Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
File: 523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa (raw, json)
Hash identifier: EjlMYMfn95OBdug/Bh/57d5BRtelmmQSJl/absr8Na8=
Subject key identifier: B6:1E:85:BD:93:EB:C7:97:D4:CB:06:F7:EC:1F:F5:AD:DB:41:8B:22
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BD654855AFD0A32648C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.18.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bd:65:48:55:af:d0:a3:26:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=76e6deb6-d428-41eb-8081-5af8635a618a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:c2:ac:d7:83:94:cb:f8:5c:13:dd:0d:f8:
f1:08:d6:da:fb:d0:d1:09:a4:04:3c:fe:36:cc:f4:
69:e4:c2:61:f5:56:df:6d:ec:b3:c6:93:e8:7b:47:
e6:44:29:65:cb:8d:36:7e:aa:71:b4:89:bf:27:39:
ad:0f:7a:c6:01:93:66:7a:e3:00:a6:28:cf:8b:20:
2e:ed:87:ae:d6:63:39:f4:5a:8d:0a:53:48:c1:c8:
0e:fa:60:7d:d9:5a:fa:d6:9b:19:22:7b:1b:5a:c4:
c6:96:ce:57:03:7e:21:91:d3:f5:59:d6:20:86:6c:
60:68:34:b6:f3:6e:15:55:d7:6b:6b:b1:d1:88:26:
c6:4b:3b:b1:df:e7:a1:13:e8:c6:79:28:7c:6b:87:
d2:ae:a4:98:6a:30:52:70:3f:0a:f0:29:bf:70:d8:
cf:5a:e4:2b:e4:50:4c:45:96:8b:31:c3:06:92:ef:
93:ab:09:ce:f5:4f:6b:53:75:50:bb:9c:28:ef:16:
ab:48:66:bc:b0:ef:62:6c:2f:9d:16:92:06:5e:55:
ed:3a:b5:c5:11:54:9e:fb:2a:1a:a0:df:72:6d:89:
5d:2a:e9:65:de:8a:c2:2e:38:a6:f4:6d:66:dd:ca:
63:87:bd:c1:75:2e:d3:85:d7:f8:96:96:62:8b:15:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:85:BD:93:EB:C7:97:D4:CB:06:F7:EC:1F:F5:AD:DB:41:8B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/523e6fe7-78f7-36c3-82f3-41c4b825fd01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:32:5b:a7:e4:31:17:7b:f9:8a:99:5e:2e:74:e0:09:17:f1:
ef:30:cf:0e:00:2e:79:74:d9:d4:da:f0:4b:ab:39:29:7b:14:
37:b0:4f:15:88:4b:54:d9:4b:90:77:e3:c7:6f:43:41:3a:65:
31:b6:aa:f0:8c:a0:26:56:9a:2e:df:21:87:66:eb:5b:2c:27:
1e:97:8d:3e:4c:a9:e2:f5:c6:43:40:ac:81:4d:ee:3b:58:5e:
dd:bf:f8:9e:14:53:7a:16:d4:a9:ff:d0:e2:4c:c0:fe:69:6d:
ba:0d:47:94:10:5b:22:ee:b3:bb:36:e3:43:d6:fe:9d:06:96:
63:3f:88:39:ee:df:ee:c3:21:29:70:7a:7e:34:a2:a8:3c:2b:
c5:bd:5f:5e:1c:00:78:53:e9:db:83:d0:71:e4:b6:e7:5e:13:
65:f2:cf:0f:c9:9e:08:6d:23:a3:2d:28:4e:bf:61:a3:a1:85:
ad:ec:16:34:92:31:b2:65:3d:b3:12:fd:60:0b:f3:8e:fc:42:
ac:95:3e:e2:53:93:93:45:88:db:4d:a1:17:a3:f8:5d:3c:da:
04:7e:fd:56:41:18:20:9f:3a:d4:8c:ba:40:80:64:b1:45:54:
ea:2b:de:64:36:8c:b5:58:ac:e8:d1:7b:3b:d9:fc:b4:cf:e2:
87:ac:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:16 2025 by rpki-client