Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa
File: 5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa (raw, json)
Hash identifier: 9R0f2FnxhoYL7IVhF0Ku+Z9WKZAWaC85qNVCTaYbdww=
Subject key identifier: C5:90:A4:E2:58:25:CB:D9:27:8D:57:F9:A7:6E:0A:89:22:15:09:7C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255A6241910BFF1140B1A880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa
Signing time: Mon 09 Dec 2024 05:13:54 +0000
ROA not before: Mon 09 Dec 2024 05:13:54 +0000
ROA not after: Sun 09 Mar 2025 05:13:54 +0000
asID: 13335
IP address blocks: 104.25.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5a:62:41:91:0b:ff:11:40:b1:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:13:54 2024 GMT
Not After : Mar 9 05:13:54 2025 GMT
Subject: CN=04cb2828-e794-4986-a315-7ff12685edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:d6:cb:d0:b1:78:22:e4:99:dd:97:3d:b4:
fb:97:5a:e6:d1:81:46:66:fc:fc:fc:da:7f:92:c2:
95:ec:25:76:cb:41:e0:a8:a7:ce:c0:2e:1b:27:9e:
45:1b:77:36:41:68:a1:91:0c:a5:ce:d4:0f:a5:62:
be:8e:6b:86:0c:db:c4:23:ee:af:dc:7a:10:c1:3e:
8d:03:a7:15:4b:f4:44:9e:62:05:dc:4f:9e:92:25:
09:f9:dd:37:1d:95:d2:d2:f6:25:4c:44:be:ed:2f:
e1:04:6d:2e:9c:31:bf:8a:4b:6b:62:e2:dc:21:c9:
f1:1a:ee:24:d3:cc:48:96:10:0a:72:50:c6:72:46:
03:db:e6:52:8b:f3:04:15:18:f2:24:da:34:25:fc:
27:47:f7:e2:c9:31:fb:88:cb:ae:af:6c:e9:1f:02:
7f:78:4b:97:b8:3a:5c:46:ea:c8:30:ac:47:d0:cf:
5f:04:a4:7d:d6:f6:60:94:73:ee:32:9e:ad:fc:bc:
75:f9:15:23:83:7e:a5:45:34:c3:dc:4d:b1:a6:48:
3f:14:5c:65:26:ff:ad:04:15:75:9c:6e:8d:e7:10:
1d:9b:e0:48:3d:15:ae:49:61:b0:80:c6:4c:f7:c4:
8f:6a:69:df:c9:e4:61:37:1e:83:6f:f3:63:f2:10:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:A4:E2:58:25:CB:D9:27:8D:57:F9:A7:6E:0A:89:22:15:09:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fb8f8ef-4d21-3aed-ac5b-fda963ccfba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2e:7a:f3:7f:60:ea:a7:d5:78:98:82:ed:0a:70:c3:7b:23:
6a:da:32:d9:db:ef:31:8d:1c:23:0d:c0:6a:39:61:41:e3:4e:
d9:3e:f2:8f:0e:2f:03:29:40:b7:7a:52:a6:3a:80:98:8d:d9:
6a:a1:4e:3f:05:b3:ef:c3:56:c9:57:a1:9a:0f:4a:5b:41:19:
6e:6b:94:15:95:e9:3c:5f:8b:11:55:70:b3:43:ce:ca:4b:68:
fe:89:4a:8a:b5:c3:67:78:66:fc:f5:a8:eb:8c:1a:fa:6a:7c:
6c:8b:92:f9:fc:96:07:fc:1b:42:ac:55:4e:91:0e:9a:ca:13:
f5:90:72:f6:c1:8f:09:ac:19:8f:ef:9c:d5:a3:35:a8:3b:30:
4e:02:f1:0d:67:ef:f2:0d:b7:83:5f:99:3d:1f:be:48:97:d0:
98:ed:ff:a9:1c:65:ba:93:c6:70:23:6b:39:fc:b3:af:99:01:
fc:ab:f8:98:14:d7:e5:f8:ac:6b:68:d9:88:aa:8e:72:ef:2d:
20:80:27:4d:77:6d:ce:40:49:dc:89:2a:ea:3b:b2:b0:a9:13:
7f:27:a4:ae:e3:f1:ec:ba:41:6d:a1:4d:50:48:68:98:46:3f:
6a:11:b5:2c:bb:16:e1:8d:68:2b:18:12:24:8b:68:73:c4:5d:
15:56:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:03 2025 by rpki-client