Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa
File: 811e6a88-0d78-38d1-8165-7cff3dcc8978.roa (raw, json)
Hash identifier: gBODM05rxzioYvNvC8Tw1uijsP+oFaHyFzPs+w4j010=
Subject key identifier: C2:84:24:80:ED:BB:1E:8D:CA:D1:0D:DA:70:A8:0E:3F:75:D1:C2:11
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C549B53D1DEF85DAE200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.21.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c5:49:b5:3d:1d:ef:85:da:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=74622db4-36b1-469a-bf54-d93118a87ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:b8:cc:ea:b6:a0:ef:16:3b:d4:67:1d:c8:
8e:c7:73:3a:c0:ec:7c:d8:70:b7:d2:05:d4:48:9f:
2a:10:2b:02:96:73:68:3b:f9:da:69:70:3d:31:0b:
af:d7:3f:58:85:c7:46:f2:92:e4:c6:22:17:62:68:
98:38:eb:33:be:cd:90:63:71:69:bf:8b:6b:dc:29:
1f:cb:a7:b4:9c:dc:ea:9f:f1:09:ce:8b:0b:35:13:
06:85:b1:ea:5e:ad:99:c4:94:9b:01:6e:c1:ce:88:
55:57:c9:66:66:b0:fe:b8:82:3c:f0:25:b8:d2:4a:
8b:f5:cb:70:81:7a:ea:8a:1c:00:b3:66:6a:36:d2:
68:d4:e0:d5:a8:39:03:bd:15:8a:f9:80:c7:92:37:
9a:7d:9d:23:f6:fc:fa:2a:97:61:a6:2a:8e:0c:22:
fb:cc:67:a0:4c:fd:e4:63:cb:87:08:c6:6e:12:86:
c3:00:a5:83:09:33:61:9d:f2:fb:ac:fc:a0:9f:d3:
9b:e2:93:a7:0f:5d:68:6a:ba:dc:15:01:77:d4:a5:
06:58:3b:f8:44:2f:df:d7:34:6c:f5:86:4e:f9:16:
28:66:91:50:79:6a:9e:e8:8b:59:63:b3:29:b2:a6:
c7:46:5b:a7:87:ee:34:0b:d7:85:59:f3:77:61:7d:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:24:80:ED:BB:1E:8D:CA:D1:0D:DA:70:A8:0E:3F:75:D1:C2:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/811e6a88-0d78-38d1-8165-7cff3dcc8978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:4b:f2:4c:74:c0:2b:23:36:e4:e1:90:77:7c:e2:41:92:65:
4b:0c:42:d2:2a:27:bf:b5:cf:70:65:ac:0a:c5:a4:7a:36:e4:
ef:54:d1:20:eb:79:1e:be:54:23:04:86:40:8e:9f:26:d2:3f:
4f:a5:2d:58:af:61:8d:e1:61:27:de:b8:74:09:2a:b2:fc:59:
0e:91:60:74:e8:f2:9f:20:1a:9f:d4:93:1a:e4:5a:a9:c7:86:
9d:a3:0a:4a:5f:ce:5d:de:9b:37:68:1e:b2:d3:09:fc:ca:75:
31:c7:46:6e:9e:90:bd:37:98:c3:95:97:d0:41:b7:1b:62:7d:
51:9c:55:d2:92:e2:8f:a5:27:96:37:6c:dc:60:fd:2a:f7:26:
3c:d9:39:fa:b9:16:6e:fd:0a:50:0f:5d:7d:e7:3a:a9:d2:3d:
6c:03:3a:0d:ef:34:6c:0d:b6:b1:64:02:65:14:f0:02:d3:27:
91:89:d4:7c:5b:25:86:2b:10:f1:ef:96:33:e6:4f:97:74:05:
76:be:28:04:18:02:42:24:86:22:fe:a1:43:74:a4:fd:60:3c:
f5:fe:65:e8:4c:36:b7:b2:99:a9:91:92:4b:2f:71:f2:0b:4b:
35:61:81:bc:8c:f2:17:69:10:7a:0f:28:8b:fc:96:e6:dc:b5:
67:ad:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:03 2025 by rpki-client