Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa
File: c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa (raw, json)
Hash identifier: pMrEfCKkK2Iu+yBj7PuRIVYYBPtcrcN0VH9Kmr2FYcE=
Subject key identifier: 86:0C:8A:14:E1:E1:5D:7D:A3:DE:EF:5E:EB:31:CC:62:9D:7C:68:C2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C66533E84B32FDA95BC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.23.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c6:65:33:e8:4b:32:fd:a9:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=08038570-564e-40f6-98fe-690bccf2763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:39:41:08:29:b8:9f:61:85:fd:25:a9:d5:
7e:a6:10:64:31:41:0b:71:49:3f:8a:c2:84:91:32:
37:8f:6c:47:e6:7c:e9:7b:3f:4a:c0:ef:e2:3f:03:
58:e7:04:1d:80:32:a5:29:98:fd:12:fd:76:b2:a2:
8c:4e:ac:c3:4a:69:3d:4f:47:a7:b5:4d:92:05:54:
d6:ab:c0:51:0f:07:7b:0c:54:1b:0e:0a:4f:de:94:
26:ca:4b:83:33:68:09:a9:5b:e6:21:05:e2:b7:47:
bd:84:4f:35:f1:e4:7b:ce:89:7f:b0:b9:45:93:df:
84:6c:ee:e9:6b:4b:77:4d:4a:46:00:99:2b:45:58:
73:bc:44:7b:7f:c8:0f:5f:60:e9:7b:18:b5:dc:c1:
95:01:ac:b5:a6:e5:77:03:54:6f:50:c0:79:2a:04:
7c:49:26:7c:03:cc:7e:99:db:e3:a3:3c:92:03:81:
ac:88:42:c8:a1:00:5a:6e:aa:b3:66:34:a8:29:26:
6b:7c:d6:0f:3c:77:ed:02:f8:43:73:4d:ac:79:c1:
77:54:3d:9d:6a:d1:d8:45:c4:14:a3:0f:0a:74:2a:
01:f1:d7:f5:9e:68:ca:b6:34:cc:0b:56:5f:01:fe:
0f:64:b2:f3:25:4d:0a:58:cd:b0:fd:e0:42:fa:e0:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:8A:14:E1:E1:5D:7D:A3:DE:EF:5E:EB:31:CC:62:9D:7C:68:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9272f69-d278-3e24-b2f9-21e7aa8f231c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c2:c8:6c:68:6b:38:b6:69:e3:2a:ca:f3:88:97:8a:1e:f8:
65:aa:88:f3:01:3e:fd:ca:8c:1c:38:df:e7:9a:00:d9:75:11:
56:1f:ee:c7:48:5c:ca:6c:98:ba:b4:0a:eb:e0:16:ad:bc:c9:
c7:c5:8e:2e:d3:0e:25:c3:df:68:2a:dd:79:4a:49:81:8c:ac:
34:6f:5d:9f:6d:23:c9:92:6e:23:0c:41:fc:3d:6f:20:5f:e1:
2e:ca:c4:4f:1b:81:98:1e:ec:8a:6d:51:0e:8f:5a:d7:14:a3:
25:5d:bc:e3:50:ae:0b:30:fa:90:25:9a:ee:eb:8f:01:f3:e3:
e3:21:0b:38:15:b7:f1:4d:72:f5:ed:d6:ff:d9:cf:95:fa:b1:
ab:5c:5a:af:a5:04:25:d9:13:b9:ec:8c:d8:6a:fd:bb:82:61:
47:a2:cb:81:b5:a3:29:c2:f7:71:73:f4:09:8e:50:26:83:86:
9d:61:66:25:8c:82:b6:a1:76:e4:27:24:85:1d:85:7d:b2:52:
76:38:5f:ce:b4:e8:14:a4:10:c3:d9:2f:f2:92:39:8c:62:fb:
06:40:ad:79:4a:86:35:f4:b4:ba:c0:a1:3d:bd:8e:02:0f:a6:
55:b4:25:18:ea:53:a9:db:1a:8e:57:3f:77:74:8c:b9:16:08:
0e:47:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:14 2025 by rpki-client