Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa
File: 4d40595a-41f2-3ac1-9657-ddc78350cd29.roa (raw, json)
Hash identifier: Yl3M2dx89AUG/sPlxl9suNH00mQ8G8Ea3Pz/B4KPJfc=
Subject key identifier: 2A:60:D4:7A:06:4D:60:86:CF:C8:83:17:6A:B2:4C:1A:33:58:F1:53
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825494D1FDAB2412331022340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa
Signing time: Mon 09 Dec 2024 04:39:29 +0000
ROA not before: Mon 09 Dec 2024 04:39:29 +0000
ROA not after: Sun 09 Mar 2025 04:39:29 +0000
asID: 13335
IP address blocks: 104.19.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:4d:1f:da:b2:41:23:31:02:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:39:29 2024 GMT
Not After : Mar 9 04:39:29 2025 GMT
Subject: CN=1abfca55-5f18-49e5-8820-e5f3b7400e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:0d:e1:a1:f3:58:10:08:33:97:59:24:b4:
d5:38:6c:9a:28:5b:7a:3e:16:ad:36:ce:33:66:fd:
9e:35:d1:cf:94:e7:a4:e0:29:a0:07:c6:e9:16:83:
11:25:66:f8:db:36:06:b1:46:4c:fc:a9:d0:51:25:
15:9e:fd:22:47:f9:8a:d4:75:1e:8c:82:73:eb:85:
36:ca:12:7b:3b:88:86:07:09:fb:83:25:46:10:2d:
55:d7:fe:5f:4f:a1:8a:c0:c9:fa:49:5d:8b:ff:f8:
29:4e:c7:20:39:d7:31:6a:d0:0f:76:30:6e:81:c1:
32:e5:34:da:6b:95:a8:69:97:15:5e:14:a0:96:ae:
44:ad:4e:8a:3b:5f:3f:9a:68:e9:5f:85:94:7f:0d:
8c:72:bc:0a:64:b0:ea:47:40:73:3f:b7:16:7f:c1:
66:4a:eb:0d:c8:69:5f:4d:41:6a:69:0d:d0:ad:62:
89:76:8c:db:93:e2:19:51:87:32:a3:8e:74:d5:ea:
eb:64:bc:b8:cd:f5:c5:d3:6b:57:b8:b1:22:40:50:
92:05:5b:ed:2d:b7:22:df:37:4d:d8:29:d5:91:3d:
2f:d2:b5:9c:ca:2e:eb:d8:1b:69:98:ba:b9:46:f6:
5d:b6:72:5c:39:ec:ea:30:2d:ab:26:5c:4b:30:59:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:D4:7A:06:4D:60:86:CF:C8:83:17:6A:B2:4C:1A:33:58:F1:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d40595a-41f2-3ac1-9657-ddc78350cd29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:54:fd:70:bb:e2:69:8b:aa:af:ea:04:ee:07:e4:7a:4d:86:
4b:fc:71:ad:53:de:81:42:61:ac:bf:a3:d9:f7:45:be:a0:6d:
a1:f6:b8:51:03:88:54:1c:e1:01:1b:e3:b9:54:4f:00:04:63:
a9:ff:61:f2:91:ac:4c:ac:a7:ac:24:9f:06:78:c2:63:c5:7d:
e1:8f:21:f9:27:a3:33:26:1c:43:9d:29:97:3c:88:6e:7b:96:
ac:61:e7:67:19:a1:16:81:ca:90:ad:03:d4:90:71:00:21:89:
23:3e:5e:c7:67:cc:d1:c0:bd:ef:d1:f1:96:ac:e4:fa:64:cc:
3b:72:cb:31:2b:67:98:46:d5:16:28:9b:06:a5:3d:b8:e9:e8:
28:3f:56:9c:bd:31:15:ca:64:6c:19:e9:90:fb:2f:b2:e7:2c:
f1:1c:93:37:f7:5c:17:e8:4f:c8:f8:47:f7:ad:0c:90:db:4e:
53:44:a8:e0:6b:e8:2b:17:18:1a:0c:2f:ac:00:64:81:fb:72:
da:b1:2d:d8:0e:2d:2a:84:dc:25:ce:1c:0f:a8:a8:03:8d:d5:
50:b4:40:e6:a2:48:49:e3:b3:ca:77:d4:4f:95:fa:5b:11:29:
ff:98:c5:bd:d3:6a:24:38:be:35:04:a2:d9:13:39:e7:99:99:
62:79:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:30 2025 by rpki-client