
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa
File: 3b01818f-feec-3c22-884b-12db49054558.roa (raw, json)
Hash identifier: K5RmdOzwqIgM+aayzhbWekGVKcyDmPHGVbrDImzmOhI=
Subject key identifier: 81:C2:3A:45:56:0F:5F:C0:CD:78:C1:48:14:08:D5:24:79:64:74:53
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C5F60E376262BBD068A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.21.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c5:f6:0e:37:62:62:bb:d0:68:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=613c64f3-4134-4351-ba74-986d4e6dee9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:cd:84:d3:3d:be:3b:2e:bb:dc:ab:f0:b0:
8c:c0:39:22:51:6d:eb:de:da:e8:18:cc:ed:5b:af:
c6:e2:6f:35:15:af:4b:df:53:7c:33:bb:0c:e0:6c:
ce:c4:39:60:3f:3b:8b:e5:17:aa:ac:0e:7a:db:26:
12:1a:cd:6b:f6:74:3e:ed:aa:94:4e:cc:c7:c6:c4:
7d:06:26:c1:3a:da:62:f2:5b:6d:5c:c6:39:3c:f4:
9d:94:5c:2c:ef:2d:af:62:02:dc:35:5c:ce:59:d2:
ff:f4:fe:8a:4e:52:c2:f3:4f:7c:9c:74:da:8e:6a:
4b:a5:9e:a8:32:75:bf:1f:ca:fc:58:57:7c:c7:ca:
3c:e5:cc:f4:3c:e6:25:79:46:f5:68:a6:b3:57:b2:
43:af:40:ae:12:db:dc:b9:18:a6:de:01:10:57:84:
27:f3:87:cb:3a:96:9a:9b:0e:75:c7:e2:31:56:89:
34:d4:f3:1c:d1:f5:ab:6b:a6:be:8f:fd:66:df:c0:
d4:cd:75:3b:bf:1a:c8:c2:02:46:09:58:69:19:8c:
ba:8f:48:28:5c:ae:6e:98:73:06:b5:f3:74:96:aa:
c2:b0:43:68:fa:65:42:82:61:3c:ae:94:69:b7:b0:
a2:34:92:86:4b:d4:3d:e2:6e:ea:ce:ad:b1:8c:bc:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:3A:45:56:0F:5F:C0:CD:78:C1:48:14:08:D5:24:79:64:74:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3b01818f-feec-3c22-884b-12db49054558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:b7:9e:87:91:b0:5c:b1:ec:2d:75:27:70:6e:ca:c0:be:e8:
5a:42:bb:ae:a4:7d:83:ce:01:51:95:b5:6e:6c:1e:79:d0:09:
3f:96:52:6a:94:53:b9:b6:57:bc:f7:f9:bf:8f:eb:16:7c:fc:
96:d1:f0:c7:00:a2:41:17:04:61:87:81:f1:c5:d1:fa:d8:3b:
be:9f:f2:9e:9d:52:17:d8:c4:31:c3:02:86:2a:bc:34:b6:a4:
b7:68:01:57:20:36:52:9b:79:ff:2f:5d:08:5f:a4:2f:db:c5:
e6:91:6e:1d:94:70:be:6e:a1:7c:0d:1b:f7:e2:1d:b2:d8:49:
07:03:66:a2:35:63:33:dd:3b:47:99:a3:92:e2:3f:c4:1b:bf:
57:bf:33:2c:3b:37:ae:48:c4:88:23:38:c8:d2:a9:8f:d0:01:
00:42:e7:35:45:cf:d5:33:c4:bc:65:52:e6:72:e4:05:59:4a:
40:3d:44:32:4a:c4:6e:7a:a4:28:a8:f3:df:3a:8a:82:d6:21:
72:7f:60:f9:26:6a:ff:ab:ea:1e:69:b9:ae:7a:31:b3:56:90:
bb:c7:5e:0c:0e:8f:15:96:a2:26:87:9c:75:f7:ad:1d:9a:48:
a9:2d:42:85:12:d5:90:b8:61:ce:05:76:c4:0c:a0:f8:e7:bf:
1a:05:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:22 2025 by rpki-client