Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d787e6c-dba8-337d-919f-239950734e98.roa
File: 2d787e6c-dba8-337d-919f-239950734e98.roa (raw, json)
Hash identifier: 9MGuWD1ER7rAY402blcWw6zFWIh0My0MfQXJzhdxHuU=
Subject key identifier: 86:92:5A:23:EE:39:CC:01:5B:AC:68:E0:B7:6A:A6:45:F4:CD:63:A3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825264C49EA9AB02E233D3300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d787e6c-dba8-337d-919f-239950734e98.roa
Signing time: Mon 09 Dec 2024 03:28:58 +0000
ROA not before: Mon 09 Dec 2024 03:28:58 +0000
ROA not after: Sun 09 Mar 2025 03:28:58 +0000
asID: 13335
IP address blocks: 104.16.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:26:4c:49:ea:9a:b0:2e:23:3d:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:28:58 2024 GMT
Not After : Mar 9 03:28:58 2025 GMT
Subject: CN=25fc215c-7d28-46d4-a978-625ed6c26720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:98:31:43:01:9b:47:69:8d:f6:41:df:e2:
3b:19:57:b0:2e:5b:b3:b6:01:53:e7:1a:49:95:d1:
7e:a6:5d:6a:c6:61:4e:7d:cb:e8:be:38:6d:d6:fc:
39:a0:3c:2a:61:32:bb:ae:9b:4c:33:4d:02:f5:66:
5e:6a:d8:4b:16:4d:05:76:66:52:e1:ae:66:7b:ee:
af:e5:67:16:85:73:04:8b:3b:b6:7c:ac:1b:b9:6a:
ab:87:13:62:98:4d:33:7f:73:22:fd:d4:d2:46:fd:
45:c5:6b:6c:52:7d:5e:ba:e4:b7:05:c2:78:86:f5:
7f:21:f4:6b:55:50:53:ab:c0:f2:06:57:23:96:99:
1a:40:e2:41:33:8a:14:0d:96:34:9e:5e:8c:f7:02:
a6:15:4f:86:e4:d3:6b:ef:39:aa:2c:cf:26:79:f1:
78:b3:02:f2:55:63:9e:76:39:6f:23:ad:a9:da:08:
00:63:35:02:3d:b4:dd:c0:be:f4:f2:ad:c7:8c:9e:
b7:08:c7:69:a1:b8:d9:fe:49:78:a8:1f:f9:0a:c9:
a0:bf:36:ed:21:56:52:73:55:3f:93:f9:b7:84:5d:
f1:4d:15:a6:ba:32:f7:18:4f:cb:5e:a0:36:04:e7:
91:65:98:26:37:a4:c5:01:d1:94:2f:0b:c9:05:a8:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:92:5A:23:EE:39:CC:01:5B:AC:68:E0:B7:6A:A6:45:F4:CD:63:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d787e6c-dba8-337d-919f-239950734e98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3a:30:91:83:db:00:36:e1:8b:b9:6b:78:0b:64:dc:76:24:
ac:bd:30:61:df:4f:63:3e:c8:8f:b2:32:8c:76:c8:97:15:18:
9f:5a:80:ed:96:19:08:e1:0b:69:43:98:99:75:cb:b0:b6:ff:
5e:b2:d7:74:8c:5a:18:c8:19:be:2c:fa:38:a4:ad:ce:86:a5:
dc:2f:1c:b5:c8:c3:a4:5b:74:a7:a0:f2:b9:9a:e8:4f:32:ab:
77:24:c7:23:00:59:ed:fb:46:0b:66:6c:67:09:2c:51:2d:2f:
9a:7a:33:bd:a3:3e:91:fc:88:f6:96:20:b9:86:62:44:4e:f8:
d7:72:0b:7e:7f:ae:40:ef:a6:9e:d7:6d:11:71:05:fe:5d:e8:
2b:bd:c7:75:6c:14:9f:cc:32:53:c6:b3:f9:00:b3:22:0e:ed:
66:8d:32:be:00:fa:cf:30:64:d9:e9:6c:08:bb:c0:a7:a1:93:
5f:55:86:1d:85:d4:17:22:fd:77:d3:5d:7d:46:99:71:6c:26:
28:6f:22:e5:a3:91:86:4f:16:d4:35:11:0a:1d:df:6e:b1:d9:
e2:53:50:87:bb:28:b4:c9:d8:31:8a:5e:e3:15:3e:49:bf:9a:
b9:03:b9:c5:bf:34:dd:0b:a2:bf:ba:57:22:d3:2b:0c:b1:74:
fa:fb:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:46 2025 by rpki-client