Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
File: 94302007-379c-3d0e-b144-b33108e8a99d.roa (raw, json)
Hash identifier: V2HS65Qbjt4CYxFQTiUEzu1d0aslFckDJO+vmF7L/+U=
Subject key identifier: 49:95:88:3A:16:37:B3:CD:28:87:42:22:18:BD:02:7C:17:FE:23:33
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C021F4F6ED894C9172C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.31.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:02:1f:4f:6e:d8:94:c9:17:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=3b2b25a2-6d98-4567-a204-747510fe63bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:fb:be:ae:57:6c:d5:a3:88:12:8e:a7:cc:
c5:3c:eb:62:f1:e9:ce:1b:ec:bb:4d:63:b9:af:98:
10:41:18:74:7e:30:25:57:5a:64:09:3f:3a:07:53:
bf:28:bb:7a:82:5a:12:f4:e1:db:39:c4:21:52:5c:
b4:49:c1:f7:c7:78:81:da:10:05:a1:e8:52:4f:52:
a4:27:cb:2b:6b:a7:25:ba:b6:82:78:ae:96:80:5f:
33:7c:cd:0a:cd:8d:56:7c:3e:ea:7e:ed:20:00:57:
3c:a3:e8:ac:72:ac:9c:d2:d7:0f:6a:4f:32:fe:bf:
ec:fe:aa:f7:57:3b:a1:15:76:a5:f6:e4:4b:ea:9f:
a7:41:fe:f3:7d:4a:8f:32:00:30:8e:8f:83:1a:7b:
10:4c:00:06:b0:92:96:7e:ba:cf:44:17:f4:ed:7d:
1d:cf:35:f0:93:11:ef:9d:1c:22:ce:b7:4c:a1:6b:
b3:17:0f:6e:89:63:35:7b:16:3e:f6:7a:c4:75:b5:
fc:2c:a6:0f:d9:1c:5c:38:2e:e7:33:d2:68:10:16:
6d:ba:65:94:64:3a:82:d2:01:56:9d:55:d7:5e:51:
50:b4:dd:14:d0:df:93:ee:bf:b7:b6:e3:d0:c1:5d:
5b:94:ad:8e:10:d1:71:29:25:a9:d7:d6:8b:e1:47:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:88:3A:16:37:B3:CD:28:87:42:22:18:BD:02:7C:17:FE:23:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94302007-379c-3d0e-b144-b33108e8a99d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:d5:34:d3:6e:ad:45:79:80:9c:7e:b7:08:47:eb:53:b4:87:
39:10:8e:5c:8d:cd:ab:ac:25:d7:96:e5:05:92:58:5b:b4:f0:
4f:24:72:51:de:a4:63:55:0a:cc:c5:bb:3b:66:95:78:1e:bb:
5c:54:f2:e1:6a:20:72:d6:50:84:1a:37:66:c1:24:6c:70:b6:
35:c0:9c:9f:32:84:63:8b:2b:6d:65:3e:a5:ea:eb:ec:21:1a:
a7:cf:2d:2f:b9:07:39:b4:ea:92:47:29:5e:1a:6b:10:43:02:
f0:86:38:e3:c5:7a:bf:2a:23:cf:cb:c1:7d:02:d9:4c:b3:06:
f2:de:c1:a0:0a:bb:49:44:35:dc:9a:3c:9a:01:d7:2b:06:00:
4c:83:5b:4d:3e:b9:f2:5e:56:8f:8c:28:88:78:9e:dc:66:ab:
df:5f:db:9a:b9:e9:33:4f:12:b5:ec:02:74:79:a3:f0:ae:c3:
74:d5:25:8c:98:9d:40:4a:08:3a:52:da:f5:73:33:29:5d:da:
f9:db:bb:70:b9:df:9d:f0:2d:f5:1f:58:b1:2b:1b:e5:ab:7e:
25:24:4b:aa:77:d8:5d:2b:eb:2f:44:81:01:7f:0b:95:c7:8e:
22:d8:2a:f4:3a:bf:f7:a2:fe:5c:44:fb:f6:3c:13:61:ed:7e:
34:8b:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:41:58 2025 by rpki-client