Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa
File: d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa (raw, json)
Hash identifier: aQEEy5ALFoRx1ifknTfzzlG8W8+QUFHt+uqzx326cdU=
Subject key identifier: 83:75:47:6C:BC:B5:6A:3C:7F:44:47:C9:98:96:A6:EB:E9:03:46:D2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C5DA728FE1AF18BA7A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.21.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c5:da:72:8f:e1:af:18:ba:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=860623c3-933d-40a5-b0db-04aa0beecae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:76:e2:f2:a6:ad:27:77:a2:0d:98:f2:8f:
8e:75:3a:62:ba:ad:5c:4b:85:34:cd:7a:01:c2:67:
32:ce:18:53:de:b1:bd:97:fc:2d:c4:ce:03:70:e8:
e4:8e:92:f6:51:61:c0:d8:e7:b9:63:13:c4:3d:b0:
b9:e9:bc:ff:5a:b9:5d:74:de:93:8a:81:ff:4e:c7:
26:9e:f7:14:f0:ef:f1:fd:e0:f9:95:ec:3e:d8:8a:
60:81:3b:ac:20:ff:a2:fe:6e:a4:63:e9:2a:88:85:
eb:d7:96:2e:5c:bd:bf:49:6f:b6:ed:02:00:1f:84:
89:87:4a:f9:34:df:d1:d4:96:c3:85:69:33:34:23:
db:43:76:d4:c2:d6:f9:5b:7d:8d:50:db:54:f8:5c:
24:c5:92:67:5f:1b:e0:d6:cb:55:48:b9:26:d7:17:
17:75:eb:e1:e4:f4:73:11:02:98:c8:eb:4b:b0:c5:
8a:5a:b7:65:11:98:a6:1a:9f:96:b9:d5:14:6e:eb:
08:e9:a7:06:69:ad:4c:f5:48:d9:79:18:ce:99:6a:
0e:a3:0c:41:c6:92:2c:78:c0:5f:f7:df:26:08:61:
76:28:06:01:98:d2:a1:c7:cc:87:6b:7f:ae:f8:ba:
a2:fd:9d:d5:05:47:64:22:3d:f0:72:54:86:f0:93:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:47:6C:BC:B5:6A:3C:7F:44:47:C9:98:96:A6:EB:E9:03:46:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:78:78:48:c1:6d:72:26:33:f3:63:35:72:45:a7:e1:8c:23:
da:3e:c9:3f:6f:9f:c0:ec:46:e2:33:bb:5a:1a:ad:26:d0:da:
40:a6:ac:e1:e4:31:b9:e6:f5:88:96:99:cb:3b:a6:7d:a0:b1:
82:f3:6e:cc:d1:a4:e2:da:11:3c:9f:1e:10:10:16:29:0b:ee:
75:be:02:35:af:38:80:23:59:44:c8:f7:8e:69:96:9e:5c:9a:
f1:7a:ed:20:b4:8d:a8:17:35:9d:60:0e:02:8a:bb:a2:8b:8c:
a6:ef:3a:8c:c8:d2:12:bb:69:e6:c0:44:8c:73:95:0e:8d:b4:
4c:4a:05:b0:f1:c5:af:b4:e4:34:d8:7a:5b:02:04:3f:b2:69:
96:4a:2c:e5:74:c7:09:9a:f5:16:57:e4:30:a6:12:97:92:9b:
43:c7:b4:86:55:d1:55:e4:f2:b9:b0:35:0a:dd:34:c3:54:57:
0a:55:66:01:8c:fc:fe:a3:eb:f3:cc:80:02:81:57:a5:1d:4c:
2d:23:09:b9:13:90:ac:fa:08:39:cd:4c:91:96:ab:9b:38:f8:
14:35:bf:6c:c2:dc:6d:4c:6c:d9:14:b7:3b:ba:fc:0c:8d:01:
64:50:bd:f7:44:61:73:69:26:72:d2:bc:04:f6:4e:a5:a3:dd:
04:91:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:27 2025 by rpki-client