Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa
File: f036f6d8-d97e-3966-b183-31069d2e0590.roa (raw, json)
Hash identifier: uzBoFT+EbIPnbOcEE+9oZc3C2lr0EFNgqhCfDmIN9YI=
Subject key identifier: 3A:CF:01:34:C2:CB:3A:7A:38:98:BA:19:68:0F:C8:6A:C4:FC:E1:BD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C020E7BF801F8E98822C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.31.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:02:0e:7b:f8:01:f8:e9:88:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=b61a06ae-112d-4ceb-98e9-1ed8245139e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:d6:c3:77:a8:04:c6:e9:b2:6d:8b:d7:6b:
63:15:2e:83:5c:78:fe:3c:15:9c:b0:1c:86:57:8a:
ef:12:64:8a:9b:74:05:83:b4:03:1c:d7:d9:29:b4:
03:b7:48:4a:70:04:9c:4b:1b:14:ad:17:08:54:1d:
3d:9e:61:57:21:30:0f:16:5e:7c:d8:fa:41:02:a4:
61:de:1e:1e:2f:04:72:b0:66:ef:46:b4:de:9f:97:
8a:96:2a:f0:de:f4:84:02:40:c5:07:8f:47:e0:e3:
bf:89:d9:2e:a4:8b:b7:73:a6:87:08:19:ed:49:e9:
1f:13:b5:2a:8e:89:72:16:6a:57:e2:85:91:46:27:
53:6e:96:ab:3e:db:31:62:74:db:80:d0:13:e3:19:
fa:05:de:10:a4:da:66:7c:f5:98:72:b0:a4:ec:b1:
7f:66:d3:f8:11:6b:4e:f2:05:78:49:6d:90:41:4a:
27:dd:fd:c2:1f:20:6c:e9:c9:e8:3e:c6:8d:46:00:
82:36:ea:e4:b1:4e:21:e1:b1:00:1a:5e:bf:3b:9f:
15:d3:f7:9c:eb:48:8a:3c:41:3a:5c:8d:d3:c2:44:
9f:11:2d:74:d4:30:c9:82:bc:a5:61:34:8e:84:93:
0d:bc:42:95:ad:e1:5f:f1:11:37:a0:5f:50:c1:18:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:01:34:C2:CB:3A:7A:38:98:BA:19:68:0F:C8:6A:C4:FC:E1:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f036f6d8-d97e-3966-b183-31069d2e0590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:5b:af:20:14:b9:54:b6:31:19:9d:81:08:c3:2f:b3:63:dd:
43:17:73:fc:76:9e:71:cd:37:1e:58:1a:b7:65:a1:3b:2b:f6:
c2:63:b6:bf:6d:19:a3:3c:7f:7a:2c:76:fe:d2:02:04:91:6d:
3d:72:95:df:2c:c4:b9:cc:b7:83:b3:6e:a8:d1:80:16:62:66:
2d:3b:23:3a:b0:fd:52:01:db:13:12:ce:cb:ac:b9:b1:4e:32:
e8:f7:a1:a1:75:d8:4d:14:1e:56:1f:43:25:8d:59:3e:9d:b3:
b7:be:f3:7b:be:ec:4e:57:35:a9:02:2f:60:80:47:9e:e7:cd:
a3:df:cd:63:04:fc:71:1f:6e:b2:3d:c5:ce:9f:01:7e:15:c8:
42:c1:c2:8b:33:6a:e1:86:25:a7:a1:09:c1:09:a3:3a:08:f8:
ad:79:91:3a:57:4d:0d:ff:bb:3d:79:ef:ad:22:4b:95:78:34:
cf:89:f7:4c:a5:00:61:df:5d:3d:69:96:61:82:f4:ee:0a:9a:
c1:30:43:ea:65:b7:03:a3:ff:25:19:53:e3:c1:ac:8c:54:1a:
26:af:3d:e9:36:35:d6:c2:90:f4:20:43:e6:2c:c8:75:ee:b2:
d1:4d:32:39:e9:d3:69:37:c0:74:80:c1:50:55:08:a0:9e:87:
16:d7:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:14 2025 by rpki-client