Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa
File: ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa (raw, json)
Hash identifier: EO6x6mYT/OlCR/myBavQfN120bla2D+canrbxgQsbq8=
Subject key identifier: DB:17:7D:08:0E:94:F6:B9:84:E0:FE:37:7A:6F:C8:97:A5:16:09:2E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6C35C5C1E24F4822D6940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.19.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:c3:5c:5c:1e:24:f4:82:2d:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=51804eeb-3cc9-47dc-b340-a2ccd8cc5586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:67:f1:78:15:86:2b:c5:94:02:2f:8d:b4:
fa:92:2e:64:05:4f:e6:ff:11:63:da:c3:97:72:4a:
28:68:e7:36:f3:23:7e:99:8d:98:03:62:75:c7:4b:
37:ea:b4:8e:05:52:2e:29:8d:d3:d8:8f:a1:6a:36:
10:7b:87:20:9f:a9:71:9e:9d:2a:28:22:99:b0:37:
84:4c:0a:30:74:8a:93:c4:d9:cf:56:ea:da:d8:6c:
b6:94:50:06:7c:9b:7a:8d:6c:f0:8d:bb:84:64:dc:
17:f9:a9:e9:33:7e:05:d1:e0:74:7d:5b:c5:cb:ed:
fd:7e:36:41:ac:fc:fd:d9:84:65:b9:96:9d:3c:6c:
42:45:db:ab:9d:62:8b:37:dc:56:52:aa:ca:1e:ac:
29:0f:af:36:a9:97:1c:31:5f:aa:23:61:e2:3f:6b:
44:9e:06:94:db:f4:c1:e4:85:97:57:da:3f:4f:b9:
e5:84:39:3e:35:78:9e:c3:80:d6:c3:7c:61:f4:2b:
33:89:0a:9c:7f:e7:f7:b8:73:12:50:57:52:23:09:
0f:3d:f2:56:82:84:dc:bf:4b:db:4c:1e:00:d4:cb:
8a:fe:4e:43:18:36:51:4f:fa:ed:1b:f5:6d:34:13:
02:93:a9:f3:98:10:76:5e:bb:91:25:96:12:63:a8:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:7D:08:0E:94:F6:B9:84:E0:FE:37:7A:6F:C8:97:A5:16:09:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:91:a4:09:89:0b:1b:33:06:04:23:87:2f:77:e2:37:83:23:
98:18:46:c4:87:f9:7d:35:e6:4c:e1:a2:6b:c1:20:d1:80:0a:
ed:51:16:36:77:b7:82:60:df:99:9d:6d:3a:7a:89:c3:02:45:
6e:a7:63:b1:15:1e:4e:a9:bb:7c:a0:7b:b3:4b:6d:b2:a0:f6:
66:01:60:fa:93:96:f4:49:19:88:c5:24:0b:b9:04:f1:78:b0:
60:f8:de:34:c5:fa:02:00:52:94:95:e6:92:00:29:af:41:f6:
48:c3:2c:ab:2b:d6:19:df:7f:a0:e3:73:e7:37:bb:f8:8b:02:
c5:b8:15:7c:9f:22:e3:28:30:42:f4:5e:85:a1:5f:ee:de:50:
e0:84:01:24:44:f0:67:1e:f3:75:54:0b:3a:fb:8b:ba:2e:c8:
25:67:46:64:0d:eb:a6:5a:40:5f:09:8d:a5:69:9c:78:d9:15:
fe:69:b8:f0:90:bd:61:6b:85:10:eb:b2:28:f3:9b:02:64:8e:
1e:d6:63:f6:1e:30:63:1d:af:66:e5:a0:6d:3d:f6:17:07:c6:
66:03:77:65:60:71:54:07:0a:69:d5:d1:d3:45:66:fb:dd:e8:
cf:a5:80:12:1a:52:0f:dc:af:15:33:77:48:0e:f9:86:eb:6e:
db:6b:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:10 2025 by rpki-client