Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json)
Hash identifier: HwkZmYpW2mgSbclIdwldBQqtHhvwsqnZ7Yp+qjkbtKg=
Subject key identifier: 8F:B3:AB:87:5E:13:E5:58:A8:A9:02:0D:F2:FC:AC:B7:60:6C:99:69
Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Certificate serial: 010D0C9F4328584894A5E2DAF74D5EC196F387E0
Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 9712
IP address blocks: 104.251.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e2:da:f7:4d:5e:c1:96:f3:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=9e0bcf91-ebc1-4f41-b366-c5b3cc1c86ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:67:1c:ab:dd:2b:98:85:8f:ac:95:19:c4:
c0:33:03:2c:3d:f1:21:c6:58:0c:3b:35:e3:b9:15:
b5:b6:d1:2e:de:16:6e:5d:9d:8b:b4:3b:58:dc:3b:
ee:e7:16:a5:66:98:ff:f9:68:82:8d:81:fb:a6:2f:
55:50:fd:86:1d:86:5e:e3:66:bb:0e:cf:00:6b:33:
f1:2e:11:dd:c6:bc:be:74:27:1e:32:d9:ee:f3:80:
31:ce:fd:74:a8:50:41:cf:e9:53:82:e8:09:fc:da:
f9:96:4f:c9:fd:41:10:93:d7:8c:f1:6d:54:f6:92:
8f:4d:d8:b8:3b:d4:e5:24:75:1d:9c:e1:31:a9:81:
12:c2:ab:c0:bf:cc:14:ea:28:5f:8e:5a:7f:c1:2f:
21:3f:c5:8b:c8:23:36:1e:f0:9c:0f:bd:73:df:05:
ca:0b:f0:dc:57:8b:4b:e3:6e:ee:98:e3:e2:88:c8:
70:b4:04:4c:22:bb:8e:13:44:c5:b3:74:05:aa:a7:
52:d0:ce:e3:2e:8a:2d:53:16:c0:91:1b:a7:7d:be:
cb:24:ee:eb:6d:41:51:51:6a:c8:93:aa:a9:e4:5e:
0e:c7:d4:7a:f0:3c:7e:6f:d5:3b:ed:a8:03:2f:a5:
3b:c2:e5:14:48:15:15:54:86:0d:6d:3b:e9:bb:62:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:AB:87:5E:13:E5:58:A8:A9:02:0D:F2:FC:AC:B7:60:6C:99:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl
X509v3 Authority Key Identifier:
keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:48:1f:72:f3:f1:3e:c3:53:a7:c7:36:6e:7b:22:5a:44:a1:
c2:40:3d:7b:f7:87:76:2d:83:4b:35:7c:ed:61:f4:27:f2:a5:
51:07:ff:af:e2:9b:06:fb:d8:56:7c:29:4b:e4:14:a6:a2:3a:
ae:cb:ee:58:f3:79:77:09:c0:dc:92:f2:06:db:b2:76:e5:aa:
97:c3:d2:cb:95:57:c0:e3:76:b8:28:17:d0:d0:74:33:5f:f5:
a9:6f:f3:94:d3:d1:76:63:52:ff:d7:d5:38:a7:94:4c:92:29:
b8:2b:a2:c8:a7:2b:c6:05:54:a8:56:33:16:60:64:31:bb:37:
df:1c:40:67:8e:42:1a:34:8a:cb:fa:c9:a6:8f:8c:71:58:6f:
07:d7:ee:8c:6e:45:8d:f3:72:5f:53:f8:f8:51:79:e1:f1:82:
7b:7a:d2:c1:92:de:c0:b5:b6:ee:59:87:8b:f9:f9:e8:a3:0d:
57:77:c8:3f:19:84:87:f8:37:e0:47:11:46:b6:ad:97:d5:d1:
5f:be:0a:56:22:b3:43:7b:71:01:e1:d0:67:4d:e3:7d:6a:b4:
0d:4a:b8:d9:09:4e:51:fa:b8:1f:51:78:cb:56:90:c3:e6:33:
37:f7:44:7b:50:bd:1a:69:f1:f9:16:bb:75:3b:61:2f:b9:7a:
c7:2a:8b:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeLa901ewZbzh+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh
MTJhMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
OWUwYmNmOTEtZWJjMS00ZjQxLWIzNjYtYzViM2NjMWM4NmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/lnHKvdK5iFj6yVGcTAMwMsPfEhxlgMOzXj
uRW1ttEu3hZuXZ2LtDtY3Dvu5xalZpj/+WiCjYH7pi9VUP2GHYZe42a7Ds8AazPx
LhHdxry+dCceMtnu84Axzv10qFBBz+lTgugJ/Nr5lk/J/UEQk9eM8W1U9pKPTdi4
O9TlJHUdnOExqYESwqvAv8wU6ihfjlp/wS8hP8WLyCM2HvCcD71z3wXKC/DcV4tL
427umOPiiMhwtARMIruOE0TFs3QFqqdS0M7jLootUxbAkRunfb7LJO7rbUFRUWrI
k6qp5F4Ox9R68Dx+b9U77agDL6U7wuUUSBUVVIYNbTvpu2JFSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+zq4deE+VYqKkCDfL8rLdgbJlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk
ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z
MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx
NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz
YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj
ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5IH3Lz8T7DU6fHNm57IlpEocJAPXv3h3Ytg0s1fO1h9CfypVEH/6/i
mwb72FZ8KUvkFKaiOq7L7ljzeXcJwNyS8gbbsnblqpfD0suVV8DjdrgoF9DQdDNf
9alv85TT0XZjUv/X1TinlEySKbgrosinK8YFVKhWMxZgZDG7N98cQGeOQho0isv6
yaaPjHFYbwfX7oxuRY3zcl9T+PhReeHxgnt60sGS3sC1tu5Zh4v5+eijDVd3yD8Z
hIf4N+BHEUa2rZfV0V++ClYis0N7cQHh0GdN431qtA1KuNkJTlH6uB9ReMtWkMPm
Mzf3RHtQvRpp8fkWu3U7YS+5escqi9k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:21 2025 by rpki-client