Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00143943-b799-3df2-b33d-4f85cc954a8b.roa
File: 00143943-b799-3df2-b33d-4f85cc954a8b.roa (raw, json)
Hash identifier: IE6s9HF8HIlTeDZG47h+TVbCJeyNSSMHfSoDZY2sreI=
Subject key identifier: 09:DB:B2:1D:DC:D4:C9:C3:CA:9E:7A:2F:5B:F5:78:E1:0B:9C:05:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBAEE11B6807A195C6F0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00143943-b799-3df2-b33d-4f85cc954a8b.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.154.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ae:e1:1b:68:07:a1:95:c6:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=b5608bb8-3d4f-431f-9d99-e8a3468623f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:d4:f6:78:68:7a:f1:ad:0e:2b:4a:6e:52:
87:8e:ae:d4:56:9e:f2:62:a5:51:0b:2e:6f:d4:72:
91:35:fe:a0:40:c7:c0:d0:85:c6:76:33:b2:ea:2b:
71:6b:3a:eb:01:7a:00:34:46:11:d1:bd:7c:f4:b6:
7c:d2:88:86:7f:45:f0:7b:2c:17:fb:e3:91:d7:72:
8e:f6:be:81:3e:a2:20:b8:fd:cb:c2:10:80:06:c2:
4a:91:44:65:eb:f6:b3:15:e1:5a:67:80:d5:92:2c:
41:b9:61:97:75:63:a5:db:ab:6c:2e:84:50:11:aa:
83:24:7c:2c:c0:c8:cd:ed:39:f2:fa:1c:4d:53:c8:
92:c0:24:06:ac:95:ad:e5:cf:bc:c1:66:63:7b:bd:
09:ce:a6:59:3d:33:c5:32:cc:f9:b9:a1:31:7e:4c:
ad:d6:6e:3c:d1:72:fb:35:e1:89:2e:fb:1a:84:fe:
64:2d:7b:67:14:e0:da:ea:00:be:d7:6b:ea:9f:c7:
ef:81:8e:a0:b3:8e:25:10:d8:a1:d9:37:1e:44:e7:
7a:74:03:3b:d6:de:7c:fd:ba:ae:b8:87:d3:8c:0a:
41:d2:84:4b:35:e4:5a:13:fc:2f:d5:a5:9a:2c:b7:
ff:0b:21:4b:36:7a:bb:67:3b:44:cc:cb:06:21:dd:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:B2:1D:DC:D4:C9:C3:CA:9E:7A:2F:5B:F5:78:E1:0B:9C:05:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00143943-b799-3df2-b33d-4f85cc954a8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:de:ec:2e:17:13:27:2b:ba:05:cb:df:e1:8f:94:68:03:04:
f4:be:18:3a:55:92:27:de:a4:a1:df:06:c5:50:54:ba:24:4b:
f5:ea:c9:5c:75:a5:6d:11:86:00:5b:b5:65:8d:36:cd:9d:de:
68:96:01:49:9a:6b:1d:e6:dd:27:70:28:cb:42:72:0a:8f:6a:
64:23:11:ea:ab:68:73:e5:c0:be:de:d9:40:9f:24:31:c7:da:
9e:13:89:ab:02:10:d6:73:cb:da:a9:65:84:3c:06:9f:14:4c:
6c:3b:fe:70:70:9a:cc:7f:ce:c7:92:c4:0c:ec:78:d1:86:ea:
15:22:7f:bc:40:07:15:86:91:50:07:c4:ca:95:f9:fd:b9:55:
ce:b4:70:41:5d:4c:89:26:95:cb:a8:33:87:c8:f4:99:c9:56:
4d:e2:dd:dc:d5:30:db:1b:78:9f:d6:77:10:7b:ab:58:3e:f7:
3e:11:71:51:e4:83:03:59:9a:10:37:1f:18:79:47:93:13:f3:
46:45:ff:fd:cc:d9:7d:b1:8c:2d:2a:1f:a4:ba:a1:33:94:b5:
62:c2:49:17:17:dd:fe:bf:af:32:58:78:f6:80:32:f5:1e:eb:
1e:9f:52:6c:a3:86:87:82:c9:7a:f7:69:5b:92:9c:9f:84:22:
a7:ce:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:00 2025 by rpki-client