Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa
File: bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa (raw, json)
Hash identifier: 6/aJ57VKbSqxN60LbPt81ytzuk3FTUq8r5OFMFsFqOY=
Subject key identifier: 96:E9:23:DE:1A:7D:53:54:3E:6C:4E:26:EA:1C:3F:1E:54:19:A9:08
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255E921AAFD179A29324C200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa
Signing time: Mon 09 Dec 2024 05:22:21 +0000
ROA not before: Mon 09 Dec 2024 05:22:21 +0000
ROA not after: Sun 09 Mar 2025 05:22:21 +0000
asID: 13335
IP address blocks: 104.27.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5e:92:1a:af:d1:79:a2:93:24:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:22:21 2024 GMT
Not After : Mar 9 05:22:21 2025 GMT
Subject: CN=31c6fb8b-6ef3-47ed-844b-2e75a32e4ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:74:70:f4:f4:9a:95:d6:9f:2f:f7:50:ec:
72:24:f5:8b:28:d6:98:34:de:43:6e:ed:31:fb:d5:
52:db:5e:c3:3e:00:e7:83:22:c9:05:65:bc:c1:04:
4b:22:66:88:41:e9:0b:14:3a:c4:fb:83:5e:f6:c0:
fc:cc:93:2b:c6:5b:63:9f:05:24:fb:f3:81:69:85:
f8:35:bf:4f:4f:af:d4:48:24:bf:fd:41:da:fa:cd:
46:54:e7:d3:ed:d1:ee:19:8b:35:82:79:8f:77:da:
f5:7b:10:a1:dd:c3:0a:46:b4:3e:9e:5e:bd:20:00:
00:db:25:9c:b4:2b:c7:58:10:07:80:ad:30:a3:c1:
05:b7:ba:d8:7d:9b:e4:97:38:af:5c:73:8f:96:84:
77:d1:c9:42:06:b3:5a:b0:1c:c5:2e:80:88:e6:9a:
23:1e:0c:33:4c:15:af:4e:bd:63:e5:78:d7:f1:e6:
de:72:50:d2:b6:12:cc:e4:2f:22:43:fe:0b:74:fd:
13:e3:4b:df:36:a5:c1:62:2c:1f:0f:66:98:82:08:
51:a8:f8:fc:82:c0:4d:3b:c1:2c:f2:47:7c:8b:6f:
63:7a:8c:de:a1:42:cf:57:6c:db:bc:32:e7:2d:6f:
25:7b:47:47:c8:a0:52:80:ff:3b:d4:5b:08:5e:05:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:23:DE:1A:7D:53:54:3E:6C:4E:26:EA:1C:3F:1E:54:19:A9:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbf6cbc6-e77c-3a90-b0c9-c6ecc6b8ad2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.27.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:62:25:87:40:ef:35:8f:5f:e4:60:70:1b:67:3d:42:8d:ee:
bf:fa:21:e8:c8:04:bc:5e:ae:f3:17:54:77:74:0d:9e:74:28:
d9:e6:d5:f0:b1:15:06:d6:a7:f4:af:08:5c:b3:fe:4a:39:ae:
23:13:92:f8:ea:f4:7c:9d:d5:d5:d8:a5:14:fc:0d:fe:a8:26:
c2:6e:87:39:9e:a6:eb:16:64:9f:28:18:dc:8d:d9:4e:4a:d7:
d0:c3:13:89:af:9c:a2:8e:4c:5c:50:a5:ab:c6:51:90:83:4e:
81:49:ed:64:11:0e:97:44:c6:43:0d:30:e5:ff:77:9b:41:91:
40:e7:8c:a6:0a:72:a0:56:ee:9a:66:0b:3e:1f:89:6d:ac:54:
f9:82:8b:f7:c1:93:e4:9d:59:89:0b:3a:fa:dd:bd:58:c8:c9:
86:26:54:be:45:70:8b:d2:fb:d5:fb:04:bd:a4:d9:ef:56:5e:
97:46:65:1d:cc:ac:69:86:3f:70:c2:41:5e:29:3d:1f:cb:e6:
94:69:a6:18:47:78:a6:ce:9f:b3:0e:59:e9:16:8c:36:ab:5b:
8d:e1:e2:67:ad:3a:60:fd:ac:19:85:a3:b2:94:89:06:5f:a1:
21:35:4a:70:ae:6d:28:f6:b2:15:e5:c0:22:e0:b4:cd:5c:12:
4b:4b:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:48 2025 by rpki-client