Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa
File: 891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa (raw, json)
Hash identifier: 6ha8o9vqKFx98tM3dvPT3qu1Qjl0EwFdloPWQKK1M3U=
Subject key identifier: 1F:E2:72:BD:A8:B9:D1:E8:4C:4D:BA:53:B4:19:F4:61:07:22:F2:1A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C016C6D3C1C181D46B100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.31.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:01:6c:6d:3c:1c:18:1d:46:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=67563739-8a6d-417d-8f38-2573102df759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:2c:62:12:f8:82:21:b1:89:37:75:bd:53:
a1:bb:67:fd:a6:3b:91:63:f6:24:38:5f:25:47:78:
b3:7a:af:48:b9:95:78:6f:cd:78:77:47:eb:a3:65:
39:f8:0c:27:0e:29:30:2d:1e:c2:92:35:c9:50:08:
74:8e:30:2e:16:d9:31:c7:ff:29:6a:56:51:2f:23:
85:f2:b2:e1:38:11:df:bf:2b:05:69:20:19:1c:84:
18:ed:cb:54:43:2d:65:e4:16:32:a5:96:93:54:41:
78:8e:4b:5c:50:01:02:0f:f1:db:73:b6:e6:f4:a3:
97:85:6e:af:e6:c9:d6:29:f8:4a:e7:46:07:21:99:
98:3a:75:70:c7:75:f1:9d:74:8e:40:9d:c0:bf:aa:
8e:5b:21:2e:f9:ec:0c:16:2e:25:8e:10:09:e4:03:
2e:66:9d:c0:f7:2f:c8:92:d1:a4:15:7d:2b:60:a2:
90:6a:6b:a6:e3:18:2d:76:c3:dc:9a:d3:47:34:04:
0c:c0:5c:5a:67:a3:e1:6c:e6:af:97:be:a8:97:09:
3f:83:b1:bb:ec:dc:4b:19:45:68:2f:1a:ec:55:44:
61:27:8e:e0:b9:f2:51:c6:ae:81:5f:ec:e7:bf:d0:
6d:1f:c0:de:bf:8b:f0:59:1c:dc:95:b1:06:2b:6d:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E2:72:BD:A8:B9:D1:E8:4C:4D:BA:53:B4:19:F4:61:07:22:F2:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/891527bb-b014-32cc-84b3-d8b3ce06ccdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:22:af:b9:8b:34:1b:c4:1d:1c:4b:9e:e1:4c:46:4e:47:73:
89:ea:1d:3e:bb:d8:26:be:93:22:7e:2b:28:f9:a2:73:5a:65:
49:4a:3a:a3:aa:cf:16:5d:3c:2a:78:d8:d8:cd:24:ea:ba:06:
36:c3:ff:e1:7b:23:62:6e:92:a6:32:ea:05:cc:73:81:46:d6:
e9:6e:d3:80:7a:b3:18:33:52:d2:bc:6c:f9:60:d6:cd:ef:f7:
a9:ec:dd:e5:9b:a1:d8:0b:6b:d3:d1:05:2f:7d:60:b8:65:85:
99:a5:25:fc:21:14:29:19:ea:22:f7:80:aa:9d:d7:ed:01:c3:
87:d7:c7:ae:13:b8:e5:d6:f6:e2:7c:6a:da:e1:15:10:27:b3:
e7:f1:82:2e:c3:39:2c:58:1c:af:62:52:a6:cb:61:14:96:48:
a2:8f:dd:2b:2c:ab:48:c5:93:c9:c1:bd:9a:a2:34:df:14:01:
be:86:af:b9:d4:10:33:2e:9f:97:7a:12:a2:b5:fb:88:0b:b3:
e7:73:73:db:a0:b0:d0:f3:e7:31:46:6e:9d:67:33:5b:92:76:
e7:78:f5:9f:a5:86:49:8a:27:6e:0d:06:95:2b:56:1b:f9:e8:
fc:16:b7:fb:96:32:e4:ee:a2:9f:f8:fd:ba:10:4c:08:09:f3:
7b:ad:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:44 2025 by rpki-client