Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43db48ed-8413-3a9f-937e-d6132a765a4c.roa
File: 43db48ed-8413-3a9f-937e-d6132a765a4c.roa (raw, json)
Hash identifier: oTXby+qm9N3Uhkm6NGbYpFcPIDFV5ihsx5oOoj86nuY=
Subject key identifier: E3:6E:A9:F5:3D:AB:2C:77:68:7D:C7:53:C7:1E:26:4B:46:A9:DE:A2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255A1CB0F3F4A7F85026D350
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43db48ed-8413-3a9f-937e-d6132a765a4c.roa
Signing time: Mon 09 Dec 2024 05:13:22 +0000
ROA not before: Mon 09 Dec 2024 05:13:22 +0000
ROA not after: Sun 09 Mar 2025 05:13:22 +0000
asID: 13335
IP address blocks: 104.25.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5a:1c:b0:f3:f4:a7:f8:50:26:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:13:22 2024 GMT
Not After : Mar 9 05:13:22 2025 GMT
Subject: CN=d504e46b-c115-4c7e-b299-9ca72bdfd3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:39:08:70:2a:d9:10:cd:f5:2c:47:19:0e:
2d:b4:7a:39:bb:eb:ae:7b:13:05:dc:c3:e5:40:8c:
1a:b7:f3:d8:b0:4a:14:3c:8d:46:30:88:2c:54:5a:
f5:6d:2b:71:49:f7:c0:36:62:0a:67:0a:f0:37:c1:
22:e5:45:e5:f2:6f:ed:86:9c:50:e0:9b:8f:f5:fc:
73:27:af:98:ad:5e:05:0c:3d:4d:52:c9:37:96:6f:
a7:ec:b8:33:c9:28:99:b5:1f:a5:56:37:18:9c:82:
14:54:4a:9e:f2:38:6a:4e:16:30:45:46:4a:a8:bb:
0b:aa:ca:74:2e:7c:79:5c:b0:fd:b1:cb:61:56:71:
fb:70:b2:5e:e4:d1:21:db:fb:ce:50:0a:1a:3a:25:
5b:43:ad:65:19:71:bc:88:ca:52:23:11:0a:35:0e:
5e:9f:f5:52:7e:3c:76:7c:1a:df:30:5c:c3:e6:00:
19:fe:f1:3f:c7:7d:7d:bb:7d:af:06:2c:02:5c:d4:
f2:01:02:76:c5:f6:34:2b:29:29:08:63:2f:4e:d0:
26:74:39:e7:68:5b:8e:7c:48:a8:c1:de:9b:10:19:
b3:01:05:b1:a3:88:69:9e:cc:0a:e9:eb:20:9a:f8:
64:f0:e7:42:21:a4:ce:59:8c:bf:ef:30:b4:df:8b:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:A9:F5:3D:AB:2C:77:68:7D:C7:53:C7:1E:26:4B:46:A9:DE:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43db48ed-8413-3a9f-937e-d6132a765a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:c2:74:6b:e8:cd:54:d5:cf:37:97:27:fe:61:c8:39:2e:56:
af:f7:48:9d:95:34:c9:99:01:3c:32:0a:b6:c5:71:05:b4:d0:
af:da:83:2f:12:d3:5c:2a:5d:f0:ac:00:08:36:d2:da:46:49:
2e:b4:4a:15:b1:25:37:bf:6c:c3:8a:79:34:d4:0e:bf:ce:70:
88:02:1e:85:c4:91:8b:a6:64:4c:e1:70:d4:d7:9d:f9:ff:4e:
8b:6a:8d:19:cc:a5:0e:69:fe:34:25:c1:db:79:5e:b4:c7:e0:
50:3e:76:5a:1b:c6:66:62:f1:ee:cb:05:41:06:27:8e:5c:ce:
60:ab:a8:5d:7f:3d:01:11:9d:80:d6:d0:d7:d8:50:a9:0b:76:
a9:61:cc:25:f8:79:b1:12:61:02:d2:72:6b:e7:e9:4d:59:22:
c1:7b:a9:8e:24:0e:0f:ca:37:7d:1d:8c:6d:69:6b:e7:23:5f:
b1:7e:60:c9:89:59:ca:fd:ba:1a:52:8f:9d:0a:c2:d9:57:ab:
b4:35:06:0d:bb:30:6b:da:6c:f6:04:2e:71:23:19:f0:ae:cb:
e2:ac:c0:33:59:2c:27:be:be:19:0b:03:24:c6:b2:76:93:c1:
23:25:5c:9f:31:99:65:6b:ed:ef:70:62:bc:10:2f:df:ae:de:
9f:20:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:28:51 2025 by rpki-client