Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/213d7fe7-e625-32d8-8d4e-11cf25387213.roa
File: 213d7fe7-e625-32d8-8d4e-11cf25387213.roa (raw, json)
Hash identifier: tecQwyCvvqw2+gGXbMAEoWnCL8b3HkD1ZziDIyY2rzw=
Subject key identifier: 6B:BD:15:E7:4F:67:7D:97:C3:DD:74:24:AB:18:81:4D:14:EB:CD:C1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C6B22F2347FBD0375340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/213d7fe7-e625-32d8-8d4e-11cf25387213.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.24.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c6:b2:2f:23:47:fb:d0:37:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=ddad5dfb-af51-4197-930b-303b7f554d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:66:f4:6a:62:01:b6:f0:36:b5:66:67:7f:
88:3a:66:58:06:49:d1:23:0a:96:b1:08:ad:ab:3b:
3c:67:67:d7:ef:e1:a6:4d:b1:0b:f4:e2:e4:b6:2b:
30:92:4c:82:b7:8b:b0:c8:e8:96:ce:31:3d:0e:b5:
eb:e1:34:68:c6:b5:ec:ad:7e:cd:7f:a0:87:0a:ab:
ed:4f:e8:9d:98:d8:e3:a4:45:46:d6:25:92:fd:d7:
d4:f6:4e:6c:a4:3d:3e:f9:1c:59:40:fb:e0:19:52:
87:00:1c:96:e9:c5:9a:ba:f7:1d:69:4f:19:24:11:
a3:3b:68:8f:40:1e:a2:a9:b7:63:c8:c4:25:29:1f:
5a:fa:2d:c4:a4:71:e4:3e:c2:26:e0:8c:d3:99:f7:
77:34:f6:a8:be:03:e2:ab:18:f0:70:04:42:e9:db:
fb:d7:ad:65:65:d7:81:9d:65:ef:b0:bb:82:c2:74:
33:72:fe:03:47:5c:80:cf:19:75:2c:ae:da:2e:47:
b2:44:9d:5b:c0:78:c5:b6:44:6e:2e:dd:5d:d9:91:
e8:6e:8f:e4:4f:17:c9:be:3d:6f:63:49:59:5c:ff:
59:e4:2a:65:7a:11:b1:01:21:36:35:51:d8:4e:e8:
5a:3a:e1:bc:44:1c:a7:5c:99:bf:98:94:78:f6:67:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:15:E7:4F:67:7D:97:C3:DD:74:24:AB:18:81:4D:14:EB:CD:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/213d7fe7-e625-32d8-8d4e-11cf25387213.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.24.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:c2:5b:53:dc:ba:92:a9:cd:50:d2:e8:77:36:59:a6:95:02:
e7:bc:41:4d:a4:8c:b4:b6:59:02:4c:fb:ba:3b:df:8d:33:59:
ca:64:9f:7a:1a:a9:8c:45:5a:f7:ae:15:0a:31:f2:2e:28:ff:
ec:d6:6c:55:58:7a:69:68:61:52:8b:cd:db:85:0f:3c:e8:3d:
fc:92:65:7b:cc:ee:c3:b0:4e:49:1b:1b:fb:fd:d2:63:b7:1e:
bf:cd:57:e0:5a:75:d2:61:80:a9:7d:98:af:e5:9d:9e:e7:32:
bb:a0:8d:6c:f3:85:bb:83:68:b5:df:6c:b1:d4:96:42:2d:b2:
5f:2e:ef:52:9b:eb:9a:7b:41:36:bc:f6:ee:cc:ec:c9:28:e2:
c2:48:f6:8e:9a:12:5b:67:cb:5f:a4:8a:46:54:35:f7:3f:4b:
e4:5c:ab:aa:1e:ad:c4:59:42:4f:43:9d:84:dc:17:a0:02:09:
72:84:c7:3a:c7:5f:7d:49:d9:2f:0a:77:89:bf:b3:5a:00:6b:
16:ee:a6:af:ad:95:07:66:5e:13:95:c4:5a:7d:9a:31:5b:39:
f0:e8:df:d9:87:4a:cf:21:3a:91:82:6b:49:f9:59:32:2a:12:
fe:fa:2c:74:5f:2c:e9:62:58:95:ae:a1:95:7c:f3:59:f6:bd:
f7:1a:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:46 2025 by rpki-client