Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa
File: aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa (raw, json)
Hash identifier: bOBCXwsJvXiraMS1VPBIZhUT7Ox1yRdhNFMB9BToQic=
Subject key identifier: 88:57:BD:1D:CC:7B:39:09:82:A9:87:D9:09:D0:D2:18:3E:66:73:25
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825597482CAEFA661CBD7E580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa
Signing time: Mon 09 Dec 2024 05:12:02 +0000
ROA not before: Mon 09 Dec 2024 05:12:02 +0000
ROA not after: Sun 09 Mar 2025 05:12:02 +0000
asID: 13335
IP address blocks: 104.24.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:59:74:82:ca:ef:a6:61:cb:d7:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:12:02 2024 GMT
Not After : Mar 9 05:12:02 2025 GMT
Subject: CN=b0307987-5d8c-416d-9955-520ebfcdac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:f3:d7:37:dc:ae:1b:e0:03:bb:c9:73:75:
82:92:7b:b0:6d:c6:1b:79:1d:f9:90:9a:a8:b4:7d:
9c:04:e9:3c:c1:56:5e:0a:9e:51:6e:17:13:7e:91:
fb:49:46:79:45:23:fd:12:58:73:05:3b:60:57:5f:
cd:53:0c:16:73:6a:35:18:e2:b7:3a:05:c7:3b:4a:
65:52:4c:79:c0:fe:3d:e8:ff:3d:20:a9:36:1a:fe:
32:52:70:47:9f:d6:ad:dc:9c:66:88:e6:c5:f8:3d:
f5:4a:a1:1d:09:9b:d7:06:c8:ab:4e:62:b3:b9:4b:
14:98:0d:cc:4e:6e:aa:04:de:32:ba:dc:9e:ab:f2:
fe:26:95:25:50:9c:22:e3:fe:e5:8e:45:e8:66:5a:
8d:8e:c6:c2:35:60:d3:41:f2:50:3f:80:a7:5d:bf:
fe:7a:81:78:3e:5b:00:f6:e6:55:dd:43:de:ad:61:
b4:23:ee:0c:30:be:40:49:a5:18:5a:a2:76:82:94:
7e:d0:d7:f1:7f:7f:90:dd:67:39:ce:cd:f3:ef:c6:
50:32:72:64:fb:f0:32:d3:83:9b:07:bb:15:96:19:
d3:81:06:69:72:da:e4:af:6b:a3:af:49:e7:72:44:
a7:a0:11:2a:09:9e:15:60:16:e5:9f:54:91:b5:2b:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:BD:1D:CC:7B:39:09:82:A9:87:D9:09:D0:D2:18:3E:66:73:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aabbdac0-9a72-333d-8c52-ae38a15a3e61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.24.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:6d:9f:63:4c:34:be:46:7f:63:92:95:3c:58:cd:0e:90:40:
04:1e:4c:59:95:3c:76:73:5e:8d:08:65:9b:1e:b4:7e:b3:e0:
42:1d:fc:26:9c:6e:44:77:22:58:b7:49:9f:5e:b3:a1:ff:79:
ed:52:6b:09:3a:ed:e6:ca:c3:07:34:db:11:d6:07:2d:08:77:
04:8f:81:b3:e2:86:a8:f5:65:a2:5c:d7:b3:53:09:4b:a9:70:
25:69:49:7f:b9:e1:34:c9:79:db:bc:96:eb:c5:cc:04:3b:11:
66:8d:c1:70:f0:88:88:21:be:57:dc:48:dd:08:d5:26:e8:03:
07:0d:4d:f1:e4:5b:20:78:e6:d1:a1:d7:4b:60:a1:5e:1a:5f:
a9:1f:b6:85:73:e5:bc:93:b5:0c:fb:ce:eb:3d:16:76:9c:31:
11:15:fa:84:ce:b7:ed:cd:26:e5:b9:be:93:a2:de:89:dc:ba:
1b:ce:33:e1:92:5d:91:28:f9:db:fa:82:18:fd:3c:49:09:73:
67:c5:a3:b6:bd:51:cc:3a:b4:0f:de:45:24:d0:84:4e:00:c2:
23:2b:ab:b1:5e:11:af:8b:78:05:ce:ba:fd:be:21:90:86:18:
1a:e7:0e:b6:ee:19:1f:f0:1a:f7:af:f0:27:b8:d5:a8:dd:12:
1d:e0:eb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:26 2025 by rpki-client