Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0bd3d2e-87fe-357e-8697-40c1d1a52712.roa
File: e0bd3d2e-87fe-357e-8697-40c1d1a52712.roa (raw, json)
Hash identifier: 8CZaPBpA+KU383p7hwq0EdW9AaQfcumYAm3StvDJc2Y=
Subject key identifier: D2:67:81:0E:6E:45:81:91:91:98:AE:65:87:37:F7:6E:CA:BE:4C:B0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C0075BB2BB1B85F5CF440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0bd3d2e-87fe-357e-8697-40c1d1a52712.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.30.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:00:75:bb:2b:b1:b8:5f:5c:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=f0104fdd-2218-44bc-9aea-c3740b300b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:d2:67:8c:4d:a0:3e:1d:48:95:f1:f1:8a:
f1:a3:16:de:8b:8a:f8:1b:7d:13:93:f5:8b:5f:72:
ec:c8:34:c0:0a:6f:4b:fc:90:53:be:91:52:ad:34:
3b:f0:a2:26:26:2b:c2:a1:0f:6f:e5:50:3b:2b:e5:
b8:6b:e6:bb:29:ce:21:41:b0:c7:0c:88:eb:9b:3d:
01:f4:dd:5f:90:cb:e2:70:24:70:50:4c:19:72:84:
be:5d:ec:bd:5d:2e:1a:a8:a5:43:53:2b:11:3c:54:
63:98:ff:d1:ff:50:25:39:75:53:2b:50:60:7f:e1:
85:f5:a9:ea:9e:82:c5:09:9a:d3:7b:b4:5f:c2:5c:
aa:80:ee:5b:e0:7e:99:cd:f5:85:d4:14:45:d0:8c:
ab:9a:33:06:56:34:31:ba:e0:fc:13:ca:06:e6:c0:
00:9b:15:6c:69:b7:a2:bc:7c:2a:86:95:cb:12:c3:
57:6d:74:ec:28:dd:34:96:1e:0a:ff:64:c8:1d:05:
bd:ec:9a:8e:b2:6d:c9:24:01:a6:4c:52:f2:3e:ad:
94:a4:31:63:f2:90:e0:53:9f:cc:63:5e:cb:3d:0c:
d8:b4:8c:bb:f1:46:47:9f:23:31:9e:5c:38:0c:a5:
27:64:19:59:75:b9:cc:13:ab:af:86:1c:d4:5e:0f:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:81:0E:6E:45:81:91:91:98:AE:65:87:37:F7:6E:CA:BE:4C:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0bd3d2e-87fe-357e-8697-40c1d1a52712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:a6:9e:0d:ba:02:ae:3e:c3:d7:f7:75:2e:f7:6f:5e:21:38:
b4:86:23:c4:15:a3:fa:c6:c3:7f:ae:ef:b6:30:a8:5e:c7:71:
34:ee:50:08:4f:c9:cd:02:fc:8a:10:53:07:67:cc:47:39:26:
e3:10:6e:e5:dd:53:ab:ec:b3:fb:83:33:10:0c:e7:39:c9:6e:
7c:e1:b5:97:f3:86:c6:13:00:98:7f:c2:77:e4:4c:25:0c:da:
44:bb:cf:88:fb:cb:13:c1:0a:15:46:59:4e:45:23:e1:6f:c1:
94:f5:12:84:e7:6e:4f:eb:72:7c:81:f2:e2:69:d2:48:3c:5e:
69:cb:36:89:ec:1e:6f:75:31:38:27:9e:50:ba:a2:28:cb:66:
75:94:8b:16:31:40:40:ff:cc:6c:e9:f7:51:bb:e6:6e:3c:b8:
84:fd:15:03:c4:c7:05:f0:78:79:12:66:6f:46:66:52:00:3e:
5d:fa:74:b3:44:b2:d8:f7:f3:64:5c:67:91:39:5a:e3:c0:ae:
92:99:b0:91:a0:03:dd:10:d2:db:12:87:bb:b7:25:5e:f8:44:
46:8f:e2:20:78:e8:45:de:09:3f:84:5c:e6:7e:6e:e3:83:ba:
ba:97:8a:4f:b5:bd:e8:1c:77:79:bb:d4:95:81:0c:16:e7:b8:
15:97:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:55:02 2025 by rpki-client