Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7810970-12ab-37de-9bb9-fbef217ad4b9.roa
File: f7810970-12ab-37de-9bb9-fbef217ad4b9.roa (raw, json)
Hash identifier: 9WJeqTvMndGB7CxpP9BiO1ZjFDFV2qz/nE+DVnrJKSs=
Subject key identifier: 6C:2B:B4:8F:5F:B1:B9:44:D4:61:3C:E9:1C:B9:25:F2:15:0B:21:0E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C014CF0B4BCF5288F1CA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7810970-12ab-37de-9bb9-fbef217ad4b9.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 104.31.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:01:4c:f0:b4:bc:f5:28:8f:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=cafa5a20-9533-4a20-a511-ac7d2810a254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e6:5b:df:e8:1d:ab:4a:c6:70:83:59:b1:26:
32:e2:c0:9e:43:81:7b:33:10:3a:d7:77:d1:20:bf:
cb:06:17:2a:5d:7c:08:f3:fd:41:2a:d5:d8:69:01:
d3:67:a9:34:dd:7c:76:e4:54:dc:98:24:26:6e:90:
65:a2:8a:f5:c2:24:8a:c2:0e:e0:a1:ce:48:15:55:
6f:37:6c:a2:c0:bd:c8:c7:5c:b4:58:ea:27:7e:0e:
9b:7c:f3:98:10:be:06:52:e4:12:b8:10:37:ad:44:
ec:95:39:48:b7:3e:c8:1a:fc:a5:aa:a7:ae:30:28:
d9:58:67:ba:17:50:d4:dd:0b:d5:14:f0:37:ac:73:
44:66:4d:43:7d:22:28:94:ed:47:68:8a:50:02:b8:
2e:27:a7:50:da:cf:86:2e:a3:f2:15:5f:42:69:15:
c5:11:65:2a:2d:a4:49:11:c2:7c:09:b5:b2:d0:82:
32:a6:3c:d3:cd:9b:da:87:43:87:3d:a9:d4:df:47:
35:be:61:6c:a4:39:11:04:04:3f:61:d7:86:f4:68:
6f:03:9d:f2:1a:f6:c6:90:f7:42:ac:ef:8a:ce:6f:
8e:dc:ab:93:3b:f1:9a:ef:c7:25:37:9b:3a:69:08:
fa:00:bd:c6:a8:ab:68:1e:28:7a:c4:63:c3:0f:0b:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:B4:8F:5F:B1:B9:44:D4:61:3C:E9:1C:B9:25:F2:15:0B:21:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f7810970-12ab-37de-9bb9-fbef217ad4b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.31.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ae:26:9a:2e:94:8c:d0:b8:73:57:cb:92:6c:9d:f0:62:70:
b1:61:68:79:7e:7d:68:9a:cd:44:8c:c1:49:99:6a:b0:5c:f7:
1e:43:f4:aa:b3:d7:b7:34:6b:94:fb:72:83:1d:39:49:2a:1a:
a9:4b:57:b8:1d:3b:87:30:01:c5:49:38:da:5b:46:96:b0:5c:
97:4e:25:78:08:bf:f7:ce:fc:66:8d:d4:b9:19:28:4f:29:20:
2c:45:16:ff:1a:0e:f7:86:01:eb:d9:c7:f7:29:aa:33:e4:f3:
36:a1:ab:84:4f:7b:db:ef:b0:ea:63:c2:20:1f:33:31:af:d2:
53:52:c7:35:82:73:cf:cc:a0:fa:ee:ba:d5:ec:7a:fc:52:6a:
83:cb:76:3c:31:61:7e:95:ab:e6:f5:c6:3a:66:99:ab:02:51:
ef:e7:13:f2:95:9b:1e:d5:bf:02:fd:29:f0:dc:30:fa:a0:c4:
79:04:f7:e1:45:c4:d6:d7:2a:7a:b3:ee:e2:53:47:7c:b2:ac:
c0:91:64:70:b6:3d:73:4d:8b:43:6b:63:7a:8f:d7:e5:f1:fe:
d1:a8:6b:1c:cc:57:af:11:d9:4d:e9:59:41:a4:5e:d7:ae:d3:
f1:24:87:e3:65:f7:d3:b8:41:b4:a8:f3:00:78:41:3d:8e:9d:
20:ae:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:03:37 2025 by rpki-client