Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac3b67e-ef68-398d-8199-84a5029a6cb2.roa
File: fac3b67e-ef68-398d-8199-84a5029a6cb2.roa (raw, json)
Hash identifier: Q97irkWOjON0LeAVFYC+ZdRypNC5yxTkVHXP32rI6Yg=
Subject key identifier: C0:E2:EF:67:D1:5D:6B:B2:DB:31:C3:FA:8B:4F:DE:0C:BA:16:86:66
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328576D51CC73C042CFC167622868BA
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac3b67e-ef68-398d-8199-84a5029a6cb2.roa
Signing time: Fri 30 Nov 2018 01:07:54 +0000
ROA not before: Thu 29 Nov 2018 05:00:00 +0000
ROA not after: Sat 27 Nov 2027 05:00:00 +0000
asID: 13335
IP address blocks: 104.20.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:68:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 29 05:00:00 2018 GMT
Not After : Nov 27 05:00:00 2027 GMT
Subject: CN=64504d4e-cdfe-4eb8-9b3e-b5c47ecf28d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:30:ef:40:84:b2:26:56:99:43:f1:6c:32:
62:72:48:14:87:ee:6e:20:c3:2b:2e:92:ba:9c:3a:
0c:b2:d4:4a:2e:23:34:ce:fa:94:ad:20:b2:c5:44:
d3:f0:d4:07:6e:11:17:60:76:b8:76:bf:f3:f4:07:
fb:a0:5f:9b:e8:95:c2:d2:5f:32:9f:3e:ea:b7:52:
f2:87:6e:cc:25:14:b2:19:d4:10:12:aa:ef:c9:93:
70:2d:ff:f9:32:2e:b6:b1:c5:97:07:58:77:b0:33:
0e:17:f3:d2:b3:b2:f4:f2:36:4a:ba:bc:84:6b:a2:
6b:a1:5f:d8:e9:76:8d:fa:ec:a7:2d:c7:de:14:2e:
b0:ba:c6:18:f0:0f:6f:b1:88:30:35:83:5d:3c:45:
a6:1b:97:4c:3b:31:af:49:60:81:61:f5:e7:b2:8d:
5a:64:05:61:60:f8:db:19:27:6c:ed:2e:46:4f:c6:
6c:18:1b:46:e5:62:66:ff:e2:1c:85:2d:97:ad:cf:
da:c6:af:b3:b4:04:d7:6e:46:53:b0:b7:fe:59:3f:
21:53:c5:3d:5c:36:72:cb:3c:14:ef:2c:f3:66:50:
d2:ce:7f:21:f6:ce:d9:84:99:77:78:2d:20:43:c8:
34:5c:39:71:c0:98:07:9c:35:a8:51:98:32:fa:31:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:EF:67:D1:5D:6B:B2:DB:31:C3:FA:8B:4F:DE:0C:BA:16:86:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fac3b67e-ef68-398d-8199-84a5029a6cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.20.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:d6:d9:ea:e4:38:2b:be:f2:43:3e:2f:5a:b5:64:1c:9b:d7:
66:9c:32:aa:e5:ec:ea:fe:81:21:76:1e:4f:e2:b6:95:55:be:
70:66:16:5e:7c:b8:50:f7:44:3f:b0:f0:be:ca:3d:80:62:42:
e3:09:57:a2:20:10:10:a1:bc:8d:78:ed:0b:af:09:e8:31:02:
e0:91:4e:de:d2:48:5e:08:82:1d:03:59:f1:25:8a:d0:d6:b3:
78:8c:10:65:44:74:74:16:44:02:80:5c:60:05:d0:47:f9:3f:
59:38:e5:b7:ae:40:40:e9:6b:3a:96:b9:c6:de:09:38:e5:92:
52:12:0c:af:ca:28:bb:ef:b8:3a:20:66:f8:d2:06:65:ee:37:
04:43:0f:5b:42:53:94:e5:71:1c:69:04:41:5c:59:04:78:c3:
b0:e1:02:64:13:15:e9:56:83:6c:23:57:6f:15:b0:86:39:6f:
b4:98:80:e4:0f:a1:53:23:2a:4f:ef:6e:2f:44:3b:07:19:75:
06:69:f1:47:97:39:8a:3e:14:23:df:6a:6a:7d:68:09:2e:e4:
ec:67:3e:1b:b8:82:3d:2e:91:1c:b5:c7:79:9e:54:41:1b:52:
eb:06:b9:6b:13:6f:0a:a4:26:a7:c8:21:2d:e4:21:3e:c4:59:
0c:ba:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:56 2025 by rpki-client