Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925e21c5-22e7-3114-9a25-9e0507c8972f.roa
File: 925e21c5-22e7-3114-9a25-9e0507c8972f.roa (raw, json)
Hash identifier: rlVSIQWnu0mWwtqVfiCxs/zg7torQ7uKYoCOcWkWl3g=
Subject key identifier: EA:87:4D:A6:A6:A0:70:1A:BC:E1:F0:FC:E8:B9:CF:41:B9:51:A4:90
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBC783F2BA300E0D9FA080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925e21c5-22e7-3114-9a25-9e0507c8972f.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.154.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c7:83:f2:ba:30:0e:0d:9f:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=d93a19c4-ea29-4ce2-b8af-3f47829ef1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:b4:23:dd:8a:69:e2:d2:71:16:38:5c:09:
39:b7:f9:f0:46:d0:58:b8:24:41:45:f0:b1:71:30:
1d:c4:7c:74:94:ad:8f:21:55:5c:0b:f5:f6:bc:cc:
1b:1b:5f:a1:15:61:3e:e5:dc:6b:4d:a7:a5:40:01:
57:17:0c:ef:7c:2e:70:5c:8f:7d:e8:62:4b:42:df:
0f:4f:93:44:1d:b9:e4:28:46:5e:52:be:72:e7:6e:
e6:23:c5:77:b9:a7:6f:32:22:7a:12:4c:80:c7:47:
83:96:03:de:5f:72:01:64:41:10:0c:d7:60:66:9b:
4e:3f:67:d1:64:8b:1b:62:d1:ea:56:98:1f:4b:83:
a7:1a:7e:df:b1:d3:d6:fd:c6:fe:74:f6:b3:1c:ac:
d9:2a:20:6e:22:8a:ac:bb:f8:a3:d7:da:ba:98:0d:
58:71:a9:4b:7a:87:1e:0e:5c:18:2a:bd:89:30:70:
d4:76:77:e4:3f:30:8b:72:d2:76:2f:22:0b:b4:d6:
a6:3e:ba:22:63:27:d0:dc:f8:7f:41:a8:f8:c9:95:
d0:cf:ce:66:0d:72:7a:43:57:20:4a:2b:21:69:34:
83:01:56:d6:22:f1:88:45:9e:d0:2f:38:da:48:ac:
86:ba:cb:a4:88:02:df:23:03:5b:b7:1e:37:93:8c:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:4D:A6:A6:A0:70:1A:BC:E1:F0:FC:E8:B9:CF:41:B9:51:A4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/925e21c5-22e7-3114-9a25-9e0507c8972f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:57:df:13:cf:31:25:73:b1:8e:f6:78:37:30:da:f3:d7:e5:
88:7b:13:af:2e:78:02:4a:f6:e9:fa:a6:c2:5d:d5:f3:e6:1d:
58:25:85:27:51:9a:c7:d8:e1:ba:54:bf:f0:84:78:a1:2a:fa:
13:92:05:c7:ef:78:0b:84:49:86:d3:a5:1e:73:e1:07:ff:ed:
ce:bb:62:5d:51:e0:17:2e:03:92:fc:bc:6d:ab:0d:fd:e9:1d:
f8:24:9b:c6:25:3b:db:d7:bf:42:b9:bb:e1:21:1e:69:6b:2b:
97:b1:2b:f5:6f:d7:e8:d6:eb:8b:63:d7:0a:e0:24:a4:f1:79:
7f:ec:26:36:b4:b8:d4:79:42:1f:95:77:bf:08:e1:bb:4f:25:
7e:86:f9:90:1c:fa:12:9d:b4:75:a6:0f:62:dc:e1:5b:d8:b5:
05:58:75:9d:11:49:49:9c:d1:96:b0:32:58:41:3d:9c:c8:4c:
89:c9:9c:6e:ab:2c:f5:86:9c:d2:9e:07:4e:03:f2:1d:23:41:
55:7e:d5:01:5e:ad:c8:a5:9f:9a:54:de:ba:78:0d:19:90:ac:
be:c2:39:e9:58:31:21:f0:88:ad:7a:d3:21:0f:8e:36:7e:cf:
c1:c2:48:77:94:04:4a:20:82:37:3c:bc:2a:3e:3f:cb:12:24:
0a:49:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:56:06 2025 by rpki-client