Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb37157d-62dc-35e5-bf2b-a7a027fbb850.roa
File: bb37157d-62dc-35e5-bf2b-a7a027fbb850.roa (raw, json)
Hash identifier: GdVj8paEk2WG/ddkbsniNgaOBsaR4QgFxrxrmwjyU/Q=
Subject key identifier: DA:EA:6B:71:8A:05:2F:A3:13:26:53:B9:A6:D4:5D:DD:1D:12:9C:EC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBB67066953B8241D00548
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb37157d-62dc-35e5-bf2b-a7a027fbb850.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.196.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b6:70:66:95:3b:82:41:d0:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=43593306-7baf-443c-bfee-ffec4ea85c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:b3:d6:aa:43:c2:b2:50:35:c7:00:b9:c5:
6c:c2:7b:6d:ea:1f:bc:83:13:8d:7d:00:bf:85:c8:
ff:cf:8d:4c:00:70:e9:48:9f:36:d5:4a:76:d4:37:
41:bd:cb:c4:67:fd:b6:fe:6e:e1:ed:f0:98:86:7e:
a8:8d:85:a8:36:b5:28:11:a1:10:cc:61:5a:2b:34:
19:64:8f:ce:b9:9a:da:a4:b2:58:d3:57:f5:bb:9a:
5b:ea:14:13:09:0c:bf:d9:73:a8:a2:a9:2e:19:89:
1c:8f:83:a7:33:57:ff:8b:e3:b3:09:20:fd:7b:31:
92:22:ce:78:c0:69:e4:a8:88:78:fd:fb:3e:0a:f3:
c4:14:73:72:5e:94:11:9b:38:d3:90:17:29:ca:3f:
e6:db:2b:dc:2d:2a:cc:2f:94:61:47:f5:8b:88:0a:
2f:8a:fb:7f:6f:34:ff:e2:c1:b4:57:a4:1c:57:bb:
ab:d3:4c:d2:15:47:45:9d:c3:99:11:76:fc:34:79:
a0:89:d0:29:e3:36:ef:c2:4a:c6:25:88:b8:5e:d7:
cf:a8:93:08:fe:7e:b8:fd:89:70:65:80:0a:20:58:
b6:77:ae:72:7c:6e:a1:7a:32:4c:d9:b8:41:b8:71:
8c:5d:b4:f5:ab:52:e0:b9:de:d7:06:eb:51:3e:d3:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:6B:71:8A:05:2F:A3:13:26:53:B9:A6:D4:5D:DD:1D:12:9C:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb37157d-62dc-35e5-bf2b-a7a027fbb850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:48:24:7c:91:96:8e:72:cb:2c:a4:60:3f:2d:55:f6:59:1b:
52:27:9b:73:a6:73:85:7d:97:ba:4f:9b:54:eb:ee:ec:d7:2e:
9a:3e:55:d6:d7:e0:f4:85:8c:7b:fa:7c:24:69:f0:fe:f3:3a:
18:f9:8f:0f:eb:10:a5:a6:30:82:34:92:94:dc:a8:b0:80:da:
e7:b7:7a:52:37:a6:25:cf:bc:60:70:44:68:15:30:e6:bb:6f:
ae:34:da:d2:11:35:16:5d:62:72:46:b8:21:4d:ae:64:95:64:
a9:07:9c:72:12:f9:9c:8d:73:c5:5a:05:6d:fb:90:41:b0:88:
5e:2c:d0:a9:2c:39:dd:c6:c4:22:82:08:7f:22:f5:c3:52:76:
94:85:90:82:94:ae:87:02:7a:c8:ec:bd:b3:c8:05:68:79:4f:
2e:05:d6:d5:e4:0d:8c:7f:b3:07:f1:be:20:90:8e:23:94:df:
18:91:4c:c6:97:96:f4:fb:20:0e:4a:8d:3b:fe:d8:f1:18:8e:
df:a6:33:c8:ba:81:6e:b5:dd:08:39:9e:c9:d6:1d:a4:e8:6d:
46:60:dc:ae:de:e6:d7:52:f0:56:1d:7c:3d:8d:f0:90:b6:73:
1b:27:e8:77:d3:57:66:de:46:7d:36:6d:94:93:c6:93:9c:a4:
8c:3a:58:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67ZwZpU7gkHQBUgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NDM1OTMzMDYtN2JhZi00NDNjLWJmZWUtZmZlYzRlYTg1YzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Wz1qpDwrJQNccAucVswntt6h+8gxONfQC/
hcj/z41MAHDpSJ821Up21DdBvcvEZ/22/m7h7fCYhn6ojYWoNrUoEaEQzGFaKzQZ
ZI/OuZrapLJY01f1u5pb6hQTCQy/2XOooqkuGYkcj4OnM1f/i+OzCSD9ezGSIs54
wGnkqIh4/fs+CvPEFHNyXpQRmzjTkBcpyj/m2yvcLSrML5RhR/WLiAovivt/bzT/
4sG0V6QcV7ur00zSFUdFncOZEXb8NHmgidAp4zbvwkrGJYi4XtfPqJMI/n64/Ylw
ZYAKIFi2d65yfG6hejJM2bhBuHGMXbT1q1Lgud7XButRPtOkLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrqa3GKBS+jEyZTuabUXd0dEpzsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmIzNzE1N2QtNjJkYy0z
NWU1LWJmMmItYTdhMDI3ZmJiODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1IJHyRlo5yyyykYD8tVfZZG1Inm3Omc4V9l7pPm1Tr7uzXLpo+VdbX
4PSFjHv6fCRp8P7zOhj5jw/rEKWmMII0kpTcqLCA2ue3elI3piXPvGBwRGgVMOa7
b6402tIRNRZdYnJGuCFNrmSVZKkHnHIS+ZyNc8VaBW37kEGwiF4s0KksOd3GxCKC
CH8i9cNSdpSFkIKUrocCesjsvbPIBWh5Ty4F1tXkDYx/swfxviCQjiOU3xiRTMaX
lvT7IA5KjTv+2PEYjt+mM8i6gW613Qg5nsnWHaTobUZg3K7e5tdS8FYdfD2N8JC2
cxsn6HfTV2beRn02bZSTxpOcpIw6WFU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:24 2025 by rpki-client