Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa
File: 5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa (raw, json)
Hash identifier: V6TyNZ0OMsqO36nqynTTLhs4ALCkJT+BrAmJGRbgf7k=
Subject key identifier: 79:23:0D:16:11:69:D0:2C:E0:67:B8:F4:A6:C3:02:32:C4:81:60:3F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C823617B3C39C58FFF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.25.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c8:23:61:7b:3c:39:c5:8f:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=e4b76708-a9e9-4135-9d9f-cc9062dab5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:55:fb:88:c5:2d:d8:45:36:2d:fb:be:76:
05:87:20:d7:9a:8e:83:3f:e5:23:c7:20:91:7c:cc:
ac:0a:f2:19:d6:c0:c3:3d:8a:65:92:4c:5a:b6:03:
c0:19:cb:89:f3:9c:a6:06:18:cc:5c:c5:f3:40:f6:
f5:de:1c:55:87:a6:13:52:da:3d:a3:4c:31:9d:f4:
f8:a9:9a:12:6d:9c:5a:bd:9a:61:32:43:29:58:92:
05:77:af:aa:24:14:5d:c6:47:29:a7:e6:f6:51:86:
23:c4:7f:a8:c1:79:2d:9b:e9:c3:78:14:9e:65:31:
d6:23:ce:b7:e5:8b:8c:5d:bf:1b:a2:22:52:b8:01:
a4:7a:cb:d0:41:b3:5c:65:3c:c8:49:5f:a0:87:92:
0f:30:3b:59:cb:33:47:97:3f:47:85:da:3f:a3:6e:
4d:91:0f:3d:40:54:e8:b1:ef:b6:5c:7e:f4:3a:3f:
8e:ee:09:8f:4e:3b:40:60:0b:a7:7e:eb:a7:66:88:
65:ea:42:d5:54:48:3f:7b:26:d2:fc:72:7f:a7:66:
25:65:a9:ca:8f:8a:fd:3f:e7:5d:54:3b:08:6b:0a:
ba:04:1f:0d:63:69:67:57:f4:d7:26:65:41:3d:7c:
f1:56:4e:ac:34:86:2e:dd:dc:75:4c:c5:02:e9:83:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:0D:16:11:69:D0:2C:E0:67:B8:F4:A6:C3:02:32:C4:81:60:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:69:0a:36:c8:0e:e3:58:42:4c:12:4a:e5:16:5c:92:1d:0f:
3a:76:2d:98:a0:82:2e:70:c0:65:d4:9f:ca:6e:37:8d:cc:62:
e5:8f:f0:c1:44:ad:2d:54:4c:c9:8f:fc:81:c7:8a:29:d7:a2:
3c:df:77:52:ac:5c:87:a1:3a:bd:c8:21:f3:ed:b9:c9:7c:eb:
57:c1:5e:93:cb:1f:5d:cc:a0:3a:81:4b:34:46:9f:e6:0e:51:
f2:30:39:db:a2:62:23:14:f8:72:31:70:b9:70:d3:61:f6:3d:
78:9b:80:95:cf:18:fd:79:39:60:e0:95:a4:95:d6:e6:fd:2a:
14:19:ff:40:27:c2:30:55:ce:76:3e:27:54:e9:2f:f4:d1:ab:
12:43:44:73:10:1b:b8:c8:84:68:a8:05:52:19:33:a6:b2:af:
19:ff:20:b4:37:9b:53:aa:07:a0:2a:48:04:cc:87:4a:5f:44:
05:83:4b:a9:60:f9:9c:d3:62:64:0b:cf:5e:ae:a6:c9:6e:36:
c6:34:4e:38:4f:7a:04:3a:14:96:4d:a2:a5:85:f5:3b:32:10:
cc:62:44:66:8b:e2:d7:61:4b:fc:6d:ed:9f:18:67:5c:47:1f:
ec:14:99:3d:47:6e:33:cc:3f:13:84:43:09:94:cc:79:32:02:
88:80:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:50 2025 by rpki-client