Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa
File: 1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa (raw, json)
Hash identifier: V4GBnpSjv81L5RfUqo0PAlKLWmc9bIBprKefc4DSnrU=
Subject key identifier: 3A:31:D2:55:A2:2E:C1:D2:1E:99:C9:C9:D4:DE:B3:1E:8A:75:5A:E3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C50E086C112EF97A36A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.20.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c5:0e:08:6c:11:2e:f9:7a:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=f0d39e1d-6f02-4450-815d-ae1833ada6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:56:9c:3d:89:2d:cf:fe:7f:12:18:fe:8b:
1e:7b:20:1b:0d:2e:a6:85:dc:8f:c9:20:8e:9a:75:
09:f1:ef:00:fc:a2:70:e6:e4:b1:09:f1:3d:1e:e1:
79:68:6a:6f:ad:c3:10:8b:b0:98:9d:47:0b:8a:fe:
d8:76:5d:96:8b:40:fc:67:81:57:7a:fe:d7:21:96:
db:2f:5a:dc:96:42:0e:90:e7:3d:51:e8:f1:7a:eb:
a8:b7:b5:b0:1b:21:82:0b:92:a5:4e:c9:f9:2f:90:
d2:ac:7a:15:56:85:8f:e5:85:d7:05:27:28:d3:b6:
26:5a:c9:69:48:20:b2:60:77:b4:68:bd:61:98:3e:
8a:68:c9:1b:b6:f0:c2:aa:38:ff:08:bd:d0:ef:ab:
43:75:dd:b4:6e:d5:5e:f6:7f:f8:4e:d9:e1:a9:7b:
37:14:94:53:4f:fb:e3:79:d5:a8:4f:53:38:ad:78:
c5:e1:2c:23:d1:d4:e8:ef:50:3e:4e:66:b1:71:ec:
7a:99:68:25:09:40:66:30:ec:ed:01:7a:21:d1:71:
0e:2f:a9:6d:49:87:89:fa:b5:72:a9:03:a1:47:12:
af:d0:f6:98:3f:09:45:24:5b:d9:05:33:e3:0e:90:
6f:c9:4e:5b:62:e8:1c:5a:db:0b:66:8b:7b:55:83:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:D2:55:A2:2E:C1:D2:1E:99:C9:C9:D4:DE:B3:1E:8A:75:5A:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c8edd80-61a2-32d9-a0c7-a40c77d60599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:db:23:b7:63:3d:0b:d4:ba:1a:00:e8:85:ac:79:97:19:a8:
4d:d8:51:48:fd:0b:f5:86:c1:eb:0c:6d:11:8c:11:5b:7e:58:
6e:7c:e3:bd:a9:cc:79:1e:a9:18:44:82:c4:0e:a3:60:c9:cd:
36:80:fb:1d:56:02:ae:41:6a:dd:c3:02:a0:44:b6:e6:9f:2a:
17:8b:51:e0:d5:1e:aa:2d:cc:25:b9:d2:e4:02:96:72:ba:86:
35:46:14:a5:98:ba:0d:d3:84:29:5f:bb:7d:cb:37:b1:f7:c3:
95:a1:49:c4:60:0c:a2:ad:4f:1f:28:78:d8:58:7a:26:bc:64:
8e:5b:20:64:07:bf:63:08:de:33:45:58:65:03:55:7a:17:f7:
4c:59:d0:55:1f:0e:2f:d5:19:71:e7:37:d1:bc:e5:32:7c:93:
48:1e:07:2a:b8:66:1f:d5:83:e1:cf:6a:97:41:ad:90:28:1f:
4b:d1:bc:fd:81:47:95:54:c7:76:fa:99:38:ff:96:1a:f9:da:
be:d5:a6:75:5d:6d:eb:0f:1f:46:87:86:fb:9d:9c:23:ce:d1:
e9:93:d0:6d:af:53:a9:6b:9e:cc:0f:d4:77:01:c3:07:a5:56:
c5:2b:31:90:36:05:b1:4d:ed:09:a8:8f:9b:27:39:66:65:2f:
34:35:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:27 2025 by rpki-client