Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf4027bc-fad1-31d4-84a4-5a724fabbd32.roa
File: cf4027bc-fad1-31d4-84a4-5a724fabbd32.roa (raw, json)
Hash identifier: WdNp3G+4ABGIO+Jwiw8BDyb4ObgNXJa9pH+PKimt4WE=
Subject key identifier: BA:8B:EC:A7:61:D6:B8:5C:8E:D8:E2:DB:F6:EA:9D:EC:53:C7:B2:6F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBAAF6375A58A590E87810
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf4027bc-fad1-31d4-84a4-5a724fabbd32.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.154.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:aa:f6:37:5a:58:a5:90:e8:78:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3fe99ec2-6bf3-45ec-997c-9ca1d16cd7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:46:20:26:a6:93:14:0b:17:33:d3:aa:a3:
13:eb:56:af:83:64:1b:ed:bd:26:de:a6:ec:df:dc:
f8:a9:b4:91:f0:2b:e9:37:8b:df:35:2d:c1:a8:00:
1b:75:eb:b7:8f:29:10:e1:b4:18:8d:6d:d6:f9:b4:
d2:0f:cb:a2:4e:60:84:c6:4c:95:db:59:41:ff:4b:
e3:89:78:2d:4f:63:8e:56:c5:a7:c3:f8:b6:05:ba:
75:99:92:a9:68:7d:fb:95:ff:f1:d7:b7:36:21:ef:
9f:6e:7b:78:30:c5:4d:26:fd:51:4c:d9:22:33:c0:
b0:61:df:14:3d:36:4b:a2:97:7a:88:f1:e1:a6:d9:
86:e3:53:13:fa:89:1b:2d:c0:4d:fd:41:fe:1c:87:
9c:c4:9e:94:5e:1c:b3:21:03:4c:8a:55:69:e3:eb:
ca:2f:33:ee:26:ef:fb:a8:fc:47:b1:32:e6:57:56:
cc:63:cd:17:09:b3:28:2b:8d:b0:f6:03:db:fa:f3:
3d:81:6e:33:38:eb:9a:1a:bf:1e:f9:4b:71:c0:52:
f6:8a:fc:a2:9c:46:c3:40:4f:8f:f1:8d:1b:8f:f8:
ee:aa:11:7a:68:ee:41:4f:75:81:17:b6:d7:dd:91:
33:3b:24:65:5a:96:38:5a:26:ae:4f:23:f5:ae:ae:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:EC:A7:61:D6:B8:5C:8E:D8:E2:DB:F6:EA:9D:EC:53:C7:B2:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf4027bc-fad1-31d4-84a4-5a724fabbd32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e4:13:ba:ff:f6:e1:01:96:ab:00:25:d1:27:1c:6c:75:94:
b8:b4:b8:0d:e7:f6:c1:2a:96:b5:db:7f:02:fa:43:3e:66:62:
8f:87:0c:e1:fc:e3:ff:4d:30:e1:12:b5:fc:e4:65:65:f8:8b:
79:da:c4:d9:78:d3:82:e7:e9:73:18:97:7a:45:43:6a:00:54:
a7:52:98:e7:36:01:b1:1a:7e:1f:4f:71:7e:ad:af:fe:0b:82:
f3:9b:68:ca:9f:2b:5c:0e:ff:12:40:bd:ee:65:d8:92:19:f2:
0a:f2:71:dc:07:83:b3:7e:da:a1:be:76:b0:86:a0:99:c3:a1:
8c:76:49:54:f4:c8:30:3c:c8:c7:1d:5d:8d:55:1d:ed:dd:bd:
ad:86:f3:80:3d:73:46:28:1e:63:2c:10:68:f0:c7:9a:b5:27:
45:fa:81:97:9b:6d:cd:51:da:77:16:8b:9b:db:bb:fb:b3:d4:
ba:28:bc:2f:3f:15:99:9b:5a:9d:ca:d0:03:f6:06:f2:fc:75:
74:d6:62:f9:b9:f3:d2:94:cf:30:97:04:f7:83:16:9b:c7:8b:
8b:ff:e3:9a:45:ff:c8:e4:db:a0:29:c1:00:4e:e2:c3:1e:90:
06:80:20:b5:58:1b:c2:a5:8d:59:f2:55:99:a9:a8:d5:e6:c7:
fc:da:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:47 2025 by rpki-client