Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa
File: af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa (raw, json)
Hash identifier: b6oStnMWQyVK+Mq5AjYH0GhaZmYi980o8habIRVM/J4=
Subject key identifier: 20:1F:58:BF:D0:B6:55:94:80:7D:09:C2:F8:10:EE:15:A0:36:FF:33
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482549FCDE74D216D8F7193D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa
Signing time: Mon 09 Dec 2024 04:40:52 +0000
ROA not before: Mon 09 Dec 2024 04:40:52 +0000
ROA not after: Sun 09 Mar 2025 04:40:52 +0000
asID: 13335
IP address blocks: 104.20.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:49:fc:de:74:d2:16:d8:f7:19:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:40:52 2024 GMT
Not After : Mar 9 04:40:52 2025 GMT
Subject: CN=0d6b55b6-a942-4c11-b03c-41ce7492aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:c4:57:0b:15:07:5f:53:53:8f:5c:8b:16:
a4:8d:db:79:f0:02:3d:b3:f4:10:49:74:3c:08:ac:
78:f0:9b:02:88:fc:70:a1:ed:81:7d:2a:e7:af:7e:
7d:a5:5b:e3:87:28:41:8f:b1:68:00:b6:af:51:0e:
b7:3a:fb:55:eb:8e:95:a1:05:81:13:20:f0:8c:9c:
1b:ab:0a:19:8a:9f:9f:13:3c:11:5b:8c:21:ae:10:
39:3e:d9:20:0c:ab:26:47:41:75:8e:1b:46:33:ed:
6f:82:83:75:ef:d6:aa:34:a0:76:0e:f2:85:94:84:
e2:13:04:2c:42:f9:7a:02:79:14:ac:0c:23:b3:fd:
25:fd:65:f4:c7:a8:ad:88:1c:1d:3f:f6:2a:fe:a7:
37:87:4c:64:8f:2f:6a:a7:3d:c0:ae:7f:fb:99:a2:
22:7a:f3:1f:81:8f:48:05:47:34:81:e6:35:d5:ff:
b5:1f:d4:46:f1:ce:71:c1:ec:ab:13:a3:de:8f:0c:
be:2f:8d:97:33:a6:e9:99:3d:ec:bc:ba:ce:3a:05:
42:67:e8:f0:bd:91:15:8c:f0:61:9b:3a:34:2b:11:
75:09:cd:ae:1a:6e:8b:58:83:f0:49:c2:2a:cd:ec:
6e:65:ed:3b:09:0f:a4:87:d2:8a:ca:c9:ae:a8:d9:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:58:BF:D0:B6:55:94:80:7D:09:C2:F8:10:EE:15:A0:36:FF:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af7b852b-9f45-3108-bcb4-c47c9f2e3ffb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:9d:a4:50:b9:ab:4d:e7:d0:29:ba:45:3d:91:dd:34:2c:2b:
2d:fd:15:29:5f:c5:67:8c:77:60:db:62:bb:a7:08:81:3d:b3:
cb:63:66:59:e3:ce:da:aa:d0:21:c3:b1:fe:87:42:f2:58:bf:
29:b4:52:df:31:44:a9:e2:d5:ab:63:7f:fc:22:6e:31:49:6f:
05:32:a7:29:f4:3e:1d:d9:dc:da:38:58:f0:a3:3a:88:3d:cc:
9e:06:89:db:12:89:a9:f3:03:02:58:43:d0:69:9e:7b:ce:38:
f6:c7:ce:63:9f:9e:d5:45:19:10:2d:7e:12:dc:1b:66:9d:08:
6d:70:7b:45:24:ec:74:c3:7a:f7:07:8f:a9:23:4b:93:6a:00:
3a:3a:2e:fc:86:82:ea:0b:07:d7:20:39:95:70:32:b0:73:f5:
72:19:97:24:ca:25:85:ac:ec:a9:1c:d0:1c:ed:48:36:8b:8e:
58:5e:28:55:fb:b4:70:32:c7:81:4b:3f:c5:b5:95:b1:45:db:
63:91:87:a1:3c:66:ff:76:97:19:93:df:de:2d:93:bc:c6:2d:
7d:cf:97:8c:a6:e8:f5:71:77:f7:69:07:cb:cf:3d:52:ef:c6:
d4:b0:cc:44:1e:6b:c8:e8:9f:43:26:a9:cc:ce:0c:57:f3:57:
0b:fd:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:23 2025 by rpki-client