Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c2df30-6e2f-36cd-9d4c-65d568a6983a.roa
File: b3c2df30-6e2f-36cd-9d4c-65d568a6983a.roa (raw, json)
Hash identifier: QHOQ0JebSHt+nIf2uDvJPlBKb9JiwGsNod9IhkxhZFk=
Subject key identifier: 7E:98:06:B2:5A:10:F5:E5:87:24:DB:94:41:B7:DF:0C:31:A1:D0:03
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254A0E0A5D7EC444832F6080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c2df30-6e2f-36cd-9d4c-65d568a6983a.roa
Signing time: Mon 09 Dec 2024 04:41:00 +0000
ROA not before: Mon 09 Dec 2024 04:41:00 +0000
ROA not after: Sun 09 Mar 2025 04:41:00 +0000
asID: 13335
IP address blocks: 104.20.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4a:0e:0a:5d:7e:c4:44:83:2f:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:41:00 2024 GMT
Not After : Mar 9 04:41:00 2025 GMT
Subject: CN=157a4f76-2a61-4cf7-889a-20d6e3d6e9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:9e:6a:36:3a:ed:d3:1d:23:7a:dc:97:b0:
c7:c4:77:42:48:d4:7c:9e:9f:77:d2:c4:0a:bf:d4:
bf:a7:d0:12:4a:3a:10:68:09:ff:75:77:6b:08:e8:
02:97:c8:d4:53:5c:b0:1e:cc:0b:ae:f2:cd:49:17:
a6:b5:54:f0:bd:fa:16:e9:7b:96:42:2f:31:be:5f:
14:45:bd:df:11:b7:2b:2b:c6:1a:05:67:9a:e9:d6:
f2:bf:d9:97:f6:6c:60:e4:e8:91:eb:19:00:e8:27:
ed:53:c3:5b:9f:f7:e5:90:d4:5b:8b:04:bf:dc:80:
5d:61:1c:e7:ba:47:42:c9:f0:28:0a:6e:88:1c:ef:
a0:ad:ee:84:b4:2a:d6:9e:c9:4b:39:3a:d0:2e:95:
0b:d8:38:8e:65:18:98:f4:53:cc:2e:bb:13:23:f9:
d5:98:36:b2:00:9f:4b:04:5b:2a:43:77:af:af:23:
84:6b:b1:22:d3:d1:05:6c:65:07:de:ea:7f:2c:56:
e8:2e:b1:eb:de:9c:24:61:20:06:b5:38:fe:83:6c:
d9:d7:6c:f1:81:58:47:3d:1a:7a:c9:ef:b3:25:e7:
ae:27:85:d7:ca:1f:9d:de:05:d5:39:47:c1:4c:94:
6b:d4:b9:3c:4a:33:bd:f7:fd:f5:5f:a6:55:7e:3b:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:06:B2:5A:10:F5:E5:87:24:DB:94:41:B7:DF:0C:31:A1:D0:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c2df30-6e2f-36cd-9d4c-65d568a6983a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:de:d3:59:04:89:d9:39:79:51:ca:50:7f:f2:d6:b9:cf:26:
8d:c0:43:2c:5f:0e:b4:b5:cf:95:3a:e1:b2:88:c1:da:4a:33:
cd:e8:2d:ef:a1:4b:8f:8c:a1:04:6f:75:3b:00:2f:c5:e0:dc:
18:5d:a6:37:f1:0c:5f:d8:8a:d3:84:69:55:bc:3e:67:75:30:
69:3f:53:5c:76:d6:83:a3:ca:1c:74:43:59:d8:55:60:35:72:
15:4e:09:41:dd:cb:be:bf:9f:12:fa:b4:e7:26:c6:6f:8a:7e:
e5:9f:19:67:bd:db:9d:28:fb:c1:7a:83:31:7b:84:75:d0:1f:
a5:87:c5:10:1c:04:8b:57:b7:87:03:d9:ba:93:be:6d:11:66:
b8:e3:93:b6:4f:fd:df:53:35:8b:00:a8:7a:89:59:e7:79:f7:
97:9b:c3:60:bf:a2:07:5d:c0:8a:eb:3f:0b:ca:25:b4:bc:41:
a5:8d:34:e0:96:41:40:cd:1e:0d:ff:9f:71:84:6c:80:3f:b8:
b6:54:41:78:89:29:22:d7:58:71:41:27:ed:d7:89:7d:f4:fc:
ff:6e:0d:7d:52:1f:0d:01:44:a3:30:b7:d4:87:96:c0:4d:2e:
7e:2a:35:37:32:46:0e:91:9d:0c:1e:2b:e5:c7:24:65:26:4f:
6e:a8:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:12 2025 by rpki-client