Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e674e62-6e51-3485-ab1b-229fbf274932.roa
File: 9e674e62-6e51-3485-ab1b-229fbf274932.roa (raw, json)
Hash identifier: jLm2BsUtRqMuhEWVxLZrcMRYU3Th0iZRSbDyM2kptdg=
Subject key identifier: BE:D8:63:D9:5E:4B:79:E9:91:DF:E7:32:6C:2A:4E:AA:6D:B2:28:0B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482525B04133F960A18DDDFA40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e674e62-6e51-3485-ab1b-229fbf274932.roa
Signing time: Mon 09 Dec 2024 03:27:44 +0000
ROA not before: Mon 09 Dec 2024 03:27:44 +0000
ROA not after: Sun 09 Mar 2025 03:27:44 +0000
asID: 13335
IP address blocks: 104.16.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:25:b0:41:33:f9:60:a1:8d:dd:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:27:44 2024 GMT
Not After : Mar 9 03:27:44 2025 GMT
Subject: CN=e20c942f-a959-40b7-bbb7-c70229c7243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:bc:01:71:83:f0:d7:18:6b:42:d4:7f:19:
58:af:ca:ad:34:e9:b0:b1:20:f6:68:c7:c1:08:02:
5c:09:ad:e2:7f:f6:76:29:12:f3:12:b3:f6:13:12:
be:40:ce:99:d9:18:6e:ee:be:50:78:04:25:51:4d:
4e:83:74:b7:e7:85:36:b5:b0:6a:12:ef:d0:b2:d9:
8e:27:01:c4:51:b6:92:4c:ae:66:cf:a9:ef:66:9c:
46:83:55:01:99:31:07:a9:1b:72:e4:71:e6:14:d5:
27:f9:30:1a:c4:80:e1:f4:b6:37:78:63:53:46:bb:
0b:2c:eb:2b:7e:3a:d7:42:2a:08:07:fb:4b:6f:e6:
3e:bf:ef:70:44:2f:06:e9:5e:53:95:5a:33:46:b5:
16:e2:04:97:6f:2a:fb:fd:22:fd:5e:88:b0:92:9f:
44:e7:5f:db:1f:83:d5:c8:cc:1d:23:a2:2a:ce:31:
1e:3c:fe:e2:f8:b7:3e:bb:e7:7f:34:11:a6:95:00:
a9:d9:9e:36:f8:92:5f:6c:b6:a3:2a:1f:93:63:a8:
c3:1d:b6:26:a4:18:79:19:74:87:c2:86:3c:65:1c:
46:c6:5f:fc:22:38:64:08:02:29:c5:4c:85:b0:77:
c5:94:e5:c5:3c:45:2b:09:fe:38:76:50:49:de:f6:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D8:63:D9:5E:4B:79:E9:91:DF:E7:32:6C:2A:4E:AA:6D:B2:28:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e674e62-6e51-3485-ab1b-229fbf274932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.16.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:3a:b4:4c:9f:b9:ed:bd:50:f2:5d:28:be:09:bb:29:c7:8a:
6b:da:2a:9c:b2:f7:44:6d:19:2b:75:71:25:7a:e9:be:f6:f7:
0d:a3:6c:99:65:78:25:67:59:5d:de:87:79:1f:2b:a0:40:d8:
ff:fd:7b:6d:fd:f4:77:8c:aa:9c:39:88:1c:7f:ce:cc:2c:f2:
34:72:38:d5:39:1b:ee:71:7e:3f:a9:dc:b0:9b:b6:b3:5d:b4:
c9:7e:b6:a7:ca:46:d8:c6:b4:00:aa:ac:42:02:4e:50:17:1a:
fc:fa:9f:91:c4:ba:ad:f7:14:1e:1d:e6:25:e3:a7:fa:2b:08:
b7:8c:cf:a1:13:5c:ab:70:be:9a:a3:75:01:a9:cb:2e:e2:32:
67:f6:ab:1f:3f:13:b9:29:e0:a6:89:f2:e7:58:53:ab:18:9e:
4d:74:23:3b:da:d2:ea:37:13:6e:ce:a5:ab:ad:fa:b0:66:3b:
87:f5:71:3c:38:03:20:ea:f0:73:2e:83:1d:72:df:02:b1:ee:
05:bb:00:98:64:e0:68:7c:68:a7:cb:45:d9:52:37:8c:5b:e6:
77:79:67:34:8c:79:a1:1b:dd:4b:5c:36:9e:f1:a0:d4:62:50:
77:44:d3:34:70:d9:de:e8:1b:a7:38:3d:a7:ce:ea:3f:ea:3a:
2f:27:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:24:14 2025 by rpki-client