Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e674e62-6e51-3485-ab1b-229fbf274932.roa
File: 9e674e62-6e51-3485-ab1b-229fbf274932.roa (raw, json)
Hash identifier: qEa6xRFQue/a1Yi6ZV08VSrZQnm42VdLHQu+3PlJaIE=
Subject key identifier: 3C:E0:84:D3:B4:2E:26:DB:92:EE:E4:6E:6C:59:A4:94:B1:EE:29:75
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BB34C2E5B5174CD15F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e674e62-6e51-3485-ab1b-229fbf274932.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.16.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bb:34:c2:e5:b5:17:4c:d1:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=7b001228-9585-4640-a3f5-7c24167d663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:e2:8d:d6:4e:0c:bc:c3:9b:b8:58:b8:00:
fe:b1:85:6b:8a:62:23:50:15:89:cb:6e:04:ba:28:
28:0f:d3:31:5c:73:c7:fc:ea:e8:2d:bd:90:0e:52:
a6:c4:ad:4f:8c:31:4a:8f:f2:f3:7c:0d:f4:8c:59:
7c:aa:f9:34:11:f3:a4:e3:ce:6e:47:a8:c5:fd:c8:
a8:bd:15:29:d4:f6:a4:62:f6:66:0a:fe:79:f8:23:
80:97:97:e5:ad:70:17:c6:4d:45:b9:d5:4c:55:ca:
27:21:0a:6e:6c:ed:82:bb:b6:cb:83:87:eb:94:82:
61:58:27:54:a3:a5:25:5d:3e:5f:08:5e:3a:2b:be:
75:95:5d:ba:36:c8:d4:57:49:b4:bd:64:39:25:6e:
f5:72:75:1f:ba:31:b4:57:3c:ca:c3:82:58:14:ff:
17:a1:38:e4:9f:7d:73:09:e8:cb:08:c5:a0:97:58:
00:48:58:36:a5:7e:e7:cd:00:56:01:ab:80:de:85:
91:06:2f:7d:2c:cb:ea:6f:0e:a7:9e:30:e7:d8:12:
18:83:2a:ba:79:4b:75:72:fd:0e:1c:a2:57:2e:05:
80:93:80:71:e5:0f:13:e2:87:d8:3f:c4:07:16:ce:
74:b1:08:10:2b:98:ab:8a:ed:17:5f:24:5b:52:3b:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:84:D3:B4:2E:26:DB:92:EE:E4:6E:6C:59:A4:94:B1:EE:29:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e674e62-6e51-3485-ab1b-229fbf274932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:3e:7e:a4:be:a4:59:e0:f5:c0:fb:71:96:30:c4:97:0a:d0:
9c:0b:23:0e:cf:07:58:b1:73:d0:b2:8c:e4:89:f5:8c:f7:ee:
42:3f:4f:a6:c7:60:cb:02:cd:81:c9:5e:85:f9:1a:00:70:d7:
84:a5:64:16:10:e3:f9:8f:1a:37:c7:84:81:32:be:85:3c:0f:
43:af:ce:8d:f9:76:6c:17:bb:70:90:ce:e4:f7:2c:de:16:51:
5c:5f:e7:01:e2:d6:df:c4:2a:81:e5:ac:b3:be:21:77:ed:66:
59:75:99:c2:5e:2d:2f:6d:fb:f2:17:9c:cc:e9:b4:84:a6:69:
1e:94:4c:5c:e7:45:6b:19:7b:f2:1c:d5:dd:80:a4:e8:31:ce:
42:16:fe:c5:48:29:e4:2d:b5:06:b6:6c:6b:03:c8:9b:d6:a2:
83:d6:10:8b:8f:52:1a:27:70:89:0e:f0:04:56:19:24:11:51:
ea:4d:d4:ed:94:e8:cb:a5:4a:f0:b1:f2:6a:83:83:b3:f2:7e:
20:d8:a7:bf:44:3d:43:e6:4f:a1:22:94:d1:32:79:76:fe:a1:
ef:e7:2f:b2:ed:34:30:91:f0:17:65:81:e8:95:53:e2:20:02:
d8:0a:3e:89:96:31:ee:43:bf:82:16:1f:8f:ff:51:92:c1:51:
3a:58:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:24 2025 by rpki-client