76:67:b7:d9:a3:22:de:11:77:2e:7b:af:a2:e8:
76:e4:60:7d:05:f6:f0:04:59:5c:e4:d0:a3:50:ac:35:fc:22:
39:75:8e:49:55:d7:6b:a7:52:5b:4d:56:f5:b8:bc:46:5f:d3:
bb:81:8e:93:79:3e:49:34:84:f4:6b:53:be:8d:f0:f6:07:73:
a5:ae:b0:d6:4d:ee:03:15:e6:5b:38:ff:86:77:2b:87:09:b7:
91:51:ba:ff:d5:7e:bb:9a:6f:8d:32:d9:3d:82:02:01:be:b5:
f3:38:78:66:b3:40:d0:8f:11:6d:b6:82:11:79:e9:41:12:57:
2e:db:a2:96:06:34:b2:fc:6c:11:10:fd:79:a7:6c:c2:eb:41:
1b:ae:4d:08:9a:cd:ea:ab:9c:47:09:20:b5:87:34:81:73:aa:
6b:77:09:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtruw6P9NgiK0XIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
ODQ4ZmE3ZTgtYzVkNS00M2UzLTljY2YtOWI5YjcwMDU4ZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgL1JmtQ1+yOeos2StqhhTUW01OlIej5AsUu
3ZV9pKzEngx2qRwjnL5I/bl1LmOMEVs0n9RPsAy9QYFmjXpJzdvT4v7dl/a0r5Ia
MhxitEF0sbPtPkci8bl8U8L939uzXDWoOEBfsE5njO89ely8WqeKK7QTUBnavwcq
EmYAO+rkg6uVPBRbvgs+Jpc6DFBR15XYK1k47iBGCuBLnf3Ww34paL3iGjhDybAM
MExz7RjeEMKcZppNQiBJHLv5WgVuvzlR/o23utqZMt3tJ75MJB4S+XNypZgfX5fh
Jf9/aNWEquR7glLfC2ZjP6E+HYoW6l5T/CAhLDNq+WPtc4tHQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGF8n3eAJpxikwY2ky/23uPq9ybMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTBiM2Q2NzYtOGQ4MS0z
Nzc2LTkwODQtNzhiZDA2YWE1OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4gC9lFtJG/5viX8n2+A0QzkbQ8NuLi4FgPka/CviLxQsaYP67AMSRF
1CHWvB+HfqNZA+ZMPbfhbjF1tNVXb1+MuQqHwJvgS4LlvmxIzV8WVwvVHU6WEOHi
PL095Wl2Z7fZoyLeEXcue6+i6HbkYH0F9vAEWVzk0KNQrDX8Ijl1jklV12unUltN
VvW4vEZf07uBjpN5Pkk0hPRrU76N8PYHc6WusNZN7gMV5ls4/4Z3K4cJt5FRuv/V
fruab40y2T2CAgG+tfM4eGazQNCPEW22ghF56UESVy7bopYGNLL8bBEQ/XmnbMLr
QRuuTQiazeqrnEcJILWHNIFzqmt3Ces=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:52 2025 by rpki-client