Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dee4400-5e6a-3ceb-a4fc-bc6710cd19a8.roa
File: 6dee4400-5e6a-3ceb-a4fc-bc6710cd19a8.roa (raw, json)
Hash identifier: U0ovn7m7duxQDgVwR1OguwmsrpPnZ9aq+8bcg9FM2Z0=
Subject key identifier: A8:04:84:8B:C5:D2:CA:33:7E:F2:0E:EA:3F:C6:42:DC:43:97:BF:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBD0DA0768A8C9F86E70B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dee4400-5e6a-3ceb-a4fc-bc6710cd19a8.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.199.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d0:da:07:68:a8:c9:f8:6e:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=f93ba97f-3645-4e15-97cc-7ef0e92cb966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:fe:ee:86:72:c4:60:82:d8:77:65:20:72:
56:85:22:db:10:94:c2:8a:f7:3d:6d:be:74:bb:48:
ea:61:89:77:97:40:c4:c9:04:c1:45:3a:2a:58:b6:
21:69:b3:9f:8b:4a:89:7c:a9:bd:a3:77:f0:aa:8f:
48:3e:d9:ee:fc:cf:63:8d:5c:ea:2f:db:1b:f9:14:
a0:cb:18:be:9e:a6:ca:fe:23:48:68:8f:b4:5c:b1:
6d:43:f1:d9:3e:aa:c3:6c:2b:f6:7d:f6:5d:cd:75:
ce:fb:7a:7c:72:6f:79:e1:fb:20:22:97:56:1d:80:
2d:57:f6:45:67:f7:8f:82:56:7c:28:b0:c7:d8:5c:
9a:6c:b9:cf:b4:d6:c2:5f:f9:13:f0:2f:a3:8c:54:
93:6a:37:92:99:ed:ab:1a:8c:b9:c7:85:d8:7f:45:
74:61:93:61:4b:00:75:44:5f:d5:85:db:62:f6:7a:
17:a2:e4:7b:e2:1b:58:ad:32:b8:47:f1:81:e5:95:
4b:79:cd:6d:c7:f1:8f:67:0d:99:1b:80:23:f7:c6:
dc:4b:3e:02:8e:b7:2d:82:09:40:40:17:86:99:b0:
c6:63:4c:1a:02:8e:d6:9d:96:fd:f7:13:1c:5a:ce:
40:85:56:88:bb:e2:e9:11:b2:1d:d6:e8:ab:87:7e:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:84:8B:C5:D2:CA:33:7E:F2:0E:EA:3F:C6:42:DC:43:97:BF:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dee4400-5e6a-3ceb-a4fc-bc6710cd19a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e2:e4:f3:b7:ae:6b:ee:f3:fc:91:44:f4:78:47:89:a6:7b:
a4:5f:23:41:f9:3e:68:05:5e:8a:c0:60:31:9f:4e:dd:68:b6:
a2:65:58:b0:8c:05:8d:83:3d:c4:85:b3:b0:5e:cc:8c:c7:db:
b4:ef:41:1b:78:bd:98:e2:99:ff:76:20:3b:56:ac:29:97:2a:
a7:11:67:7b:ea:4f:57:52:dc:7e:9b:45:44:1b:30:07:22:4d:
04:7c:96:cf:2f:e0:ab:ce:36:12:29:9c:e9:42:c0:d1:46:fe:
48:aa:6e:c3:45:75:53:4c:f9:a3:d2:d9:50:f3:97:69:ef:3d:
96:4f:8f:92:36:ca:f4:0b:52:e6:a2:51:36:37:51:a4:ed:f9:
99:b4:d4:a0:3e:5d:63:1c:5e:4c:13:20:65:c0:4d:a2:dd:db:
a3:e7:a2:7c:9d:c2:f3:03:15:d3:b9:36:81:b3:21:02:ea:f0:
02:f6:75:cb:81:33:58:00:16:fb:33:9f:78:37:fc:e9:96:68:
e0:5a:e4:68:c9:db:76:9e:1d:7c:e4:19:a1:cc:65:c5:31:80:
ec:e9:a4:83:7c:30:e3:0c:66:24:a0:ec:85:1c:1c:9c:77:c3:
13:a1:43:e1:6e:64:df:af:aa:9b:4d:51:72:b7:00:56:25:61:
c9:b3:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:52 2025 by rpki-client