Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbb8f623-e401-3464-91c7-46f8f960d30e.roa
File: fbb8f623-e401-3464-91c7-46f8f960d30e.roa (raw, json)
Hash identifier: RoRT8Ah4WBx1aaPcsrPVj10BiItye/LnrUTrhwynMEo=
Subject key identifier: 16:6D:E7:AD:AF:A1:DA:4D:79:F9:57:4B:1D:F3:4A:D1:AF:82:7B:72
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BB2617131323158280C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbb8f623-e401-3464-91c7-46f8f960d30e.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.16.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bb:26:17:13:13:23:15:82:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=21e7fc4f-b69f-409b-9ab3-41cf96ba3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:5c:ef:00:09:a8:c8:c0:67:e5:2c:36:cb:
f1:9c:e7:ea:e7:da:5e:c9:ad:33:b9:16:8f:f2:7a:
3d:c6:75:80:0d:e5:8f:2e:93:7d:ce:b7:8b:53:f2:
5c:08:c3:a9:28:f0:db:77:12:12:ac:44:79:38:d3:
65:d6:2f:6e:df:a0:94:ba:96:8e:fe:6d:88:1d:de:
57:d9:c8:e0:e5:57:64:25:da:13:46:a7:53:85:1e:
84:9c:71:8b:48:60:f5:1e:b2:3e:f2:e5:8a:c2:78:
e6:fb:44:9f:3a:aa:cc:ff:eb:47:61:b0:e0:97:34:
f4:ab:8a:3d:76:2e:b6:c3:76:38:90:61:0f:cf:73:
a8:f1:e4:8c:68:fa:1b:55:9d:a1:b8:ff:5d:fb:82:
b5:3f:8d:92:62:05:a0:6e:99:5b:1c:46:33:4d:a1:
54:54:1e:c3:84:13:62:e8:29:47:80:b5:7b:44:58:
3d:f3:1c:93:85:7d:9a:b2:ce:ff:35:2f:2a:2e:43:
c6:c6:f7:f9:f3:ea:5a:44:f8:52:10:4d:67:5a:d4:
cc:a3:53:5e:e3:1b:74:ab:29:d1:0a:e4:1c:21:4d:
24:ea:40:0a:8b:0e:44:3e:b6:a1:1f:a3:c4:8b:7a:
47:b3:d1:2d:27:e4:0c:2f:b7:50:49:fd:84:a2:41:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6D:E7:AD:AF:A1:DA:4D:79:F9:57:4B:1D:F3:4A:D1:AF:82:7B:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbb8f623-e401-3464-91c7-46f8f960d30e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:7a:40:40:f6:b8:64:ed:44:3b:dd:16:21:fd:8d:5a:b2:03:
88:74:f6:86:71:ce:74:70:ff:75:2f:83:00:d8:e5:cd:f3:ed:
b9:0b:e4:52:c4:87:0a:e4:d5:fd:1d:21:eb:28:dd:de:05:d4:
64:65:b9:19:87:ef:8e:ea:30:b8:3b:5a:af:ce:49:73:9a:91:
c3:24:f0:63:ce:d5:be:0d:b3:df:f2:36:6c:b2:6c:9e:65:b4:
cd:b6:83:d0:75:f4:73:48:e3:b8:d5:3c:37:4c:3c:cb:e2:f5:
f7:07:77:24:54:b6:e6:15:2b:f2:7e:ca:6d:a1:b6:3c:85:60:
df:f6:92:d2:70:b6:67:94:c4:54:f8:e2:e0:27:6e:4e:d9:54:
58:56:7e:aa:8d:e7:8d:70:96:d8:61:a1:f3:b4:03:3c:46:2f:
89:fa:52:c1:83:d8:b3:d6:c9:08:d2:d4:a6:a1:41:bc:e7:ca:
1a:e3:cc:2d:0c:a4:a5:cf:18:c7:96:30:3d:65:a0:01:42:26:
66:e9:db:14:55:08:3c:49:56:7a:d6:57:ac:46:41:1c:6a:87:
ce:e2:6d:3f:a0:0d:a4:10:1c:e7:99:e5:79:f4:f0:31:59:e1:
7f:4f:45:3a:ce:18:7f:7c:14:45:1a:9a:ca:91:ad:ef:d8:8d:
11:cb:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:34 2025 by rpki-client