Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac03700d-4e97-34f2-a4a7-8cc853b90364.roa
File: ac03700d-4e97-34f2-a4a7-8cc853b90364.roa (raw, json)
Hash identifier: xyax6HYKjS4csQbTtORc0k9nmpwVG70RYMwfzTb48HA=
Subject key identifier: BC:15:BB:E6:AE:94:B7:E3:56:83:99:35:73:AA:98:CC:4C:51:13:6F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C61DA1D62173757B10E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac03700d-4e97-34f2-a4a7-8cc853b90364.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.22.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c6:1d:a1:d6:21:73:75:7b:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=16fe9074-511e-4c91-8ac9-c843be70ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:98:1f:90:60:15:f0:5c:5e:75:fd:87:86:
71:31:12:aa:c3:c7:2b:cd:d1:81:31:9f:f3:ba:b0:
46:97:24:ee:5a:49:be:98:f0:ed:f4:ba:19:a4:9d:
69:2f:54:e0:60:78:e4:48:42:2b:ab:d4:7b:53:41:
90:89:db:18:17:0d:eb:69:d0:f8:5f:14:65:05:28:
90:fc:81:ba:76:a0:d4:aa:0c:8b:68:9f:25:6c:03:
50:dc:21:c9:0f:5a:62:a8:db:85:d1:30:b6:8b:66:
33:41:a3:56:23:cc:2a:9a:67:e9:be:4f:da:54:b2:
9e:6c:b5:36:7a:6c:b9:c8:3c:ec:45:da:4c:00:a7:
fa:60:00:b3:24:0c:f3:64:b3:b0:db:a1:a9:52:c5:
c7:b6:0d:d5:16:ac:d2:42:07:4a:d7:e2:5a:3a:71:
3d:1e:b2:cb:3c:1d:fb:4a:7e:c1:67:f3:60:bb:a9:
b2:57:e6:f9:d8:16:b0:2d:13:a3:41:07:57:bf:a9:
fd:ad:5e:f9:7d:58:bc:1b:a5:26:23:74:32:e2:19:
fd:68:6f:9e:8e:11:39:d3:6c:85:41:2c:6e:84:81:
44:84:56:5a:0f:ff:b7:14:55:97:36:f3:36:d3:b5:
29:a0:83:6d:a9:68:ac:6b:80:23:d9:aa:ea:bb:5d:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:BB:E6:AE:94:B7:E3:56:83:99:35:73:AA:98:CC:4C:51:13:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac03700d-4e97-34f2-a4a7-8cc853b90364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.22.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:7b:e4:63:63:dc:f3:4e:7a:fe:b4:12:0e:51:74:d3:7b:1d:
dc:13:34:04:e9:72:f2:39:2a:73:73:00:3c:d3:53:e8:03:8c:
b9:f3:10:dc:cf:5f:56:92:47:79:05:49:20:17:9a:ac:0e:ba:
fe:df:ab:09:15:96:96:44:4a:10:66:94:81:ea:70:d9:41:14:
e5:d8:6f:6d:70:b4:d8:7f:a2:d4:fe:6b:59:17:f3:b7:0c:61:
13:75:27:79:7d:da:c3:57:39:5d:ec:2c:25:22:24:8a:d5:6b:
14:b3:b1:63:53:ef:a9:d4:de:c7:22:71:61:46:58:a0:9a:e4:
04:41:c7:33:c2:22:f2:81:a3:41:a4:af:b7:68:4a:4a:07:91:
ae:2b:e0:ca:db:88:34:b3:c0:78:1b:ab:ab:c1:5f:f9:53:08:
50:91:1c:46:6e:3b:82:7f:9d:58:fd:2f:d6:54:c0:84:9b:72:
5a:c2:07:96:ef:9b:c8:d9:2f:73:ce:7b:05:83:e6:bd:cc:c6:
c1:49:3b:d2:ee:21:cc:f4:07:37:dd:a0:28:cf:30:db:9f:9e:
69:3c:2d:61:33:05:57:7a:02:2f:0e:48:2d:30:b1:95:c4:d1:
61:04:e3:bf:e7:c5:3e:1a:ee:cf:41:77:10:e2:6a:81:41:1a:
e9:ae:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:22 2025 by rpki-client