Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce215028-46fe-32e3-aa01-6d8a11d0be71.roa
File: ce215028-46fe-32e3-aa01-6d8a11d0be71.roa (raw, json)
Hash identifier: Z9rgtXQi5ZOvKgDJnfZ7pK2BQ5UkxQoNJ7r4XRVlyIk=
Subject key identifier: 20:58:8F:D9:E0:0E:13:6C:45:B4:EB:54:9A:FD:4D:9E:98:ED:78:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBD07D54A2B3C5F7E0A210
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce215028-46fe-32e3-aa01-6d8a11d0be71.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.154.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d0:7d:54:a2:b3:c5:f7:e0:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=f38e85d2-6eb8-4cfa-89b8-ebafe681f789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:a0:7f:20:45:3c:86:d0:96:58:ec:2d:e8:
b1:5c:e0:0c:8d:bd:e8:31:ea:d5:c1:13:a0:1d:59:
49:25:3b:32:b2:c3:82:25:08:fe:07:80:53:26:4d:
d7:ba:5c:26:55:ae:06:30:92:34:f0:4e:6a:4f:62:
06:92:c1:b1:23:d2:17:33:5a:66:9d:11:66:48:72:
fc:6b:4d:f6:66:8d:5d:98:07:f5:48:b7:13:ee:ae:
5e:80:2f:ca:3f:e8:a5:e0:ce:6b:c7:2f:56:db:6e:
bf:01:65:92:79:05:18:27:aa:b1:9e:22:15:3a:05:
b1:d1:f0:18:52:31:6c:94:5f:31:b0:7e:0f:af:18:
64:a0:4e:6c:7f:af:31:de:14:57:0e:dd:4d:bc:d0:
48:c6:a5:a9:9b:1c:8c:2d:a6:fc:6f:c5:aa:a2:f5:
86:8b:73:e7:7e:6d:43:67:c3:42:55:7d:b8:79:0e:
66:36:03:6e:88:50:2b:36:e6:b7:82:ef:32:98:1a:
1e:79:3c:b2:77:51:c9:d5:38:4b:b9:94:7e:41:30:
8f:f0:4e:97:33:a2:43:09:2b:a1:99:a4:12:d8:c0:
ad:77:16:88:ca:8e:7a:5c:d7:af:41:0a:84:85:f4:
1f:71:34:d8:71:f8:5a:99:e6:09:1c:f3:20:91:cd:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:58:8F:D9:E0:0E:13:6C:45:B4:EB:54:9A:FD:4D:9E:98:ED:78:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce215028-46fe-32e3-aa01-6d8a11d0be71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:8c:e0:f2:fe:ea:fa:c6:1d:c7:df:71:f1:20:48:43:1e:73:
a2:d9:29:10:70:8f:3f:46:bb:65:51:0e:53:d4:94:4a:9c:92:
a4:bf:5a:25:6f:bc:81:c4:c0:da:8b:30:fe:9a:2a:e8:1a:6e:
11:e8:c9:4c:04:1f:f8:5e:3c:63:a8:73:af:ee:f4:98:a5:5d:
e5:dd:7c:ae:d1:6f:4d:0e:59:0b:76:71:db:bc:5c:a1:0e:d5:
2c:74:91:ea:08:29:37:ca:89:45:dd:cb:40:79:5e:6f:4e:1e:
a9:2d:74:18:3b:57:30:38:de:d6:eb:b7:ff:af:9e:5b:b0:91:
db:c9:46:ab:16:52:fd:c2:82:b0:40:8f:a4:04:c7:0f:a2:2c:
8a:78:c5:11:a2:f4:e8:c2:54:09:9a:b9:8f:21:62:57:a1:78:
9a:0a:24:67:0f:ea:cb:65:31:ff:1b:c7:54:25:92:a8:f3:48:
04:7f:1b:1c:70:b6:6e:13:0e:98:12:e2:b3:46:5a:2b:aa:27:
bf:c1:4c:72:d3:6c:ad:f6:8c:27:bc:d5:f3:67:a8:7e:d2:12:
4d:3a:10:94:65:e2:7a:4e:a7:0c:94:f9:35:92:4b:2c:88:8b:
da:55:f9:22:41:24:2c:b3:d5:41:18:98:16:1f:65:c7:e1:32:
97:3c:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:44 2025 by rpki-client