Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa
File: f48deab7-a013-392b-a803-389dfad110a3.roa (raw, json)
Hash identifier: 2ucMo0qHOo9ixE42vasIPrHKitfo/PbN/DUCTno0BxQ=
Subject key identifier: 28:B5:71:14:28:D8:9E:60:27:0E:0C:52:2F:13:70:1C:FD:DA:1A:F6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BBF52E2D9E0E0690B4A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.16.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bb:f5:2e:2d:9e:0e:06:90:b4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=0564b772-ae8d-4a86-962a-fd906edc643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:39:d0:05:fa:4d:88:c5:09:09:08:47:42:
d6:72:03:05:f7:5e:71:fb:1f:ad:25:32:d2:41:2b:
ea:bf:91:99:70:3b:c7:70:88:74:f2:85:f7:79:35:
d4:a1:ca:09:a4:dc:99:2d:a0:58:48:8d:a9:cc:ba:
c9:19:bc:ee:a8:81:52:31:16:fb:88:3f:90:93:66:
27:c4:1e:a6:e8:08:41:a1:ef:a6:dd:50:4e:82:15:
6e:48:d5:bf:6e:8f:34:68:83:fe:1b:1a:2a:22:bc:
ee:9d:f1:b4:cf:1a:7d:80:d0:33:a5:64:db:35:11:
86:64:6c:56:be:2d:76:be:e5:96:da:2d:dd:3a:8e:
17:80:dc:58:f2:d3:b7:4f:f0:a8:b6:07:96:c4:49:
d0:a6:5e:f0:78:dc:f1:6e:f6:94:02:74:c4:79:f8:
a2:39:41:8f:b8:13:f9:c6:c8:5c:52:87:6b:6c:9f:
17:23:82:de:70:87:d0:47:a7:ac:b2:9a:a9:da:2c:
e8:b8:68:d7:7e:a1:03:ae:2e:cb:05:13:8b:6e:81:
f6:71:de:c7:ae:ba:ef:bc:34:54:8e:ac:90:a9:73:
c0:83:11:99:96:ac:e5:54:f7:4c:20:ff:8b:52:da:
cc:be:45:61:d2:84:91:52:d6:b0:bf:03:ec:fe:81:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:71:14:28:D8:9E:60:27:0E:0C:52:2F:13:70:1C:FD:DA:1A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f48deab7-a013-392b-a803-389dfad110a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:c8:59:67:c6:25:40:0d:9e:cc:6f:b9:fa:8a:61:46:10:26:
62:bf:0f:cf:35:4d:d6:c1:51:bc:18:bd:70:2e:a6:0f:d7:e7:
96:b0:c0:75:1e:cf:f4:98:b1:a3:07:45:9f:2e:08:b2:05:36:
c5:e7:35:c2:50:65:94:c7:0a:db:a5:c1:4a:42:80:22:0e:75:
de:67:b4:4c:4a:4f:c3:57:07:d5:a1:2e:5f:6a:e5:fc:c0:3e:
d8:46:33:92:ba:e0:57:18:be:85:72:7d:8f:db:01:49:4b:9b:
75:77:ed:0f:b3:46:77:31:47:78:04:4c:91:c2:d8:0f:92:00:
dd:dd:a0:be:a4:cb:7f:ea:24:75:ce:31:5d:d7:f6:f9:47:7b:
8e:32:f5:56:d8:ef:ce:51:1e:54:4f:6c:bb:20:c8:83:ec:b9:
a4:df:70:fc:25:8f:5b:3e:53:a9:8a:01:5c:42:08:57:45:e0:
47:91:14:f2:d0:5d:12:f1:73:7a:44:bb:65:1b:3e:ad:dc:45:
6a:5b:27:00:c6:e9:7a:84:d8:16:93:fb:58:d1:e1:e7:ca:28:
31:8d:ab:e1:55:98:7d:73:d6:3e:50:f2:6b:ee:ba:aa:b4:de:
d6:ce:23:cf:25:a3:cb:b8:03:c7:bb:93:2f:dd:1a:84:cd:e4:
dd:0c:5e:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrv1Li2eDgaQtKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
MDU2NGI3NzItYWU4ZC00YTg2LTk2MmEtZmQ5MDZlZGM2NDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlA50AX6TYjFCQkIR0LWcgMF915x+x+tJTLS
QSvqv5GZcDvHcIh08oX3eTXUocoJpNyZLaBYSI2pzLrJGbzuqIFSMRb7iD+Qk2Yn
xB6m6AhBoe+m3VBOghVuSNW/bo80aIP+GxoqIrzunfG0zxp9gNAzpWTbNRGGZGxW
vi12vuWW2i3dOo4XgNxY8tO3T/CotgeWxEnQpl7weNzxbvaUAnTEefiiOUGPuBP5
xshcUodrbJ8XI4LecIfQR6esspqp2izouGjXfqEDri7LBROLboH2cd7HrrrvvDRU
jqyQqXPAgxGZlqzlVPdMIP+LUtrMvkVh0oSRUtawvwPs/oEJzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi1cRQo2J5gJw4MUi8TcBz92hr2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQ4ZGVhYjctYTAxMy0z
OTJiLWE4MDMtMzg5ZGZhZDExMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbIWWfGJUANnsxvufqKYUYQJmK/D881TdbBUbwYvXAupg/X55awwHUe
z/SYsaMHRZ8uCLIFNsXnNcJQZZTHCtulwUpCgCIOdd5ntExKT8NXB9WhLl9q5fzA
PthGM5K64FcYvoVyfY/bAUlLm3V37Q+zRncxR3gETJHC2A+SAN3doL6ky3/qJHXO
MV3X9vlHe44y9VbY785RHlRPbLsgyIPsuaTfcPwlj1s+U6mKAVxCCFdF4EeRFPLQ
XRLxc3pEu2UbPq3cRWpbJwDG6XqE2BaT+1jR4efKKDGNq+FVmH1z1j5Q8mvuuqq0
3tbOI88lo8u4A8e7ky/dGoTN5N0MXl8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:06 2025 by rpki-client