Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa
File: 211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa (raw, json)
Hash identifier: oA7+Xc4vz9w2ODLWdfUb/UyrfSHffOqnhq/xfoQTFHM=
Subject key identifier: 78:C0:D6:68:3F:8C:02:2A:01:EB:22:68:EF:C1:75:5A:84:82:5B:DC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254A5346E2F95653370B9D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa
Signing time: Mon 09 Dec 2024 04:41:33 +0000
ROA not before: Mon 09 Dec 2024 04:41:33 +0000
ROA not after: Sun 09 Mar 2025 04:41:33 +0000
asID: 13335
IP address blocks: 104.20.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4a:53:46:e2:f9:56:53:37:0b:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:41:33 2024 GMT
Not After : Mar 9 04:41:33 2025 GMT
Subject: CN=d76ff5e7-bd74-4d96-bf16-96d442aa1dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:65:39:9e:58:44:c5:45:5d:54:f7:4c:e7:
22:8d:5c:67:e2:74:7c:25:de:36:df:29:22:8a:cb:
4a:37:18:0d:06:c9:02:6d:4d:d4:1a:f2:b7:91:14:
9f:d5:67:4f:1a:3c:64:26:c8:e7:ca:49:20:d0:f8:
2f:de:f6:19:65:88:d6:5e:75:df:3d:ce:45:0f:e1:
36:e1:b5:47:83:03:76:0c:bf:f3:18:f0:c4:e5:f5:
a1:6b:3d:a6:5e:ec:28:37:c4:81:77:3d:8d:48:59:
b8:af:57:a5:1b:ae:07:d9:0a:f4:47:2e:6c:95:b4:
59:ae:0b:d6:56:64:68:24:dd:03:3a:3a:52:b9:01:
ca:67:c7:62:a7:bc:7a:c8:2d:ba:65:85:d4:5b:cf:
58:77:5a:d7:54:c6:29:64:dc:0e:9b:ed:fa:b4:ad:
34:dd:d4:17:5c:d0:15:df:a9:6e:c2:5f:37:c3:71:
7c:c6:20:36:6a:e2:ad:66:04:b7:79:7b:9a:cf:fd:
62:4f:fb:86:1d:61:93:71:b1:20:14:95:de:e1:a3:
39:33:43:92:28:30:a5:2f:2f:26:1e:28:76:08:53:
0e:85:73:d6:cd:ab:9a:6d:43:47:2d:16:21:8c:d3:
86:ec:f2:6f:6c:33:57:0e:54:5b:c0:20:0f:7b:b5:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:D6:68:3F:8C:02:2A:01:EB:22:68:EF:C1:75:5A:84:82:5B:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/211fa3da-cdfa-304c-a8fb-c0ed83251c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e6:21:7a:83:10:db:74:b1:ea:96:e0:5a:d0:7f:5d:e7:8d:
b4:41:18:01:2a:9d:92:b8:33:98:f9:b9:11:cb:3f:af:04:5b:
9d:83:55:38:dc:4f:c9:ff:0a:3a:52:65:13:cd:a0:85:6c:9e:
e1:5d:e5:e6:59:d5:d9:bd:8f:f2:1b:8f:54:56:37:84:7a:30:
06:e6:c6:06:cb:de:ad:83:cf:a4:95:27:b1:14:f9:c2:a0:05:
59:24:a3:4c:23:d2:bd:e4:b7:b9:99:f3:03:0a:b6:6a:d9:c1:
25:25:84:2f:54:6c:76:6d:98:c3:55:91:46:9e:85:08:7d:a1:
3f:a3:91:e9:ae:a8:5d:3b:9e:34:20:77:dd:a9:fa:74:43:29:
9d:df:2b:05:02:9a:e4:ba:20:a2:c1:83:94:d2:e4:eb:87:44:
57:1b:05:99:f9:50:56:9b:51:9b:ca:86:72:c3:88:dc:61:ed:
c0:36:79:91:a4:ec:c7:f7:c6:50:83:97:b4:ea:df:e0:1e:52:
68:a0:75:45:96:2a:cf:36:66:0d:02:8b:9d:e3:e9:fc:f8:ad:
de:9a:73:34:86:26:48:89:d9:20:5b:08:6b:df:53:06:ee:b2:
98:b7:fd:b6:ec:e1:30:2d:ba:66:64:78:88:21:fa:d4:c9:f0:
fc:2a:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:07 2025 by rpki-client