Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a80a332-b39b-350c-9182-e9a93e2dc9b5.roa
File: 7a80a332-b39b-350c-9182-e9a93e2dc9b5.roa (raw, json)
Hash identifier: QKmpBjFUlArcT4M8IWpJYxBPG5vqQg4IvoF9Hf64e/Y=
Subject key identifier: A0:FA:34:27:3A:F8:A2:6A:15:A4:9B:93:59:00:3A:76:DC:D9:B5:16
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C00B1E9075B335FC5AFE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a80a332-b39b-350c-9182-e9a93e2dc9b5.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.30.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:00:b1:e9:07:5b:33:5f:c5:af:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=b8bdca62-77c7-432a-9798-be00871482b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:4e:4f:a1:95:64:c0:48:84:6b:d1:a0:d0:
be:5e:23:c3:44:d2:79:fb:15:0e:47:f1:f1:72:f4:
7c:5b:33:66:75:61:ef:2d:a4:b5:75:b5:10:ae:69:
ae:f4:e1:11:54:bf:3d:41:c8:61:0c:50:86:d1:26:
a7:8b:71:0d:44:8e:d3:37:bc:cc:54:f5:a5:10:c7:
f7:8b:16:04:e5:74:dc:ab:2b:a3:04:bc:eb:54:2f:
87:e7:01:5a:b1:36:c1:a3:f7:67:e5:42:54:6d:bf:
f6:87:5a:f7:c8:9f:58:c0:16:89:04:ae:0b:0c:1b:
4c:99:e7:a7:59:fe:cc:71:32:08:b5:f6:88:4f:81:
da:a2:51:41:b4:16:b4:46:e7:04:e3:40:16:ce:01:
e8:d8:76:e3:0b:41:9b:f1:7f:0d:7e:9c:38:7c:e6:
cd:ea:28:0d:25:f4:df:f0:8b:c8:83:ad:d6:86:4b:
c4:35:81:b1:a4:ff:12:58:51:dc:02:4d:b9:f1:4f:
9c:a4:3a:f8:e4:4c:e5:47:f6:de:0e:98:d6:d7:b3:
d8:11:84:25:1e:52:1b:1c:84:74:51:3e:05:4a:11:
28:80:da:9f:a6:aa:f6:b0:40:4f:46:1b:bc:03:ff:
f0:e6:80:a8:bf:16:2c:b1:7f:5c:df:76:fe:44:80:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:34:27:3A:F8:A2:6A:15:A4:9B:93:59:00:3A:76:DC:D9:B5:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a80a332-b39b-350c-9182-e9a93e2dc9b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:0d:a2:1d:f8:0f:cc:c6:89:55:57:b5:dd:3f:77:f7:d5:8e:
27:d8:21:2a:e3:dd:96:c3:fa:d7:ce:c5:3a:0a:f5:3e:a0:5c:
07:92:64:2d:88:80:59:79:f8:5a:67:64:b2:98:13:d7:2f:ba:
43:b5:e7:67:fc:c9:5d:35:c6:b2:9e:ba:3b:e8:51:a1:f9:f8:
74:07:c9:01:d9:5a:99:71:93:5e:3e:39:74:08:20:0c:d6:8f:
e2:8d:63:fa:12:99:c5:96:15:4a:45:e5:45:8f:80:63:f3:97:
75:e2:de:51:3d:f6:b0:e9:3b:c6:98:5e:30:19:40:e8:16:46:
c6:82:d6:04:9f:07:d5:39:14:4a:34:a0:0c:6a:41:f5:48:64:
12:69:4d:2f:53:36:fd:bc:d1:08:75:8c:43:e4:aa:d2:0d:e5:
db:88:ef:b6:29:e5:67:9d:92:ce:28:06:de:03:36:92:39:49:
23:11:a7:e8:50:c9:94:53:95:b0:b2:de:2e:ef:24:af:0e:cd:
fa:52:bf:92:7e:f1:39:df:6a:a6:ac:0f:5a:1d:a3:69:8a:5f:
24:f0:33:31:31:9b:c5:67:ed:ef:f9:a3:3d:5a:2e:24:20:f3:
ed:ff:6d:bc:7e:0e:63:3f:f0:89:4c:4b:bd:eb:4c:e3:4f:6c:
f3:38:85:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:10 2025 by rpki-client