Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52a60e52-56de-3ba3-b018-10cef613863e.roa
File: 52a60e52-56de-3ba3-b018-10cef613863e.roa (raw, json)
Hash identifier: A+39w0F5Wxd0b2X0HvRs3tcPcLlaO4x5YwSlxJ0ES5M=
Subject key identifier: 1E:23:4C:7B:F6:F0:52:08:B4:37:94:18:3F:2A:9D:34:BC:5F:4B:50
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C00A3DAFC6ED9692E8600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52a60e52-56de-3ba3-b018-10cef613863e.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.30.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:00:a3:da:fc:6e:d9:69:2e:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=4b0bac76-b777-4f18-938f-dd51baff551e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3c:5f:6c:13:59:94:ea:7f:09:b7:a8:26:22:
8a:8f:5f:82:15:85:fb:cb:3c:29:25:af:4a:3a:67:
1a:51:8c:b4:04:a1:e1:c0:76:f7:ca:71:d6:a6:b5:
81:d1:fd:47:73:f0:3c:f8:b9:4f:a1:06:0f:e3:cc:
55:7b:f9:38:ae:29:9f:1e:10:82:da:9e:48:dc:e4:
e6:95:7b:85:5f:68:ed:9e:cb:2d:53:5b:eb:de:f4:
c2:80:fa:12:a1:2d:bb:3b:6a:02:66:b8:f9:a3:5b:
68:48:55:33:94:43:08:56:78:79:ea:b5:c7:bb:23:
90:77:54:90:2a:2f:6a:3a:92:f5:c2:6e:bd:e6:ff:
25:87:be:c6:7c:d6:23:cb:c7:98:96:2b:fb:08:9d:
33:ca:df:6a:70:d0:91:13:fe:0d:84:f4:0f:b7:b6:
84:c1:f8:cd:42:26:05:e0:88:7c:9a:0d:19:d7:b6:
07:44:ba:8a:19:6e:dc:18:d6:01:ca:fa:d5:cc:0a:
32:ad:76:c4:f4:d1:16:77:4d:62:2a:c5:d5:6f:7d:
6d:29:64:bf:00:1e:a8:31:52:aa:91:eb:06:72:d8:
5d:5b:36:ab:05:cb:f1:97:d4:2e:6f:52:32:11:3e:
ed:a1:f7:62:a6:19:74:b0:ce:23:cc:ca:ca:28:11:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:4C:7B:F6:F0:52:08:B4:37:94:18:3F:2A:9D:34:BC:5F:4B:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52a60e52-56de-3ba3-b018-10cef613863e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:8f:89:fc:0c:3d:ed:ff:5d:29:b8:b7:3d:57:cf:85:64:a8:
88:3d:60:6f:c7:ae:38:07:67:5d:fb:78:d9:fc:5d:02:df:97:
aa:d1:87:fc:fe:40:f7:24:0e:a5:7e:37:19:a4:a6:58:bb:87:
a1:1e:e6:66:31:0a:71:37:97:84:81:9c:d4:be:29:c9:af:cc:
9c:88:0c:a5:23:6c:84:52:2b:1d:23:1d:0f:03:7b:05:ff:d6:
40:49:9c:a2:82:b1:ed:e6:d5:dd:22:a3:3c:0f:9c:8d:55:d4:
05:2a:3c:b7:07:45:2c:88:70:a4:29:86:61:98:16:6b:cd:fc:
e7:1f:92:cb:36:b5:df:6e:30:c2:78:40:f7:c1:d3:6a:5b:72:
69:14:ef:85:bb:41:53:3d:ba:a9:67:7d:d6:52:a6:57:8c:d2:
1f:d8:72:db:55:d6:09:e2:31:8e:63:39:94:c9:13:db:96:d3:
fd:33:33:b5:7e:d9:72:65:e6:ec:e1:6a:bd:f7:a1:04:db:90:
22:a0:ac:8d:30:15:6b:89:d0:4b:b7:47:7b:ab:91:f7:b6:4a:
f8:7a:f3:e4:81:89:47:5c:35:4a:74:19:59:55:b1:a0:42:4f:
ba:87:18:34:30:57:8b:1a:fb:ff:d2:e1:0f:e0:5a:f7:32:de:
eb:97:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:26 2025 by rpki-client