Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cfd512d-855d-3728-a0b3-3036f207dcd1.roa
File: 2cfd512d-855d-3728-a0b3-3036f207dcd1.roa (raw, json)
Hash identifier: 7MyX/XyxAH95FKLO8Zv+EA9wvMslAUb7V/qCNeZlSSc=
Subject key identifier: C0:DF:CB:77:10:64:55:4F:8B:18:3B:DD:CD:83:8A:23:F8:8A:29:E3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C70B190EF5E99A180100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cfd512d-855d-3728-a0b3-3036f207dcd1.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.24.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c7:0b:19:0e:f5:e9:9a:18:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=c8fc5262-0d4f-4ed5-ae8e-cd29319e27b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:b3:ac:7c:7f:59:e4:7b:50:4d:78:d7:11:
29:d6:64:a7:34:92:d1:b7:a5:53:6f:b0:12:b7:8d:
83:5c:b0:7e:e3:ab:4a:8a:fd:1c:40:6d:62:a9:5a:
ca:f6:c7:c7:62:c6:b2:21:5b:02:7f:2c:c9:55:c4:
21:98:d9:aa:c0:33:89:99:1b:c7:8d:bf:3c:41:01:
e5:79:df:b5:bb:a0:b9:43:68:64:4f:9a:28:2b:4b:
11:46:52:8d:89:8f:af:cd:22:08:d3:65:da:fe:92:
49:05:08:ca:7d:7f:07:bd:ed:96:aa:ff:b3:b7:97:
d2:ef:b4:92:a1:9a:c8:1a:5f:df:69:31:fb:96:78:
7c:de:93:ff:0b:35:c9:17:ce:d5:9a:ec:35:91:4c:
fa:5a:8f:09:dd:01:01:c7:ca:67:a2:1d:f7:85:c3:
1e:ed:35:74:b9:53:0c:bb:90:7f:fa:3a:68:f8:70:
81:53:1e:ea:5e:b3:d4:ea:38:d6:cf:e5:66:29:a5:
f3:9d:80:37:f4:31:ae:2e:a1:96:07:76:dd:5a:ba:
25:08:bd:62:1a:72:02:65:2e:7b:db:4e:6f:e6:1e:
6c:4e:03:2b:d5:9d:5f:5d:e5:d4:1d:b8:72:63:e5:
d8:59:f7:33:8f:0e:de:20:d6:23:36:4b:2a:88:16:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:CB:77:10:64:55:4F:8B:18:3B:DD:CD:83:8A:23:F8:8A:29:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cfd512d-855d-3728-a0b3-3036f207dcd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.24.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:6a:0d:ed:01:5c:65:e9:c3:3e:56:5c:05:6b:51:1a:de:21:
98:1e:60:28:aa:12:80:d7:6e:34:94:f7:1f:14:ec:22:ac:f4:
e3:10:4d:02:d3:80:9d:e7:3c:69:01:6a:37:b2:f2:78:82:39:
0b:d0:29:c0:e3:9b:fb:5c:8f:3b:33:90:73:f1:a4:a5:d4:bb:
68:e6:4b:93:ec:3f:bd:ca:bb:0a:f2:bd:6b:c5:50:bf:5d:d8:
a4:a4:8a:0c:af:57:d5:3c:70:54:2f:4f:65:3d:74:23:b1:45:
d2:a9:a1:2d:c8:a7:d3:bc:20:f9:84:f9:a3:e2:e1:f3:8d:34:
9b:73:a6:cd:d3:7f:00:63:10:f2:cf:af:50:05:f7:23:a9:5d:
d7:ca:85:9b:b8:3e:0b:79:e8:c8:41:25:f0:f2:67:e8:e2:a2:
95:b3:e7:61:08:34:8b:53:4b:69:15:a2:28:6d:b2:c6:3a:1a:
4f:b2:c3:c3:6b:bc:a8:78:ca:37:1a:dc:99:d5:7c:77:5e:2c:
bb:d2:b1:bf:fb:a3:6e:22:1c:87:0d:73:a4:29:14:38:4b:68:
e7:c4:94:f9:cc:2d:05:ee:d1:f0:84:b1:28:07:28:d5:9e:5a:
be:41:6b:6e:e0:2b:0a:7b:ea:17:b3:fa:13:4f:e3:e4:fd:32:
07:5f:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:37 2025 by rpki-client