Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bbb54c2-ffb4-3fcd-be12-f06598bb27dd.roa
File: 4bbb54c2-ffb4-3fcd-be12-f06598bb27dd.roa (raw, json)
Hash identifier: 2LFKVKHCBePTk6+3p/L1vCwh1F1//N9LDGSXCl16oTg=
Subject key identifier: A4:38:81:81:1E:90:47:D7:10:8B:F9:DF:A6:9C:1E:89:D1:4D:21:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBAB7E5253C56C6A5A9480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bbb54c2-ffb4-3fcd-be12-f06598bb27dd.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.154.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ab:7e:52:53:c5:6c:6a:5a:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=44382328-555f-4058-a210-c18f95521a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:7c:70:bb:17:75:02:4c:80:7f:54:87:7e:
a5:04:0c:47:37:92:c2:fc:f2:1b:36:52:e1:64:64:
92:97:4e:09:2a:52:ec:79:b9:19:7b:ce:64:76:cf:
e2:89:d5:e2:f3:00:1a:ec:c4:4d:00:3a:bf:ac:ac:
9b:54:4e:48:ee:82:79:66:37:7d:1c:4f:f1:48:2a:
33:8b:2a:41:12:ad:65:55:a7:e7:cd:a1:e4:3c:09:
d5:93:23:33:04:f2:cc:51:ba:05:5b:78:ae:1b:16:
3b:3a:bc:d1:dc:c8:2f:c1:5b:e1:b9:31:d4:d5:dc:
49:b1:a9:1d:1c:58:2e:65:38:7b:ba:0c:1e:99:2e:
66:2f:a8:d4:41:61:ea:f8:a3:98:ac:7b:3a:72:f5:
59:e1:c2:90:ce:a2:a3:f9:fd:1b:dc:66:7f:03:4f:
dc:94:ed:4d:e2:9c:13:a0:d7:6d:ee:83:d3:69:66:
7c:ee:12:b4:a7:73:11:33:95:41:1a:c7:80:63:ed:
c2:f1:a6:05:31:fd:f3:23:3d:40:2f:99:3c:3c:d0:
02:2f:fe:2a:d1:ac:f1:e9:84:06:ed:39:8a:b7:96:
bd:95:15:65:3c:61:f2:67:02:ef:e5:36:d3:1b:1e:
16:37:59:e3:cf:5d:1f:28:ce:e9:8e:53:9c:48:36:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:81:81:1E:90:47:D7:10:8B:F9:DF:A6:9C:1E:89:D1:4D:21:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bbb54c2-ffb4-3fcd-be12-f06598bb27dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:91:b5:b1:33:c8:ff:58:9e:1e:c2:2d:76:40:e9:da:7e:26:
da:a1:55:73:aa:61:bf:4a:5d:a1:10:46:1b:12:d0:a2:55:5b:
30:aa:7a:da:97:67:26:5d:79:d1:5c:e6:65:d9:cd:ba:15:78:
42:a7:a7:8f:93:6b:00:c5:fb:11:c8:6e:96:87:78:7a:d7:c0:
8d:87:99:27:4c:b0:83:ef:28:ba:67:98:46:d0:ec:94:ba:68:
c5:39:1e:45:23:70:3e:08:64:a7:0b:09:cd:3d:4a:b7:e9:2f:
9e:f8:61:c6:c5:d7:32:9c:e2:47:1e:86:a7:2e:fb:e7:85:bf:
5d:cc:52:26:7a:06:d7:4a:9a:1b:5b:2d:fe:22:f7:ea:11:a8:
07:11:a1:e0:d2:21:23:e7:f6:d3:6c:61:27:56:32:23:e9:92:
ae:8d:e0:bd:ea:6c:4b:47:e3:d0:56:a0:dc:b9:ff:91:af:2e:
87:26:7b:3a:49:e2:45:8a:ac:62:3e:27:43:c4:46:64:61:5c:
a0:38:ca:5c:2f:5c:01:90:76:86:cc:87:38:b6:0c:04:8a:64:
dd:07:ec:c0:8e:d9:59:4d:a3:64:5f:f2:46:67:21:30:bc:3a:
d7:07:12:dd:19:8a:ee:d7:08:f6:30:45:56:81:7f:f6:54:1f:
63:2f:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:38 2025 by rpki-client