Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
File: 8be1effc-cfa7-3b8d-a081-510cb1054720.roa (raw, json)
Hash identifier: BJqFfLMS15pwXL0cOWX9k73yp1oHjFS+CDYH8qbflFA=
Subject key identifier: 46:5E:CF:F1:8B:A1:F3:18:8D:68:43:4F:12:4B:27:D1:36:96:4C:F5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BC16CFBB1D5EDAB78400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.16.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bc:16:cf:bb:1d:5e:da:b7:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=c7336b3b-5fc4-43bc-9a42-fab444aa8d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:79:9f:01:b3:5d:f8:39:e1:5b:40:9a:22:
00:3c:ee:04:bc:b8:5c:9c:44:ab:14:1a:c0:b8:37:
2c:40:08:8b:de:c9:5b:4c:f2:71:4b:84:88:2f:ab:
2b:05:a5:b7:9d:cf:f8:c4:7b:9e:f2:c4:28:c2:61:
28:1f:4e:52:6b:5a:d8:d0:bd:5e:c2:cb:f5:a7:b0:
f7:71:36:6b:2c:64:61:82:e5:96:c4:77:8d:01:e8:
5b:84:d0:24:d4:bc:fc:74:bf:ff:a2:ec:fe:4e:7b:
fb:1f:d8:f9:06:d5:72:db:f3:32:3b:13:b9:14:2d:
de:79:71:80:45:74:72:1c:67:0a:3c:83:d4:a7:25:
02:f4:9b:cc:0c:61:98:85:dc:c3:fa:03:d1:d6:d3:
0c:0c:e0:07:28:10:8b:e6:f4:e0:01:3c:de:ae:8f:
4f:ad:08:cd:c7:4c:5c:2c:e7:c0:4c:69:0d:16:fc:
2c:4f:07:23:ec:23:85:5f:9f:47:9a:88:72:a6:fc:
8a:66:4b:5c:0d:f9:54:72:0c:96:bb:7b:0a:0e:c2:
ff:36:a7:f0:71:a3:c4:25:83:49:05:10:1c:7f:7c:
a0:6f:1f:03:04:3e:6d:fb:7c:51:51:a5:29:c6:75:
5c:ab:18:4b:4b:40:da:eb:2a:8f:d4:e4:da:fd:86:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:CF:F1:8B:A1:F3:18:8D:68:43:4F:12:4B:27:D1:36:96:4C:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8be1effc-cfa7-3b8d-a081-510cb1054720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:98:17:d0:03:38:f7:3c:db:1b:84:6d:f1:d7:53:a2:76:79:
b4:31:1b:db:5a:99:bb:ce:df:00:30:42:2a:37:b0:31:5e:20:
05:dc:c6:9d:ab:a8:ee:5c:2d:c5:6d:7e:7b:d4:4e:a5:64:73:
f2:2d:18:16:21:29:d6:99:3d:51:9d:76:47:e9:71:e2:95:45:
fc:5b:ac:64:48:bc:00:36:51:a7:64:de:d5:4d:9d:f1:0e:fc:
f8:18:d0:ae:5a:d2:7d:7a:b2:46:f6:a8:4e:e5:03:32:46:67:
95:0e:ff:03:a6:00:03:75:43:39:7a:88:46:73:d9:7c:94:c6:
3f:6e:f9:b7:95:a3:b8:1d:c9:11:f4:3d:e4:70:b5:7e:a5:be:
a5:7e:88:d8:c1:b0:85:12:7c:af:82:90:fc:75:d0:cc:d1:25:
10:da:03:2d:77:30:2a:dd:15:4d:3e:a0:6d:fb:f0:86:0a:ea:
ff:73:ef:ec:46:63:a6:1a:10:37:4c:1e:91:08:f7:ea:85:e4:
82:30:44:f3:25:4c:66:58:d7:fd:44:47:e9:bd:d1:3f:5e:9f:
55:25:68:e8:a6:26:63:c3:f6:c3:b2:eb:e3:65:a1:ba:4d:e4:
c4:b6:f5:8c:7c:65:75:3c:47:23:6f:c2:10:44:f0:ef:1d:88:
3c:a4:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:19 2025 by rpki-client