Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
File: 8a7366dd-e22b-3889-8006-d4eb02fd6707.roa (raw, json)
Hash identifier: Y57nIUyy9L4uHCfwnHdF5DBZGWpcPRxSbYieBlTC050=
Subject key identifier: C5:56:BC:36:8E:3E:CC:4A:45:84:54:BC:FD:50:EE:A1:BE:B3:2E:6C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AC11544018FDAC8E613200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
Signing time: Tue 10 Dec 2024 01:10:06 +0000
ROA not before: Tue 10 Dec 2024 01:10:06 +0000
ROA not after: Mon 10 Mar 2025 00:10:06 +0000
asID: 13335
IP address blocks: 104.31.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:ac:11:54:40:18:fd:ac:8e:61:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:10:06 2024 GMT
Not After : Mar 10 00:10:06 2025 GMT
Subject: CN=3cbab198-c10c-4802-8127-b6ee7587077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:bf:e8:4c:22:f9:98:01:6a:a0:90:92:e0:
9d:b6:84:c5:e2:55:76:e8:3a:5e:3e:b3:a3:e6:c9:
0a:88:2e:d2:0f:80:63:73:a9:3e:9c:28:ac:e7:29:
9c:e8:66:39:0e:14:2c:1f:2f:41:43:f1:7e:7d:96:
2e:42:56:fd:66:a1:ec:73:dc:e4:09:ee:2a:0f:41:
74:15:8d:26:a1:a9:9d:c7:f7:a5:91:40:3d:b9:12:
ff:78:3e:0e:35:ea:4d:4c:8c:0b:39:35:fd:4c:db:
f7:db:be:7b:bf:67:7f:83:3f:8f:4c:d7:20:2c:83:
b4:9a:64:9a:9a:8b:81:33:87:3c:a8:5b:54:b3:11:
49:ec:37:62:7e:67:54:de:2d:1a:c0:79:03:82:08:
9b:4a:a6:bd:66:fd:b3:36:15:8c:2d:f9:02:d7:55:
48:6b:87:87:4f:47:9d:82:0e:92:fc:28:9e:9b:0b:
2a:95:72:28:59:db:d9:46:07:0d:b4:42:fd:52:0e:
8d:4b:a1:83:1c:22:06:15:03:ad:b6:a7:2e:21:91:
d7:36:7c:e2:ec:1e:dd:c3:53:29:5a:ee:82:da:49:
19:37:e4:96:5a:96:de:cb:9a:a1:ad:1a:c9:a5:6f:
95:c6:66:b3:35:8f:2d:ba:68:d7:07:a2:6c:a0:12:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:BC:36:8E:3E:CC:4A:45:84:54:BC:FD:50:EE:A1:BE:B3:2E:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a7366dd-e22b-3889-8006-d4eb02fd6707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:29:09:50:ce:1d:94:66:2b:81:0d:3d:03:84:a5:01:8f:7f:
ef:26:e8:d7:af:cc:85:df:77:bf:74:37:11:6f:df:5f:0d:3c:
43:78:bb:6c:2e:fa:32:f1:de:2b:5a:75:9e:5b:2a:ac:89:bd:
86:1f:47:5e:f7:39:23:53:fc:a5:dc:eb:8a:a7:a3:b4:19:ec:
d8:75:84:cd:0d:7c:6b:20:b7:6d:b1:24:93:92:dd:80:78:7d:
4a:6b:b0:07:ad:84:25:33:b8:04:1e:bd:f0:3d:7c:81:c4:39:
63:7b:bd:de:e9:6d:10:91:35:6f:65:03:55:7e:f0:4f:1c:c5:
b8:df:ed:c6:5e:4f:84:60:8c:f8:03:cc:37:69:73:d3:2c:14:
82:ca:c0:78:90:1f:3c:a4:0a:1a:89:d5:2f:d0:2d:94:44:6f:
bc:91:74:a4:04:c1:53:e8:e1:88:44:62:c5:b7:6c:88:6f:48:
e9:1d:22:14:ea:3c:78:23:25:d4:1c:3c:14:84:25:94:29:45:
eb:07:39:d4:35:7c:98:96:8c:9c:26:f2:c9:c5:02:51:54:6d:
d6:90:4b:9a:4d:87:fe:cb:9f:7b:2b:83:77:86:db:4e:8f:98:
34:1c:c8:8d:8d:05:cd:f4:bb:ef:db:ee:b8:c9:25:81:26:92:
95:af:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:59 2025 by rpki-client