Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a41608f-93f7-3c08-bb80-5c677844ee5d.roa
File: 4a41608f-93f7-3c08-bb80-5c677844ee5d.roa (raw, json)
Hash identifier: YbrwgrUF9NrfC6cYNMjyREAynPVp7GL2dkS9j1amBSM=
Subject key identifier: D2:D4:D9:97:5E:59:7C:17:8F:B5:17:A9:FF:11:26:A7:DD:61:2F:FF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BD559481F5BF489C6F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a41608f-93f7-3c08-bb80-5c677844ee5d.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.17.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bd:55:94:81:f5:bf:48:9c:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=8e88767b-c645-4458-9062-552f1b08c24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:09:7e:55:fc:cb:00:f1:e6:58:5a:74:c8:
a0:fa:9c:ae:68:1e:32:b5:13:7b:fe:11:84:5b:94:
e6:fe:3a:2a:4b:78:05:e5:d0:d0:51:ad:42:5f:2a:
c4:59:97:97:b7:ec:da:d7:ee:0d:a6:77:2b:8a:9f:
2b:d2:64:00:55:5a:06:2b:a9:bb:6a:62:fd:73:98:
95:6f:7b:63:f1:c8:fa:08:99:8d:82:59:c0:19:a2:
87:3d:d3:3e:6a:dc:9e:c6:a2:e7:ea:85:8e:e3:52:
fb:9b:38:d9:69:34:78:de:0a:64:73:9e:fd:96:a5:
12:cf:3b:11:8c:d1:f3:e6:86:aa:22:6b:9d:85:02:
8b:ec:d1:36:28:4b:df:55:eb:68:10:4c:0a:f0:e4:
69:4e:56:76:f7:57:04:7d:43:24:4d:4f:49:7d:72:
70:e9:c9:02:23:15:cc:54:05:05:5c:f8:34:2c:7a:
02:ac:30:21:bb:f8:d9:0c:28:59:29:4f:59:6e:6b:
d1:ae:2a:e6:33:22:56:39:d7:85:5a:4f:0b:b2:d2:
43:d5:fa:fa:9e:96:1f:8a:29:1f:49:62:94:a6:35:
02:73:0c:4f:ef:e6:91:11:30:4c:ce:bc:07:72:87:
59:54:95:fb:0c:1f:f0:9f:09:91:bc:a5:64:e9:51:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:D9:97:5E:59:7C:17:8F:B5:17:A9:FF:11:26:A7:DD:61:2F:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a41608f-93f7-3c08-bb80-5c677844ee5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.17.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:c9:a2:16:bf:70:39:80:ec:26:b4:fc:4d:d5:e4:06:aa:85:
a6:49:3f:21:96:a9:b2:69:77:c1:86:3e:22:61:7e:51:1b:49:
e1:e7:ba:b4:31:66:f6:94:4d:5d:d7:0f:67:60:77:b2:ff:b2:
17:5a:d2:22:cd:a7:8e:62:86:ef:6c:bf:33:8d:d2:60:9e:18:
42:52:23:7a:5c:26:90:47:c1:0d:78:4f:cd:95:a5:4c:20:a9:
fe:40:07:f1:bd:ad:3e:0f:3c:28:c1:35:2c:5d:b1:d2:77:f9:
25:be:07:f8:58:59:2b:09:25:6e:13:f8:8c:f1:28:f5:26:ea:
81:c2:8a:bd:9a:73:ae:2d:14:f4:b6:fa:7d:92:17:a1:34:3a:
18:72:32:40:57:3c:07:b7:71:fc:de:5b:3b:ea:0e:ce:76:f0:
04:17:53:94:6c:0e:05:5d:24:6c:01:f4:9a:92:c4:22:7a:48:
8a:b5:0a:87:99:94:35:2a:2b:02:d5:51:db:d4:44:7f:d8:29:
a4:b9:5e:9a:6e:f3:2d:b5:9a:0b:4a:bd:de:3f:32:5c:8d:22:
2d:c2:09:ca:05:2f:65:be:f3:94:be:d1:12:6b:1a:b4:b3:1c:
82:69:3a:20:3c:13:61:af:fa:40:94:c1:fb:c9:e7:f2:58:ad:
a1:9e:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:45 2025 by rpki-client