Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa
File: aabba271-a15d-3720-a297-6d87452eee21.roa (raw, json)
Hash identifier: VxcfWbT6woF5giRg2ajmsB1aYEuK593sLmmQQRrIpUg=
Subject key identifier: 09:F2:AF:9E:95:03:7B:52:88:99:83:0B:F2:4D:8F:1B:47:6F:FB:3A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255A9727C0280ABE5F386160
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa
Signing time: Mon 09 Dec 2024 05:14:19 +0000
ROA not before: Mon 09 Dec 2024 05:14:19 +0000
ROA not after: Sun 09 Mar 2025 05:14:19 +0000
asID: 13335
IP address blocks: 104.25.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5a:97:27:c0:28:0a:be:5f:38:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:14:19 2024 GMT
Not After : Mar 9 05:14:19 2025 GMT
Subject: CN=fd5c860a-6ba2-46fd-8472-54b6dbf581a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:86:1d:b6:2b:da:f0:27:47:89:99:f0:54:
48:4b:e7:95:5d:f5:1d:8f:77:75:be:1f:60:02:c7:
1f:2f:c0:09:6f:cc:5c:5e:53:06:c3:a7:d8:00:48:
78:09:ee:85:df:31:a2:de:2c:60:00:9b:ba:d3:cf:
55:b7:da:e3:5f:91:5d:5f:d8:ae:50:76:7d:bf:3b:
da:d2:5f:10:bd:a5:4c:50:fa:50:b3:c9:e6:c9:45:
a8:46:99:68:15:5e:7b:27:be:ee:8c:30:ac:14:b1:
53:26:01:ed:54:9f:33:ea:35:24:81:87:3a:96:e4:
ef:b9:ad:d5:3e:4a:da:a1:cd:4c:8b:14:c0:7e:47:
9f:2d:ec:c6:29:b7:65:01:55:2e:1d:43:a1:b3:27:
98:9e:16:7f:12:5f:d6:29:84:a2:4b:c2:bc:50:29:
48:f6:b0:81:26:fe:e8:52:c2:21:51:04:d9:a8:02:
57:3a:b8:7c:f3:5e:ce:ca:6a:f7:42:1b:3c:85:94:
6b:8e:10:ca:e1:eb:b1:a8:19:e8:e3:18:b9:69:41:
b5:53:c1:95:3e:46:4d:a1:3e:18:93:ab:d6:26:ef:
50:fd:38:ba:61:fa:a6:19:c6:76:0f:d9:26:30:5e:
bf:39:00:2c:88:c0:a5:2d:05:85:54:8e:30:72:d4:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:AF:9E:95:03:7B:52:88:99:83:0B:F2:4D:8F:1B:47:6F:FB:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabba271-a15d-3720-a297-6d87452eee21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.25.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:36:c4:85:e6:90:98:85:89:d8:f1:48:ff:45:e0:17:ba:6d:
f5:03:1c:24:9c:f8:ed:c6:9a:3c:8a:28:f3:4d:57:f7:da:d2:
e4:c0:ff:c6:30:28:c3:df:a0:b4:1e:86:d6:9c:41:32:19:02:
9e:15:00:3e:4c:a8:2e:8a:94:5a:83:06:88:28:42:ac:c2:b1:
7a:a4:d8:bb:37:8d:e4:1a:4d:b9:51:94:ff:7a:50:64:92:7c:
1e:c2:8a:07:3a:57:25:de:75:22:d5:2c:37:e4:49:b2:23:e0:
b7:0b:cc:67:21:b7:f4:3f:87:38:f5:62:d7:9d:a9:f1:c7:80:
bf:43:ca:d7:62:3c:4a:cb:43:2b:cb:35:0e:94:72:49:ca:ac:
df:cc:5b:73:11:77:14:f3:d7:2e:9a:b0:73:ba:54:37:3b:86:
18:84:60:39:14:d3:ff:68:31:70:f0:b2:f2:39:61:25:80:f3:
44:5b:fd:4c:60:5f:37:f6:a0:a8:43:c0:a7:f1:6c:cb:b2:da:
41:bd:8f:74:47:9e:24:02:a0:2f:b8:d9:b1:0d:74:c3:05:6a:
d3:f7:cf:5a:0f:41:bf:37:fa:2e:e4:9c:3a:15:16:8c:5d:7b:
c8:8b:72:9d:ac:d4:18:ad:88:05:d9:3d:a2:db:f6:61:54:36:
bb:38:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:26:39 2025 by rpki-client