Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb95bd59-ae11-3f25-b873-d96184bf8ebd.roa
File: bb95bd59-ae11-3f25-b873-d96184bf8ebd.roa (raw, json)
Hash identifier: bH7yEswkD79D/AalyZMtfyJtpxVku8HPWT22viilNPU=
Subject key identifier: E5:4F:EC:13:11:A3:9F:2E:10:C6:CD:E8:44:5E:41:8C:36:88:C1:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBB9908D6893750FD1C2A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb95bd59-ae11-3f25-b873-d96184bf8ebd.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.155.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b9:90:8d:68:93:75:0f:d1:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=cf9a2d80-604e-4bea-9c0d-6a65d4f1c2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:28:20:1d:d6:5e:ca:06:32:fa:f9:8e:ce:
07:47:3d:97:5d:39:3e:14:94:97:96:24:d2:46:2e:
8b:a1:c3:bd:83:e4:8b:1d:c7:2d:e0:1b:f8:0c:a9:
e4:23:94:1a:6c:8b:a9:f0:d5:3a:f0:b2:66:89:4e:
f7:fa:a7:06:93:72:0c:97:cd:19:66:8e:9d:81:b5:
4b:ec:75:80:86:3f:77:27:f9:67:85:47:bb:02:12:
ae:33:37:21:50:78:1d:b6:d5:3b:cc:52:77:6d:84:
92:84:1d:b5:59:df:94:b2:c2:04:5a:a8:07:17:21:
fb:46:4b:bf:45:e3:3b:b6:43:0c:7c:c5:82:8c:c8:
65:af:c8:f3:cc:c5:89:b2:e7:7a:b1:f4:08:5d:d5:
af:c0:ad:59:a1:c9:dd:3a:b7:fd:06:05:e1:b0:db:
a5:0f:e7:3e:21:b0:f3:d0:87:07:ae:fd:b2:0c:c4:
9e:d1:4a:6c:c9:57:b9:e3:c5:7d:45:1e:52:3c:e2:
45:b2:ef:25:a4:c5:ca:47:0b:52:59:74:4a:b4:ef:
b9:24:76:2b:50:58:f9:fe:a7:f3:f4:6c:55:b4:ac:
d8:c1:21:e8:90:15:5f:96:9b:fd:0d:c5:76:82:78:
7b:5c:41:a3:f6:46:d0:3b:ef:94:39:0e:bc:f7:f8:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:EC:13:11:A3:9F:2E:10:C6:CD:E8:44:5E:41:8C:36:88:C1:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb95bd59-ae11-3f25-b873-d96184bf8ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:f3:3f:c3:f1:63:13:86:9b:8c:18:fc:41:02:02:60:fb:3b:
ad:54:02:cd:d2:78:80:c2:3a:79:6f:58:85:95:a7:3d:0d:3d:
92:74:1c:14:09:a3:d9:8b:74:7b:68:9c:d7:86:df:0e:1c:e4:
a2:23:80:15:6c:e2:82:35:41:09:cf:49:9b:03:f4:de:e3:d2:
18:29:ba:8c:43:9e:7f:6b:2a:c0:0b:b9:f6:7d:1f:2e:84:7c:
8b:d0:b0:99:ed:eb:e6:15:b2:6d:00:63:95:00:7f:4f:99:1b:
cf:80:d2:a8:2b:72:bf:32:43:11:c3:22:bc:21:8a:62:16:dd:
74:06:58:87:a2:38:3b:1e:de:b0:b0:ed:d3:05:62:af:11:66:
e4:b3:81:23:17:22:b1:5a:6b:43:4b:23:05:a7:e2:5d:d5:31:
c0:84:3a:cf:9c:5c:8e:69:cd:59:cf:a7:5e:62:ff:65:bd:9e:
a3:c0:ca:d6:f5:7f:b5:55:46:50:cd:da:f7:8c:fa:1f:44:c5:
3b:ae:b1:70:15:4f:2e:0b:22:aa:7e:51:64:dc:9c:23:68:49:
54:ab:19:f8:f4:a9:a9:3e:a5:44:fd:4f:ee:28:d3:13:c5:69:
89:f9:c5:04:f6:ab:5e:69:33:c5:4d:69:33:6c:40:e1:3c:28:
1a:b4:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:48 2025 by rpki-client