Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9df31d8d-d5ee-3040-89e3-17f00accc17a.roa
File: 9df31d8d-d5ee-3040-89e3-17f00accc17a.roa (raw, json)
Hash identifier: Fz01iokOn0hXFzm7Tt6HkRuLB4AiPzwMuE9r+sXno2w=
Subject key identifier: 2E:78:8D:F0:10:DB:5E:65:B5:F4:44:D1:07:8D:09:EF:F3:41:19:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255951F06CF8EDCF7EC91D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9df31d8d-d5ee-3040-89e3-17f00accc17a.roa
Signing time: Mon 09 Dec 2024 05:11:46 +0000
ROA not before: Mon 09 Dec 2024 05:11:46 +0000
ROA not after: Sun 09 Mar 2025 05:11:46 +0000
asID: 13335
IP address blocks: 104.24.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:59:51:f0:6c:f8:ed:cf:7e:c9:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:11:46 2024 GMT
Not After : Mar 9 05:11:46 2025 GMT
Subject: CN=f36174c2-a5f2-4961-99cf-83851c3f0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:59:4f:0b:fb:9d:77:3c:ad:57:e9:9c:a9:
ab:0b:78:a2:8b:47:60:d9:87:5d:df:89:f0:dc:91:
d2:01:c9:d2:37:19:9c:b0:12:9d:32:41:18:31:b6:
33:c9:2e:b9:6f:04:e9:18:9c:01:90:e5:ce:cc:ff:
cd:39:e7:0f:7c:da:53:d4:4b:5a:5d:13:17:4a:4e:
85:93:61:64:75:6e:c8:45:f2:ef:7a:b5:33:e5:e7:
d0:d5:65:39:24:0b:00:05:57:1d:24:eb:c5:60:21:
07:ad:e9:1c:79:cd:45:04:12:0f:6f:12:e6:b8:72:
ca:2e:02:e9:b6:a5:ee:e3:87:55:d8:cb:93:2d:ba:
f6:73:bc:2b:9e:3f:ef:7d:23:26:7c:4f:4c:a3:9f:
2e:26:ce:20:62:4c:47:c7:a9:9e:0b:f2:49:85:5b:
18:43:5b:eb:a2:56:ff:ca:cb:f8:e7:60:27:58:b8:
9d:8b:b0:dc:e7:37:f2:c0:f8:df:8e:61:e8:f4:8f:
f4:fc:00:a8:b1:2c:7d:cc:1b:a0:a0:ce:93:d8:5b:
4e:ce:a8:89:72:ea:bc:73:cc:8c:38:d6:6a:8f:1c:
70:cb:14:b8:20:1d:90:b5:23:c7:49:6f:83:1b:6b:
c4:50:c2:07:70:8c:da:a8:ca:2b:90:ce:b7:ec:b5:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:8D:F0:10:DB:5E:65:B5:F4:44:D1:07:8D:09:EF:F3:41:19:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9df31d8d-d5ee-3040-89e3-17f00accc17a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.24.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:29:b0:5a:81:87:9f:77:34:fb:e9:a0:91:29:3b:0c:81:bb:
f6:8a:ef:ab:c5:07:19:87:73:91:d2:b1:a3:41:70:a5:02:c9:
50:9f:aa:be:d2:79:14:34:8d:36:d1:f2:9d:c9:38:7f:b1:85:
d9:d2:df:c6:79:5b:90:5a:de:9b:83:95:95:16:e5:27:2e:aa:
34:f3:28:41:ba:74:99:84:c3:07:59:9b:a9:8f:0c:82:d8:d7:
55:cf:6e:fa:87:f0:8f:a8:0d:20:ee:ea:95:66:44:01:00:78:
9a:30:ec:90:ca:dd:c1:7f:4e:ee:3d:7d:e2:11:58:2c:3c:30:
fd:25:56:4e:c2:e6:ec:3f:31:43:41:e0:88:84:28:64:77:16:
c6:43:72:f1:c1:30:6d:23:70:6c:d9:90:ce:15:ad:fc:08:a5:
b9:7d:c3:05:ac:17:07:63:21:33:62:60:20:70:c6:37:a4:c1:
12:2c:37:45:26:c3:5c:a6:91:22:8b:a8:38:c8:79:5b:b7:8d:
5d:7d:50:f4:4d:24:fb:08:97:74:cd:93:c7:9c:f9:78:0e:c1:
22:4d:0b:c4:68:5b:d7:e7:1d:16:e6:5e:7b:99:f7:e2:39:f0:
79:40:b4:71:c9:09:e5:33:e5:62:db:e1:43:ba:ec:4d:a1:39:
33:a6:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:23 2025 by rpki-client