Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
File: 5f27d521-7a00-308c-a254-7b4b123cddaf.roa (raw, json)
Hash identifier: IkCTXaE9uHDHz/MxwYqWPVFvVM5uf41XIBuXHMFJ0qQ=
Subject key identifier: 65:25:1F:35:78:DE:EA:78:4F:9E:1C:B1:57:D0:42:1F:5D:BE:6F:7F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825488C42E434F1D2361AED58
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
Signing time: Mon 09 Dec 2024 04:37:58 +0000
ROA not before: Mon 09 Dec 2024 04:37:58 +0000
ROA not after: Sun 09 Mar 2025 04:37:58 +0000
asID: 13335
IP address blocks: 104.19.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:48:8c:42:e4:34:f1:d2:36:1a:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:37:58 2024 GMT
Not After : Mar 9 04:37:58 2025 GMT
Subject: CN=7f06fcb6-3dec-4d95-946b-c77d6925436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:da:a1:0f:73:6e:a3:81:a3:21:b7:8a:9c:
72:b2:18:70:c7:c0:d6:35:bf:36:44:9d:85:dd:46:
27:bf:3d:5c:9c:fd:94:7e:a9:0f:cf:da:a9:29:19:
fc:66:34:c9:39:5e:cb:56:70:d2:45:0c:21:7b:38:
15:c9:45:6d:6b:b4:da:86:68:f3:c2:7e:b0:8c:09:
b5:25:42:3f:d8:32:4b:45:42:83:42:e4:50:d6:0b:
9a:44:74:c8:82:2c:f3:cc:74:d0:68:42:0a:1a:8e:
92:0d:74:25:90:52:69:b7:af:22:b2:8c:f5:88:23:
1d:bb:2b:e8:70:a3:ce:02:a3:61:60:e7:25:85:4f:
47:9b:4f:cf:48:4f:c3:3f:0b:c6:d7:73:c9:c3:a1:
fb:e7:a4:73:70:8e:68:82:d6:07:ab:4a:77:a2:71:
d7:e5:5f:1c:5f:71:b0:98:7a:24:df:32:16:dc:93:
05:5e:06:23:e3:7b:fc:11:60:7c:56:d0:b9:ac:77:
2b:33:dc:7f:04:57:6d:6a:85:f6:89:a5:ed:e6:c9:
eb:02:8d:93:89:d8:85:74:a8:e2:04:da:b6:71:29:
99:90:21:23:18:15:7e:04:54:4a:55:c2:11:12:6d:
10:21:08:85:27:c7:f3:14:71:60:38:4a:bc:3e:79:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:1F:35:78:DE:EA:78:4F:9E:1C:B1:57:D0:42:1F:5D:BE:6F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.19.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:20:19:ce:e0:65:e0:39:94:d7:50:55:85:db:d0:4c:1b:16:
b1:85:b6:8b:a9:23:df:0e:c6:13:7a:6b:ef:8d:40:c0:cb:3d:
c0:4a:e2:70:89:4d:1b:78:c4:33:c9:26:13:9e:2c:a4:8e:a8:
40:bd:3c:f1:15:4b:ef:22:e6:ba:2e:72:b1:c7:4d:d4:0e:47:
e4:3c:ce:b9:c8:ea:a8:f5:46:63:52:72:f1:55:df:ca:a0:57:
db:38:7d:a7:45:60:ec:0b:11:75:8e:37:7d:5c:3c:ad:d2:88:
15:38:b4:9b:66:f5:44:22:07:71:af:65:a4:43:4e:84:2b:7d:
cb:18:ff:bf:42:c9:53:8d:fd:90:91:e9:26:91:18:61:9c:0d:
40:25:52:9f:54:c4:af:10:92:38:96:aa:e7:b1:92:74:97:17:
60:9a:f3:2e:7e:d3:2e:75:9d:82:68:92:ec:2a:2c:19:a6:dd:
54:a2:bd:90:eb:0e:87:11:9c:92:cf:36:6a:46:f7:73:8a:bc:
a8:8a:c6:ce:95:07:89:8e:ba:d4:14:c6:e4:5d:73:3c:1e:39:
e1:f2:08:77:bb:10:be:5b:cc:84:4f:a0:08:7b:f7:46:cb:cf:
9d:27:30:0f:9a:4b:5e:26:93:7a:b8:92:39:44:b3:24:23:4b:
1e:35:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:09:40 2025 by rpki-client