Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa
File: 16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa (raw, json)
Hash identifier: /3SXFbCwltGQi5ka50/QQs30JJHfhaZS4c/yWAjzwLc=
Subject key identifier: CD:17:C5:B4:64:A1:76:BF:59:27:21:34:83:27:AF:67:1B:12:D0:A0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBBC891C9739627BACF2C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.199.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bc:89:1c:97:39:62:7b:ac:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=7e08c328-1137-4446-b3ad-4845cdad3adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:dd:f7:51:ca:d8:34:21:e5:67:66:d0:40:
cf:a4:f2:81:9a:66:55:50:35:59:f6:21:ce:5a:44:
a8:77:53:a0:43:5c:d3:c9:26:57:62:b1:0d:ad:6d:
40:bf:7a:75:ee:b4:f2:11:6b:6b:62:f6:c1:53:32:
7b:00:21:7c:80:70:62:cd:8c:d3:48:26:1f:db:57:
f6:a9:ef:a7:e4:59:bb:bd:c2:30:1e:75:b8:ec:7d:
0a:e8:fa:bf:1b:ed:27:a4:c6:c4:df:24:8b:50:ea:
ee:1a:5e:f6:f8:2c:78:e8:af:09:91:71:d5:b7:e5:
26:83:be:44:2b:9a:3e:95:30:f2:19:1d:00:3b:1c:
bf:0e:d6:1f:fe:b2:fe:db:0a:39:8e:b4:a4:c4:a0:
13:ec:1f:22:0d:80:13:4b:9d:1f:ea:25:b2:a0:e5:
ed:a6:16:85:fd:82:56:30:99:5e:7c:34:9c:0b:db:
c8:25:e0:c8:c7:c8:44:f9:22:7d:3b:7d:fd:12:35:
e6:87:e0:fd:54:bd:33:46:95:8f:a9:e2:aa:92:f5:
12:a5:2b:0a:1d:f4:33:09:93:46:38:44:83:e4:a9:
26:a2:b0:34:d8:ac:3c:be:06:f4:2d:96:cb:8e:31:
46:5e:dd:ab:0b:80:cc:80:46:d4:6a:66:e9:92:43:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:C5:B4:64:A1:76:BF:59:27:21:34:83:27:AF:67:1B:12:D0:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:cc:e6:cd:0c:3f:52:48:ca:86:18:d9:8a:db:99:62:f5:85:
0e:db:77:e3:9a:8c:02:57:fb:96:a5:7e:16:d5:89:5b:87:06:
b2:00:86:7c:a7:46:f1:76:6f:4f:84:0d:9d:fd:9c:4c:93:1f:
50:1a:5f:00:5e:a4:93:13:0d:ee:1d:1a:60:6f:38:eb:05:4f:
58:7c:b9:b6:97:e0:f0:93:03:f0:ab:a4:0c:5f:07:81:d3:13:
8b:89:09:5e:8a:05:34:aa:5f:6a:13:ec:1d:4f:9a:1f:9b:a3:
d0:e4:70:aa:c3:05:06:f4:45:b5:69:c7:85:f6:87:33:20:f3:
b9:c8:3d:93:88:92:73:f1:38:24:de:bc:11:c8:ef:3a:36:8b:
97:13:a5:58:3d:09:28:bb:31:b3:8f:a7:f1:fc:ae:30:e4:4e:
c1:bc:f7:32:62:89:7c:41:d4:96:7f:cd:05:92:ab:66:84:a0:
bc:36:27:10:96:ee:c0:be:a7:fc:2d:3d:73:13:28:1f:67:4e:
d5:a7:1c:ed:6b:5f:b3:b1:cd:ac:53:86:08:33:51:f6:a5:c4:
ec:e3:d5:bc:95:71:87:14:1b:c8:26:49:0d:93:10:4f:b7:5c:
f7:82:97:99:0b:76:73:96:0e:66:ca:e0:08:28:f9:e5:a1:28:
f0:6b:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:34 2025 by rpki-client