Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa
File: 3db74c7f-b12e-365d-bcb7-4530665d4a02.roa (raw, json)
Hash identifier: xa8dPaq3nd0TVnMzpcLUjs1CsW7+ncNtPZQYhM3tt2E=
Subject key identifier: AA:10:A4:6E:9E:E7:13:4F:7F:F8:E6:11:2B:DE:31:03:84:AF:57:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AC455A8CFC0B4D0F0A56E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa
Signing time: Tue 10 Dec 2024 01:10:31 +0000
ROA not before: Tue 10 Dec 2024 01:10:31 +0000
ROA not after: Mon 10 Mar 2025 00:10:31 +0000
asID: 13335
IP address blocks: 104.31.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ac:45:5a:8c:fc:0b:4d:0f:0a:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:10:31 2024 GMT
Not After : Mar 10 00:10:31 2025 GMT
Subject: CN=b54500c3-7110-4860-b01d-d81419081be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:b7:62:7f:87:2e:91:f1:af:d9:45:2c:36:
de:34:a0:a3:82:e8:8d:93:22:52:7c:2a:f5:76:b4:
54:45:dd:db:dc:c4:1d:5a:ab:3a:13:ea:64:25:7b:
d7:ae:c0:98:1c:07:c5:16:2c:7a:42:dc:16:13:66:
b1:4a:8d:07:e6:65:f0:c8:4a:a4:54:2d:37:43:3f:
68:59:d6:28:d4:f1:94:cb:53:30:70:8e:20:d8:8d:
03:5d:21:82:7c:a5:34:73:e2:b2:a5:8a:b6:d7:73:
23:b6:6d:c3:7f:c7:49:4e:fe:90:ee:86:ce:49:73:
c4:a6:d2:8c:a1:55:2d:63:c5:ec:47:5e:b0:e5:59:
5e:79:28:ee:fa:17:a8:1f:6b:44:4d:bb:20:25:08:
b7:db:98:7c:22:58:57:be:82:68:ac:1e:f7:2f:56:
76:85:44:0b:78:d1:69:ed:3a:51:06:57:68:12:54:
ff:d5:62:d0:51:b1:46:6b:7d:68:e6:d2:ea:e1:8c:
53:81:fd:2b:2c:9d:4f:c4:7e:76:32:0d:c0:64:c5:
c7:f5:7c:d2:e2:9a:4f:50:35:92:eb:c6:96:13:eb:
cf:e4:da:d0:3d:f1:9a:41:bf:f1:e2:6e:77:0a:5d:
e2:e6:96:00:78:58:cd:da:3a:eb:8c:d1:e4:91:cf:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:A4:6E:9E:E7:13:4F:7F:F8:E6:11:2B:DE:31:03:84:AF:57:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db74c7f-b12e-365d-bcb7-4530665d4a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:7a:d3:b0:b5:79:da:1c:fe:26:d9:2e:a0:65:b1:bb:8a:a3:
41:65:be:85:5e:11:1b:4e:8e:c1:18:a1:53:63:2c:af:72:0b:
6b:44:ca:41:02:8a:6c:a7:d7:31:15:ff:7e:01:f9:ab:69:6e:
10:0d:c7:78:77:7e:d2:31:a3:02:14:4f:37:51:99:4c:61:77:
c6:11:d6:2c:89:ad:69:cc:dc:b0:64:cc:8b:70:e2:1a:f6:31:
d0:e2:5e:c4:85:b1:6a:b3:3c:d0:c4:ea:0d:1d:e7:2c:28:2a:
5d:7a:5e:0a:1c:f8:6d:38:08:72:a4:7d:97:02:5f:93:bd:3f:
c3:1f:be:bf:c4:f1:6b:af:b0:c1:00:7e:c4:71:e1:79:ed:b6:
2d:bb:39:37:e3:fc:7e:e2:d9:2c:eb:66:46:af:58:42:47:73:
a5:98:14:a4:52:da:94:00:77:06:8c:8e:29:37:89:c7:e4:2f:
15:0e:fc:9a:b1:e5:ba:b7:2a:37:ee:5f:15:68:62:eb:08:cd:
1c:c7:c1:5e:cb:60:d7:93:7f:eb:2a:97:c2:4c:21:ee:0e:85:
ad:c0:60:4e:fe:fb:d3:85:76:a0:4a:d6:96:85:30:f7:b9:13:
d6:00:f9:10:a5:5c:1d:9b:a5:02:80:da:61:39:7a:d1:51:a0:
8b:48:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:53:15 2025 by rpki-client