Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0ef1f78-adb7-381c-8dab-dce14ab1fc06.roa
File: c0ef1f78-adb7-381c-8dab-dce14ab1fc06.roa (raw, json)
Hash identifier: h9plzBZ/gJnMMLY7X9GXHFroU2seFeoHdRx1IRkm//Y=
Subject key identifier: EC:60:67:BB:6A:57:82:36:AD:6B:36:10:9D:34:DF:02:68:A8:11:8A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848B606789C3ABF307DC3DA6500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0ef1f78-adb7-381c-8dab-dce14ab1fc06.roa
Signing time: Thu 30 Jan 2025 00:57:03 +0000
ROA not before: Thu 30 Jan 2025 00:57:03 +0000
ROA not after: Tue 29 Apr 2025 23:57:03 +0000
asID: 13335
IP address blocks: 104.23.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:06:78:9c:3a:bf:30:7d:c3:da:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 30 00:57:03 2025 GMT
Not After : Apr 29 23:57:03 2025 GMT
Subject: CN=6e3450bb-fb9b-4ce3-995f-dba1f4ace5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:13:13:dc:c4:15:ae:23:04:2b:02:ba:2b:
5f:e8:f4:3e:1e:c5:46:f9:54:d1:a2:f9:47:d8:dd:
29:50:d3:d6:30:35:dc:c8:37:02:8f:a9:76:af:ab:
52:9d:9a:ef:a2:e3:37:49:17:d5:c7:91:ac:49:06:
f5:d9:4d:9c:c0:7d:10:14:81:f1:72:b6:d7:0d:73:
d5:bc:4c:7f:85:f1:0a:5e:52:57:5c:13:bf:52:7b:
e8:72:b9:97:30:44:b4:0f:a6:b6:c4:b1:cd:d0:a3:
c6:c8:8a:ed:53:7d:5f:44:bf:7b:cf:5d:99:15:60:
82:cc:f7:2e:b4:bf:3e:b5:40:7d:d6:0b:0e:97:9e:
8f:cb:c0:05:0d:32:f0:5a:69:a4:63:f4:a3:ea:fd:
34:df:2f:e5:fc:d3:ba:95:6a:62:16:10:3d:0f:6e:
86:38:30:4e:dc:57:62:5e:1c:f5:72:57:97:9e:8e:
73:cc:08:4c:5a:57:37:4b:ee:62:88:4b:25:25:aa:
33:25:45:a7:50:51:22:37:9e:72:93:58:bf:f9:00:
dc:12:94:69:45:d3:01:eb:4e:b5:6e:35:92:1e:fe:
93:47:84:b3:37:a1:b6:d0:27:8b:cb:55:b2:1d:30:
3d:ee:fd:d7:ad:eb:59:fe:89:fb:42:db:e4:46:ac:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:67:BB:6A:57:82:36:AD:6B:36:10:9D:34:DF:02:68:A8:11:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0ef1f78-adb7-381c-8dab-dce14ab1fc06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:ac:32:16:90:e5:b2:7f:2f:29:3f:27:43:aa:80:9c:96:b0:
e8:27:60:23:12:24:74:07:88:24:f2:64:ae:e2:eb:59:7d:40:
82:0b:f3:ff:a5:05:53:44:4a:e8:5b:9b:f0:ba:86:ab:d6:46:
ad:58:67:20:22:3f:f5:96:eb:6f:78:8c:38:04:16:84:3b:ba:
87:af:82:c1:12:12:b2:5c:2f:c3:a3:d3:12:18:90:24:d4:3f:
58:81:99:82:7b:5c:31:29:85:bb:50:d3:ca:cf:2a:db:ec:f3:
c5:e7:1f:90:cc:9e:6b:a0:cd:cd:6b:15:4d:7d:7c:13:dc:0d:
c3:db:f5:c6:56:6b:60:d5:56:65:d2:5e:cd:8a:28:db:6b:a5:
3e:ff:fd:6c:ca:39:99:ba:90:c0:b7:ff:45:10:42:73:c3:0b:
73:cf:2c:f8:f8:e6:6f:55:f6:79:f2:1f:03:64:a8:f6:e7:99:
6f:08:8e:4a:5d:52:9f:39:c3:ba:d0:3a:53:8e:7b:86:be:de:
7b:f8:13:5e:21:d7:fd:cb:ef:c1:56:d0:76:f3:31:96:30:ad:
fe:0d:a6:bd:05:f4:7f:53:0c:86:62:c2:d9:38:8a:ef:53:b6:
36:cb:7a:ba:05:91:17:e9:5a:bf:b0:b5:f9:43:21:76:57:dc:
e3:9a:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:42 2025 by rpki-client