Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa
File: 5733aaff-6788-3f49-afa1-3260b9ee26bc.roa (raw, json)
Hash identifier: TCAOQpyXz1edsZqdKqwUWEfpyORX3Eyu+trJ46SY2sE=
Subject key identifier: 13:15:75:C3:84:F8:6E:BF:4E:63:D0:DB:8B:CC:38:F0:0B:6B:54:6F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825491951EB87B36FF53DB280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa
Signing time: Mon 09 Dec 2024 04:39:05 +0000
ROA not before: Mon 09 Dec 2024 04:39:05 +0000
ROA not after: Sun 09 Mar 2025 04:39:05 +0000
asID: 13335
IP address blocks: 104.19.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:19:51:eb:87:b3:6f:f5:3d:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:39:05 2024 GMT
Not After : Mar 9 04:39:05 2025 GMT
Subject: CN=c2697451-9fe8-48ce-b8ab-c2ad32cceb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:fd:ab:e4:9e:29:ff:b8:dc:12:0b:fc:41:
2c:f8:44:a3:9e:85:1a:90:77:69:0e:32:00:5a:c4:
30:5c:df:1d:9a:22:54:41:0e:2f:7d:51:6b:21:6d:
ba:76:b9:9d:e4:cf:b9:b1:29:83:3b:d2:41:bb:12:
16:9e:3b:10:91:f2:c1:9f:cd:fd:97:83:90:f1:55:
86:f9:80:bc:99:ec:80:1b:f9:75:5c:4c:cf:48:3d:
14:e9:3b:ab:c8:59:1e:cf:d8:ce:81:e8:c0:5a:b3:
0c:b5:42:d4:84:c5:58:42:1a:39:4c:7c:a8:19:b9:
b1:f3:ee:b7:ae:0d:8c:d4:bd:8c:a6:8d:bf:8a:de:
7b:ec:50:c9:fe:8f:02:4b:1a:ce:dc:34:72:8e:37:
b6:08:d7:a9:d3:b9:e2:4b:c3:0e:73:ed:2b:27:25:
c0:68:2c:88:81:40:65:62:b3:4d:46:ee:31:1c:54:
e8:76:ae:0c:98:dd:be:2b:d5:c2:64:57:05:8d:6d:
e4:71:0c:08:cc:cd:f0:6d:ea:6f:36:10:1b:cd:9e:
31:32:21:66:a2:79:93:8e:78:e2:09:2d:2d:52:da:
24:7f:8a:b6:04:7c:ee:7f:69:19:5d:fe:eb:84:29:
22:d8:ed:73:a4:ff:02:cd:8a:f5:bf:61:d3:b4:48:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:75:C3:84:F8:6E:BF:4E:63:D0:DB:8B:CC:38:F0:0B:6B:54:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5733aaff-6788-3f49-afa1-3260b9ee26bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:72:2a:2c:e7:65:ef:8c:12:95:a6:a9:2c:57:1f:bb:62:1c:
5d:1a:9f:c3:34:43:2f:37:75:f7:eb:9e:15:fe:9c:2d:66:e3:
5c:80:ec:0f:53:e7:32:a1:fa:67:0c:11:4b:34:83:e5:0d:1b:
88:fc:ab:c3:b9:7d:6c:b3:7b:f6:6b:96:e9:05:09:c2:74:e5:
35:b4:2b:8c:2b:db:ee:0e:65:5c:75:c8:2d:ea:6e:0c:9c:ae:
ed:d2:2b:4d:79:24:40:b5:a8:b1:5f:02:ff:c4:c1:f4:9b:6b:
1d:f7:37:8b:78:78:4e:e5:4a:b5:06:d7:e2:a9:4f:f0:a8:7c:
46:4e:03:e2:3d:e5:21:ca:ad:5d:cd:3b:ac:4b:f3:48:1f:dc:
26:03:33:55:1d:2f:36:b7:40:0f:2c:fb:9d:33:4a:7f:4f:fd:
36:a8:ae:97:e5:37:9b:fb:8c:3a:5c:a4:7f:10:ab:82:20:6b:
d2:70:c0:c3:53:ba:d3:35:5d:df:03:4d:ba:c7:94:c5:ca:af:
52:50:15:10:4c:c0:0d:ff:1b:77:43:ca:05:1f:c7:a1:5f:f4:
37:4d:78:6a:60:75:d5:1d:ab:dd:0f:d3:4c:b9:6c:09:5b:3b:
4e:86:c6:de:d6:65:f5:fe:14:8f:cc:89:83:f1:b5:c4:3b:fc:
f5:21:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:51 2025 by rpki-client