Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db9b79d-abb8-33c8-bf6f-8ae1de5a43b3.roa
File: 3db9b79d-abb8-33c8-bf6f-8ae1de5a43b3.roa (raw, json)
Hash identifier: FEUSxj6SXwJwN8oReVL/9fVuju6iwRM9AL4s5ZqdyPs=
Subject key identifier: 8F:EB:6B:28:B7:FE:9B:A1:12:A7:02:35:C8:FF:01:51:37:4E:EF:54
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BF59A45116463D91D600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db9b79d-abb8-33c8-bf6f-8ae1de5a43b3.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 104.18.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bf:59:a4:51:16:46:3d:91:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=7eb0d581-afb9-457e-af7b-76fa3c2a55d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:76:81:59:59:ba:6e:fc:79:70:85:79:1c:
b9:1f:cf:28:1b:1b:45:7b:df:63:fe:bc:dd:f5:53:
5c:5c:1d:3f:4f:c4:06:5d:1b:9b:7c:6c:54:22:92:
6f:1e:0d:bc:f4:33:63:3e:9a:71:9b:cf:3c:90:c6:
3f:47:9f:de:eb:10:ac:37:d4:41:17:40:dd:a7:1d:
b9:47:c5:68:a1:18:88:5a:9b:e1:91:e1:ab:5a:d5:
97:60:7f:19:56:1c:d1:ce:5f:cd:17:3a:3a:bb:78:
e2:ec:c1:74:c3:8d:16:0f:39:63:8e:7b:b0:cb:e1:
a7:6b:b9:65:91:f8:81:e4:63:c7:66:8d:4b:b5:91:
70:ec:22:1d:29:cb:8d:18:d4:14:14:bf:d8:f1:85:
86:f3:b4:9c:26:52:4f:08:60:fd:d6:fd:dd:e6:f7:
6d:cd:c4:d7:c0:11:7c:04:1c:20:d8:df:30:5a:4c:
ee:f9:ec:13:56:58:cd:41:c6:0c:27:cf:c9:be:bd:
34:9a:5d:1b:31:01:cd:b6:90:cf:66:28:b8:5d:6f:
15:29:6d:f0:a1:b6:60:15:80:75:ea:05:b2:bf:ac:
27:76:56:fb:e5:6a:00:98:19:3b:24:92:cd:b4:e7:
84:39:e7:68:6f:c3:b2:1d:54:c6:24:81:6c:a2:4d:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:6B:28:B7:FE:9B:A1:12:A7:02:35:C8:FF:01:51:37:4E:EF:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3db9b79d-abb8-33c8-bf6f-8ae1de5a43b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:92:68:ca:7b:0e:6d:d7:19:85:5a:f3:e9:8e:ae:7a:2f:64:
f6:88:2b:bc:c6:38:63:11:9e:c7:0d:e6:8d:3b:0e:19:6d:b3:
75:50:22:86:0a:21:30:4c:05:6c:79:38:a8:28:53:da:1e:52:
7a:00:b4:a8:4d:2a:c0:f7:d6:82:71:9d:54:cf:88:ac:79:4e:
5a:88:da:f0:ba:0c:81:7a:f4:63:fd:3f:cb:54:42:37:ec:ad:
2c:44:a4:14:92:0c:e0:ce:02:40:e0:9c:99:2c:da:04:e3:c8:
fd:8b:e0:e6:36:c9:2b:dd:58:86:59:56:e3:79:21:d2:da:11:
45:5b:97:6f:c8:8d:0e:ce:2c:2c:56:e8:29:d4:69:97:5d:36:
43:ec:fd:9e:cc:94:ac:fe:19:74:32:a4:e2:b8:8c:2c:62:99:
d3:be:e0:7f:0b:3d:6f:76:16:bb:0f:7a:12:8f:fd:09:41:d2:
7e:08:21:af:f2:96:1d:c2:cd:7c:1a:7a:dd:5b:d4:a9:77:b4:
7e:da:1c:ff:8f:db:1f:82:bc:f0:0e:09:68:e9:54:28:d8:c5:
cc:31:2c:5f:20:94:bf:ab:0c:b2:da:f5:e5:71:96:e8:ff:53:
8c:7c:01:cd:3b:ad:a3:2f:01:b5:10:9e:51:64:8a:af:f5:83:
64:6f:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:18 2025 by rpki-client