Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa
File: aabba271-a15d-3720-a297-6d87452eee21.roa (raw, json)
Hash identifier: Bx3o1mwzgGpHU8PS/tgHwB06O5+PPZoKW4M7m4EZOwM=
Subject key identifier: 27:5A:93:88:4F:E0:BC:32:4A:0C:22:17:FD:BE:67:45:04:65:6A:FD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C84EBF4595297057C500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.25.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c8:4e:bf:45:95:29:70:57:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=3de32846-c7b2-4d8f-a3ab-3c5e16a2ad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:47:85:ad:29:68:d0:96:97:6d:14:7c:e4:
20:61:d3:bb:c2:1e:e2:13:85:4a:62:82:bc:25:d5:
3d:fc:33:73:c1:55:4a:0a:d0:bd:1f:db:3c:b1:bc:
f2:26:7f:91:71:26:5d:65:08:e4:4c:f5:b0:27:04:
79:99:d8:52:e7:59:88:bc:83:8d:57:ae:23:cf:34:
eb:53:2f:53:82:e8:02:ba:68:ef:78:59:7b:2e:3e:
9a:c5:b8:47:38:f3:04:7a:62:97:b7:89:10:db:db:
3c:0b:ed:67:d2:a6:c0:f0:08:a0:3d:b8:48:63:a3:
99:7c:b0:27:7b:2f:37:2c:9d:22:f9:16:c9:61:cb:
7b:80:c0:fc:02:05:15:5c:18:e3:32:2d:75:72:e4:
94:44:59:35:7a:f0:ac:d2:ec:30:3a:a3:73:f0:c9:
f4:46:6e:e5:dd:a1:7a:e2:51:04:df:7b:13:9c:fb:
93:83:a9:5f:ef:38:30:a2:cd:e4:ac:fc:1e:cb:0b:
37:4c:92:34:ae:2f:24:aa:dc:c9:0e:34:4b:e0:b6:
c7:72:11:6f:4b:ae:4d:d5:83:aa:dc:c9:52:09:47:
90:c2:17:17:f2:35:98:b4:07:f9:9a:67:e0:97:88:
0a:fe:e0:7a:61:5f:37:c3:f8:68:aa:df:99:09:f0:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:93:88:4F:E0:BC:32:4A:0C:22:17:FD:BE:67:45:04:65:6A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:7e:24:f7:b1:f4:c0:ea:c0:7d:00:ab:eb:30:5a:09:ab:ae:
c7:93:5d:80:d7:4e:11:50:78:b4:33:58:8d:36:a6:fc:ab:7b:
23:4a:69:f4:0c:8c:80:d0:e1:13:17:78:a3:8a:cb:c5:4e:67:
b0:a4:d2:a5:6d:d6:b7:d2:94:9d:21:20:72:64:f4:af:c5:ee:
d1:0b:7a:f6:1e:a9:bf:26:ef:45:b3:d4:ad:c4:79:dc:fa:a1:
f3:c8:13:79:0f:54:21:8d:1d:38:23:4e:dc:a4:d2:30:ac:e1:
06:76:c5:82:fe:89:12:bb:bc:09:0c:29:41:9c:60:83:69:fc:
1f:dd:4a:c0:24:c7:fc:ad:4c:2a:5f:1e:47:cc:73:0c:14:e2:
4d:62:d0:55:b9:ac:18:47:72:ca:8e:08:0d:17:ca:3d:ca:be:
86:05:2c:ff:c5:8c:51:b0:92:48:e5:7f:c4:bb:66:89:58:f4:
4b:b7:f5:6a:cc:1d:04:c2:87:6f:54:57:90:6c:f1:e4:2d:94:
7a:89:ed:6d:ec:fa:6b:28:c6:d5:ac:15:0e:5f:5a:cb:48:aa:
d4:56:66:3b:cf:0e:8b:eb:c3:8c:d5:7e:d9:93:2f:40:13:43:
6c:2f:ad:95:bd:35:b2:ca:fe:46:f2:f0:da:db:04:5d:a8:df:
3d:88:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:40 2025 by rpki-client