Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa
File: 0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa (raw, json)
Hash identifier: yIfVF549mTJ+ZMmPtNTtniCUBhVz+nz2kAQzJaCbE6U=
Subject key identifier: AD:3C:CA:BF:42:F6:03:E1:95:D8:46:F4:DA:01:FF:B3:D8:8D:F2:36
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C2545FA2FEB0BFCCBF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.18.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c2:54:5f:a2:fe:b0:bf:cc:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=27876263-28f4-4261-89fc-dffe3fd4cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:0d:1d:52:5f:15:7a:04:e4:d6:6c:12:dd:
b6:fd:4c:3b:46:ff:cb:94:50:83:65:f0:46:1c:d8:
92:d6:5d:03:4f:be:6b:45:1c:42:25:77:d5:f2:90:
b9:95:67:96:6a:27:d8:d7:7a:e8:2e:fb:f1:48:22:
59:00:1a:39:30:ed:4c:19:95:44:b3:01:44:96:80:
ee:19:bb:33:b2:91:ed:77:90:af:51:68:22:8d:21:
38:a7:55:25:3e:b8:8f:50:f8:d9:bd:6a:9a:33:af:
e7:cf:44:c6:08:85:04:7e:b8:90:df:cd:42:3e:5c:
a6:54:01:08:ca:e1:26:48:e3:65:40:f2:eb:df:ab:
2b:6b:bc:29:3e:9c:7a:4a:79:57:ef:fe:64:ea:6f:
47:fc:da:3b:37:77:af:04:72:9e:06:a4:30:36:e5:
bc:e8:8a:35:5d:fe:d7:2c:c7:b3:e0:ec:be:07:35:
22:11:80:a1:b9:3f:9b:97:3b:02:e1:a9:40:61:42:
34:12:3f:3d:8c:cd:ae:a6:52:02:66:c8:d3:43:fe:
9d:31:e5:ed:3f:ca:b4:b7:b2:8e:fd:c2:b6:16:f1:
51:71:04:d2:ec:f2:0e:8a:56:10:26:ac:3a:f9:c9:
06:c2:31:eb:9f:a7:b5:c9:f4:1a:ff:21:94:a4:fd:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:CA:BF:42:F6:03:E1:95:D8:46:F4:DA:01:FF:B3:D8:8D:F2:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fa:c7:93:54:29:fd:7e:a6:bf:cf:4a:ae:97:b4:89:89:37:
c9:a8:c6:c8:cd:5a:fe:f3:fc:f2:ae:bc:f8:0e:44:8b:f2:34:
ff:99:fa:dd:f9:d8:94:71:38:14:85:58:0c:cd:2b:c7:d9:19:
e4:89:54:6a:5e:ff:88:c2:5d:b7:ca:09:c2:cb:2c:fc:c2:9f:
1f:95:56:ee:81:29:d6:d8:6e:b4:df:68:45:ae:8d:ae:5c:44:
95:01:19:1f:dc:09:d3:95:45:f3:c5:90:f8:fa:dc:1d:6d:74:
b7:97:76:de:01:17:0f:59:6b:b0:52:7a:5f:c9:04:d7:ea:86:
52:04:55:ea:b5:71:63:e7:41:d3:02:6e:e0:14:b1:e5:f5:2e:
b0:f4:e5:b7:46:43:3d:73:73:fc:d2:76:80:3d:dd:0b:2b:1d:
0a:82:e6:14:7a:20:19:b0:87:98:ba:ce:8c:a3:3f:ce:6d:37:
16:f5:b4:e2:46:ef:43:7e:55:d2:8f:5b:ce:d9:29:7c:3f:49:
8d:5b:ad:6c:9e:ca:b9:2f:3d:87:2c:d8:48:3c:c4:de:f0:d1:
bb:56:7f:cc:e1:6b:50:d5:34:96:7d:1c:27:b4:b8:b5:f5:1d:
00:b9:42:fe:2e:40:40:af:15:45:9d:f1:64:6d:20:1b:f0:40:
d6:b6:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:58 2025 by rpki-client