Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa
File: 0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa (raw, json)
Hash identifier: CmNvvhEy290dlHFvBPrWN0riD81iXJj6sempyt8TZYA=
Subject key identifier: 08:D4:95:51:0F:28:40:EB:CE:B1:C2:6B:C9:E5:49:77:98:84:FB:73
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825421D8690B3284212CC5500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa
Signing time: Mon 09 Dec 2024 04:25:01 +0000
ROA not before: Mon 09 Dec 2024 04:25:01 +0000
ROA not after: Sun 09 Mar 2025 04:25:01 +0000
asID: 13335
IP address blocks: 104.18.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:42:1d:86:90:b3:28:42:12:cc:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:25:01 2024 GMT
Not After : Mar 9 04:25:01 2025 GMT
Subject: CN=63e861ee-fd54-4c79-9b18-1d84c10c1a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:c3:d4:76:6a:29:2a:43:1f:0a:09:6b:ea:
6d:17:62:ab:ca:d3:0c:5f:1c:ac:7d:42:38:a1:42:
7d:4c:c4:85:68:97:dd:44:99:b3:e6:d8:c8:85:c3:
6a:00:15:70:ee:ce:e9:c3:96:f6:97:25:a9:5e:37:
6b:75:76:0d:3e:a1:c3:93:af:66:9a:6f:00:f2:a3:
0c:e5:39:cd:1c:50:1a:43:cb:80:89:5e:23:c5:11:
e9:2d:35:85:59:9b:4e:4a:41:fe:7a:b2:fc:af:b6:
f4:a6:4a:dc:a2:05:79:d1:cb:f3:19:70:4c:0c:43:
5d:12:f7:96:54:5a:e3:26:24:be:6f:bb:c6:ad:c5:
16:0c:65:9c:c5:35:6d:76:62:3e:10:bf:6d:07:bb:
94:2d:c1:88:db:9f:83:7f:28:fe:1e:3a:0b:8c:9e:
b9:ea:9b:9c:f8:ea:8d:6f:51:15:25:b8:8c:c3:4b:
8c:0b:b8:15:64:ea:4b:4e:0b:93:e5:93:6e:bb:4d:
80:4b:5a:66:01:ca:05:b0:a1:36:0c:a6:db:a4:06:
d6:9c:bb:f7:c4:c2:6f:ed:7f:49:87:71:7f:cb:3a:
57:ce:9a:a9:d0:da:7d:20:be:c1:cb:41:12:eb:4d:
ef:b1:a3:15:c7:57:e3:96:86:f5:00:5a:14:5b:67:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:95:51:0F:28:40:EB:CE:B1:C2:6B:C9:E5:49:77:98:84:FB:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f843f25-bdf5-3cf2-ab5b-2c54d5d30942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b8:61:a9:33:90:6e:d9:29:3d:7e:d8:c1:29:ea:06:3a:95:
2d:e9:54:1a:f4:b9:b8:20:68:5b:c8:2c:89:5c:29:20:f6:84:
09:40:44:c6:59:cd:44:15:a2:d8:28:75:82:76:49:ac:69:9c:
ea:8e:39:9e:11:49:51:ee:9d:f0:cc:e5:3d:a6:12:d9:4b:05:
75:99:ef:81:44:53:e4:c8:d7:42:29:5b:e8:6b:ff:97:5e:b9:
8e:07:a8:8c:e0:17:ed:0a:59:91:84:86:e9:51:7c:7e:4c:51:
14:fa:57:9a:c8:1c:71:79:df:c9:32:84:e9:ca:ed:63:7e:aa:
aa:e7:4a:04:82:b7:24:d4:83:84:55:6b:cb:0e:c9:15:96:e9:
b0:83:bb:5e:d9:7c:b3:41:ce:f3:31:a5:bb:40:a0:ba:62:91:
3d:70:27:1d:d6:eb:f9:04:ce:82:fe:d8:34:5d:5b:e4:40:25:
ec:85:f9:1f:a2:eb:c6:18:38:f7:4f:db:a0:e3:dd:74:3f:11:
bf:b3:7a:75:3d:70:0a:17:8d:3f:2b:cb:d6:19:46:d0:3b:17:
31:dd:c0:e5:da:40:88:71:97:13:85:32:17:39:83:c4:fc:e2:
49:95:06:04:2e:93:73:0b:66:7f:69:5b:60:2a:d3:5c:19:f6:
10:84:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:49 2025 by rpki-client