Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa
File: d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa (raw, json)
Hash identifier: 8mIKaNQQMhpBf5hAt2wBi9Cs+Cd0bsIklg4b6Yl0IwE=
Subject key identifier: 8A:C2:7E:8F:A2:82:45:0D:80:E1:F6:70:EE:24:05:E5:15:3C:50:6B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848254B67CDAC69BC2BB5FD1108
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa
Signing time: Mon 09 Dec 2024 04:43:44 +0000
ROA not before: Mon 09 Dec 2024 04:43:44 +0000
ROA not after: Sun 09 Mar 2025 04:43:44 +0000
asID: 13335
IP address blocks: 104.21.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:4b:67:cd:ac:69:bc:2b:b5:fd:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:43:44 2024 GMT
Not After : Mar 9 04:43:44 2025 GMT
Subject: CN=72ff288a-9de1-446f-8ac3-a050c3f201f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:39:c0:3c:dd:77:da:0e:c6:3f:89:24:52:
5c:05:6d:95:75:29:1e:f7:9e:32:0b:9f:0d:ce:ce:
42:5d:aa:f0:55:ec:36:31:9f:99:d5:82:5d:51:b6:
aa:06:6f:dd:0b:b6:8d:a1:f0:4a:eb:7d:53:90:1f:
8b:1d:8e:fa:ed:89:b1:92:a5:3f:a9:90:9f:70:04:
e4:b2:34:26:a6:59:79:b9:d3:02:a6:a4:35:ae:f4:
f8:80:b6:c9:c3:aa:db:a5:66:d5:72:36:8f:62:72:
f9:fb:a8:f7:37:c1:90:b0:2b:61:cf:94:89:b0:7f:
1f:17:53:16:2d:4d:40:94:02:d9:2d:7c:2a:1c:52:
ea:18:10:9d:53:64:21:1b:c8:3d:58:78:95:df:08:
13:8c:19:e0:a1:b2:05:f6:f2:60:c1:7c:a2:2d:8a:
d3:a5:d1:95:2e:9c:fd:5d:75:1c:47:69:b9:0f:24:
21:61:cc:4f:c2:27:8d:3d:37:27:4e:7f:07:b5:db:
f9:78:71:da:07:4c:4c:57:3f:9a:c6:ca:e3:09:38:
df:28:f0:f8:09:d6:a4:65:15:e2:fb:cc:4c:7d:d4:
a4:6a:77:90:69:e3:d7:5e:94:96:82:59:13:48:30:
d2:d0:93:bc:ee:de:6f:65:01:94:33:30:6b:14:bc:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:7E:8F:A2:82:45:0D:80:E1:F6:70:EE:24:05:E5:15:3C:50:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0de22b6-0cb1-37fd-be70-b2c93fda7cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.21.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:7e:20:ae:73:b8:64:1e:25:28:cd:8e:04:76:b9:0d:2d:98:
a5:a8:ed:1e:ca:c7:44:01:9e:43:55:67:d3:fd:6c:a0:61:b7:
e1:b8:67:cc:d6:b6:d8:08:06:1d:b5:e9:4a:89:47:88:1e:3d:
00:68:e0:87:9a:83:e0:4c:12:74:b6:be:8c:4d:ba:e9:93:6d:
91:40:7b:f2:48:83:39:6c:ef:e5:32:dd:c2:f5:48:7a:6c:48:
43:61:fe:c1:13:18:8b:98:1a:aa:04:a2:55:aa:fc:a0:0a:3b:
c1:07:12:c7:09:53:28:18:0f:c9:fc:82:dd:59:27:b0:e0:74:
95:25:31:4f:2e:06:5b:eb:0a:0d:89:d7:08:dd:e2:f9:e2:5f:
35:18:94:b9:f3:bf:68:13:22:6d:95:cf:2f:f3:8f:dd:24:8d:
e2:c9:fe:6c:c2:3b:bc:7b:fd:89:bc:66:9a:f2:9e:ee:2c:ce:
22:50:66:87:e3:22:f1:3a:ea:1e:b3:99:9a:67:89:c8:0a:1b:
0c:22:86:95:f6:c1:ee:d4:1e:8e:51:56:ad:cf:95:7a:2b:87:
2f:6c:33:10:e4:31:be:2b:20:d0:fd:af:db:8c:36:02:94:d5:
10:06:d5:d3:48:67:7d:86:13:e6:16:ca:85:65:95:49:26:1b:
95:d6:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:59:58 2025 by rpki-client