Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/cdbe100e-af16-3c13-9abd-d21c141db368.roa
File: cdbe100e-af16-3c13-9abd-d21c141db368.roa (raw, json)
Hash identifier: c3qcEExWQYbs4PqDM02CXhq3bEpdJXuxsGedKPunWjE=
Subject key identifier: 3A:F0:09:02:D2:15:21:BF:D9:A1:81:30:5C:18:1C:B9:CD:8E:C4:D7
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F432858482C0D84FE1AEE1CBA17E0CE87
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/cdbe100e-af16-3c13-9abd-d21c141db368.roa
Signing time: Wed 11 Dec 2024 14:49:42 +0000
ROA not before: Wed 11 Dec 2024 14:49:42 +0000
ROA not after: Tue 11 Mar 2025 13:49:42 +0000
asID: 16789
IP address blocks: 104.156.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:0d:84:fe:1a:ee:1c:ba:17:e0:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Dec 11 14:49:42 2024 GMT
Not After : Mar 11 13:49:42 2025 GMT
Subject: CN=b20cf544-03ca-4802-a58e-995347f27e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:0d:c0:f0:e8:f5:58:35:8f:5b:e9:23:48:
f3:7a:c1:35:3a:c0:e8:c9:c1:b8:a3:6a:0c:d9:12:
9c:e5:71:f8:9c:c8:f7:c8:ec:22:60:21:bc:2e:36:
a1:ef:66:84:1d:66:e7:6d:93:35:f1:58:39:a3:d0:
72:90:24:3c:ba:1d:59:92:ce:00:3a:0f:35:93:58:
ce:69:12:b4:d2:52:6a:5a:fa:e8:23:1f:42:51:85:
f5:81:02:55:84:61:a6:d3:49:53:d4:46:9e:34:2c:
df:ec:51:a1:bc:8d:bd:31:40:50:50:cf:9a:f0:c9:
8e:08:91:fa:e6:4a:8c:e2:44:b5:28:24:49:5c:c8:
3d:16:aa:ce:92:5b:c4:f0:94:22:d7:9d:50:13:aa:
07:0b:47:d4:08:98:89:b4:98:18:58:75:e4:30:75:
9c:15:47:6c:f2:4b:8c:ff:51:75:64:3f:bb:24:5b:
a8:81:a4:ce:39:dc:6b:d5:aa:3e:0a:27:42:24:11:
29:db:dc:36:2a:06:64:30:ee:6a:80:d4:76:85:f1:
5b:bb:dc:72:06:95:cc:03:ce:6d:c8:ef:3c:9b:67:
34:42:74:09:b7:77:9e:9e:06:9a:6b:9a:3a:51:66:
d4:3b:7e:c2:76:1f:e3:2b:66:7f:07:9b:de:a1:bd:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:09:02:D2:15:21:BF:D9:A1:81:30:5C:18:1C:B9:CD:8E:C4:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/cdbe100e-af16-3c13-9abd-d21c141db368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:80:e6:d0:66:e6:4e:c8:15:1c:d5:f5:1e:c1:03:2a:34:e7:
44:5e:40:77:6c:f9:b7:37:f0:03:a4:66:f4:f4:0e:26:4a:0a:
32:87:ba:f5:15:07:83:09:79:c4:e9:29:65:4f:be:5a:73:b7:
1d:d8:33:2c:54:b1:0d:b9:c6:3f:2c:26:60:76:09:a5:4a:60:
d0:6a:75:6b:de:8c:57:4a:49:99:71:7d:b1:ec:5b:46:bc:a7:
9c:92:8a:30:33:01:33:39:a4:e8:c0:72:ac:cc:e6:26:4e:43:
6f:02:eb:f4:c9:9a:15:01:b0:70:38:32:e4:bf:17:0e:2a:77:
42:79:67:a5:4c:b0:9e:3d:e4:e7:b4:45:52:f9:9f:b9:a4:4f:
04:dd:2b:d4:f1:88:29:b4:cc:15:70:3d:dd:08:9f:52:e3:37:
a2:4f:13:49:a6:93:40:4d:a3:0e:03:ac:61:01:ac:70:19:1a:
bf:1f:93:b1:52:6c:a6:6b:21:27:a4:57:28:40:20:2e:00:0f:
13:de:34:62:c1:d7:20:24:7c:94:20:3d:b7:cf:ce:38:25:38:
68:5b:28:b0:7d:64:c6:74:da:35:37:4a:60:e8:2d:cb:20:61:
59:a0:ab:9b:2a:21:92:6b:e7:f6:79:c6:28:01:09:5b:ce:d5:
e3:3f:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:59 2025 by rpki-client