Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa
File: 2b3279f2-fad4-3ca8-b7db-21db2208a819.roa (raw, json)
Hash identifier: Oqxlk4SxE59+BZThaSaoE3WMhfiNiMEtpzCEVGrl7ME=
Subject key identifier: 88:2F:E5:95:E3:00:F9:72:45:FE:D0:7D:58:36:96:A7:99:13:F7:1F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C4D6CA73D14261E19080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.20.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c4:d6:ca:73:d1:42:61:e1:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=8fb2b0ec-ee8d-4084-8620-1c2f2992ff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:33:3e:df:ec:e8:aa:fa:9b:f8:37:e7:8c:
90:a0:59:18:81:e9:c1:79:79:60:b8:3d:35:43:27:
7d:9a:ab:ac:99:70:00:f8:df:d4:07:1b:63:30:ee:
db:c3:98:6c:af:ef:59:f9:3f:cf:4c:01:2a:c2:9d:
ca:6d:42:e3:07:10:f2:0c:7e:6e:b7:ea:a8:58:65:
91:a0:6e:50:fc:55:dd:8d:1b:83:49:3e:b9:6b:df:
a8:88:0a:34:f8:5a:f2:de:0a:47:d6:e9:c0:c1:d0:
4e:1b:3f:90:7c:7f:de:49:b4:93:67:7a:bc:30:e3:
cf:80:d3:af:65:c6:00:95:64:5b:51:f6:5d:ee:04:
5d:5b:d8:60:30:6f:3c:85:0c:f7:f1:4c:fa:2c:24:
bd:97:6a:5f:0b:35:95:84:1c:1e:c3:61:6e:2c:b0:
5f:51:84:35:41:0b:19:19:ef:84:35:80:c2:4f:b9:
fd:36:e6:7a:a4:f8:f8:db:ef:84:f0:64:9e:a4:0c:
33:05:f4:ab:5e:07:02:25:8c:84:08:99:36:db:72:
ac:ac:18:5d:7b:10:ee:9c:c7:f9:18:89:06:02:b7:
01:16:98:09:1e:a1:88:e4:b4:22:93:81:80:36:95:
31:5b:15:52:cc:61:6d:f9:62:1f:d0:eb:11:6e:03:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:E5:95:E3:00:F9:72:45:FE:D0:7D:58:36:96:A7:99:13:F7:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b3279f2-fad4-3ca8-b7db-21db2208a819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:68:9c:9d:15:f2:0e:ca:81:00:bf:c6:5b:81:98:5f:98:b4:
0a:ae:98:52:ea:9c:f6:41:f7:f7:da:31:e4:63:39:22:94:4c:
b8:7e:93:c1:bc:36:09:fd:9e:5d:14:1a:a8:93:8d:a4:05:ec:
21:de:6c:e8:b7:34:42:c4:f7:d9:bb:9b:24:d6:4c:aa:ad:7f:
d2:cb:6f:87:52:c8:62:e3:d0:46:3f:7f:12:35:98:7e:0b:34:
76:9e:2e:76:df:e4:25:55:1d:69:63:65:cd:03:39:69:53:f7:
49:37:62:60:73:7a:42:b1:59:2c:a2:8b:cd:94:02:bb:73:a6:
c4:fb:db:7a:e6:38:ee:f8:5e:ad:70:d3:9b:16:f7:35:4e:a1:
62:5b:c9:88:fc:36:c7:89:93:2f:85:d4:75:f8:4b:44:2b:d0:
36:5f:90:25:0d:03:1c:89:b0:78:48:23:f3:a3:48:a2:8e:91:
e2:74:47:22:2d:c3:c5:a9:c8:f4:0f:2d:8f:cf:51:bf:0e:50:
ab:14:77:e9:ae:f1:e1:fc:20:d5:d0:f3:04:8a:9e:c4:61:75:
fd:de:ad:8e:62:6d:a6:61:79:92:ea:55:b4:b7:b3:e0:02:22:
a8:0e:33:14:7a:10:2f:93:83:06:47:b4:49:a5:0f:70:f7:fd:
3f:8a:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:00 2025 by rpki-client