Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa
File: 993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa (raw, json)
Hash identifier: 9rb/74Vny3R76PZRq9On8zL/OmrrCb3TeiIh4kcnSkQ=
Subject key identifier: 66:86:14:7D:6C:E1:66:A7:80:3A:2F:0D:C2:98:68:4B:C6:0C:FF:F5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328576D51CC73C042CFC1676228DF19
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa
Signing time: Fri 30 Nov 2018 01:08:24 +0000
ROA not before: Thu 29 Nov 2018 05:00:00 +0000
ROA not after: Sat 27 Nov 2027 05:00:00 +0000
asID: 13335
IP address blocks: 104.23.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 29 05:00:00 2018 GMT
Not After : Nov 27 05:00:00 2027 GMT
Subject: CN=c8775b48-eb4c-481d-9d91-6df41cf98481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:98:ca:7f:49:38:26:e3:c0:5e:1c:83:b0:
7c:93:18:94:90:e0:fb:7b:98:f7:3f:7d:3a:4d:b8:
1d:22:73:18:9d:82:45:37:b6:e3:b1:a8:09:95:c3:
e1:3a:ad:bf:7d:f0:05:cb:13:3c:c7:e2:4d:74:b2:
d8:09:ba:7e:d9:c7:5b:3c:f8:cf:55:da:96:a8:a2:
06:71:ff:bb:76:79:5c:de:55:78:ef:c8:45:8d:50:
cb:4c:a0:30:5f:b5:cf:56:6f:79:74:fe:f0:d5:70:
16:15:db:1a:41:99:a7:e9:a9:12:08:f2:05:a7:b4:
5c:26:0a:a8:b2:e0:31:0f:01:d5:00:d2:6b:e1:c5:
4b:25:83:4b:aa:a6:22:b9:5b:58:fb:41:db:13:fd:
1a:c2:8a:5f:01:dc:19:9c:98:eb:90:ac:71:c3:d1:
ac:5a:f3:1e:ed:85:f2:21:6e:87:ba:01:79:86:79:
39:0f:62:a0:c3:3e:91:1b:a5:f8:bc:59:fe:10:e3:
37:dc:9f:11:6d:c7:df:53:13:f0:93:55:2d:13:8d:
66:0c:01:e8:1e:1d:b0:e2:56:2a:b6:c0:8f:b4:85:
22:6f:78:e2:ce:3c:d9:65:bc:13:52:01:bd:44:e3:
d3:11:7a:d3:56:e7:b9:7e:f9:ac:5b:84:9f:ff:f3:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:14:7D:6C:E1:66:A7:80:3A:2F:0D:C2:98:68:4B:C6:0C:FF:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/993c96fa-7ab1-333d-a07b-59fecc03a0c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:e3:ff:d9:96:c9:5d:61:42:3b:59:43:4a:1f:72:d2:e1:7a:
75:a1:ff:20:5e:aa:c0:ca:ed:98:cd:7d:13:ac:d8:92:9e:e1:
6c:b5:e6:44:68:7c:fa:e3:5b:3e:bb:d9:31:20:b4:e1:dc:c8:
16:07:bf:55:88:3c:50:ef:fe:9b:10:e0:a3:4e:58:80:e8:6c:
c4:0c:9d:31:91:72:48:22:43:80:c3:e0:4a:d5:ec:1d:9e:91:
66:c3:50:1d:61:8b:da:3a:8b:c3:e6:91:ca:b0:95:73:de:af:
18:00:3a:31:dc:d9:12:c6:15:a4:2f:7f:b6:e3:d8:d1:2e:35:
91:b2:e7:9c:7d:ab:ca:1e:a2:09:1c:b9:c8:b8:24:45:f3:27:
3d:f7:5e:fb:eb:a1:29:62:c9:a1:12:4c:69:e0:ef:87:ef:12:
93:8c:e7:88:18:c6:26:20:ba:98:e8:54:95:41:8e:ed:d5:da:
28:47:54:49:63:74:5b:a6:ea:54:3f:5f:47:43:9e:a9:39:cc:
13:e7:6e:ce:17:66:f5:c2:d4:5b:c5:74:63:55:51:5a:73:95:
cf:36:21:3d:92:f7:a7:53:33:4d:84:34:41:f5:1f:7d:79:b7:
da:2f:1b:bf:50:21:ed:d8:73:20:f4:63:30:ba:39:b8:68:77:
ad:f4:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:28 2025 by rpki-client