Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa
File: af12d4d2-eba1-3225-9761-d1d0bcd90937.roa (raw, json)
Hash identifier: bE9p8/c/NmmVNxMIRPHrAofDEUoXXKxBMpur8qS/RZ8=
Subject key identifier: 18:32:9B:72:9C:2C:29:0B:57:6F:BF:4A:C2:D0:AE:17:F5:ED:F7:C4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482549DA87B80571161AF73260
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa
Signing time: Mon 09 Dec 2024 04:40:36 +0000
ROA not before: Mon 09 Dec 2024 04:40:36 +0000
ROA not after: Sun 09 Mar 2025 04:40:36 +0000
asID: 13335
IP address blocks: 104.20.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:da:87:b8:05:71:16:1a:f7:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:40:36 2024 GMT
Not After : Mar 9 04:40:36 2025 GMT
Subject: CN=b8f355b7-d63c-4022-8fee-1ee354840aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:70:82:aa:53:2e:b6:a8:de:62:da:81:17:
1b:15:de:04:eb:aa:8c:41:13:1c:bc:f6:f9:1d:00:
20:1f:98:cb:c7:bb:07:53:05:43:56:b8:f7:57:81:
4c:c9:6a:a6:24:d6:3c:60:d6:89:f7:45:13:3e:7f:
ff:73:da:c7:e7:f8:e8:25:7a:b6:fc:d5:7d:a6:d9:
5d:1e:8b:22:63:dc:41:6f:0c:8c:dc:3d:ef:15:00:
ed:5e:43:d5:e1:40:0a:77:72:b2:dc:04:70:e7:f0:
c1:04:e5:14:36:b0:67:4f:b4:67:30:f0:b2:60:09:
1e:f2:7f:0d:ba:be:74:5e:06:fe:0e:5e:27:41:d3:
ba:94:bb:a1:24:16:31:8b:0b:97:0a:b2:8a:c8:67:
ee:bb:76:05:d1:ab:4c:ef:cb:67:68:84:69:a2:41:
8e:52:0b:df:d0:f7:06:b6:92:c6:6c:de:40:f0:fa:
09:85:66:1f:56:4c:45:64:42:e7:88:8e:82:8a:15:
df:96:b1:ee:67:fe:5b:e1:ba:31:63:d4:c8:c2:3f:
44:60:f6:5f:62:17:58:04:e1:1d:24:d7:80:72:b9:
88:10:60:28:c0:72:98:fd:de:44:b7:23:92:ee:4b:
98:91:4c:84:09:c5:ef:ce:86:fa:c0:5d:69:0c:b9:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:9B:72:9C:2C:29:0B:57:6F:BF:4A:C2:D0:AE:17:F5:ED:F7:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d6:e9:f7:b8:a8:02:10:c2:dc:94:11:39:dc:02:c8:74:8f:
24:2e:63:56:51:50:66:16:aa:00:da:22:c8:81:66:71:73:cc:
21:31:09:6c:e1:d4:42:2c:d0:6b:5a:b2:a9:63:c9:af:9b:d4:
c9:d5:6c:d8:3e:2f:dc:2d:7a:dc:e9:e2:cd:52:05:f4:2e:3e:
9b:c6:29:21:20:96:90:7f:18:73:0e:51:9d:c6:cf:19:72:db:
67:b8:08:a3:c8:05:d5:77:55:5b:7d:4f:04:97:47:82:00:67:
96:ec:1f:ea:68:70:c7:36:78:42:7c:8d:2a:77:b4:28:95:1c:
82:af:0d:60:e2:d0:95:a2:be:d1:18:4e:9a:74:be:b2:f8:84:
b5:3d:95:43:24:b9:dc:b5:96:56:4b:69:eb:bb:c0:51:9b:b0:
2e:1d:e2:3f:e1:cc:a9:68:82:9d:cc:40:b1:a7:35:bb:7f:a4:
c3:74:df:ac:00:f0:33:1d:80:bd:9e:86:c0:7b:9f:d3:a1:47:
59:da:01:99:d1:6b:ee:c0:f5:a0:ef:ad:f3:43:37:b0:fa:99:
61:ef:ba:90:5e:a9:4a:be:d0:1d:1f:72:5e:5c:67:83:48:e0:
13:a9:4d:36:a9:b9:33:94:a6:1c:b0:e1:fe:bd:ed:03:43:53:
60:76:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:36 2025 by rpki-client