Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa
File: d88b5200-310f-3d92-806a-4a865f0bb691.roa (raw, json)
Hash identifier: kYz0WiYcAHTISbjRQcnmjcdue1gp20+fYkJk1zoD4fA=
Subject key identifier: 3A:B8:0E:C8:0B:48:B1:89:17:04:90:2E:1F:49:17:4E:78:5F:35:AD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBCA6E648C222399682B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.199.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ca:6e:64:8c:22:23:99:68:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=bc306791-9891-4fd7-826e-ae3fc920e3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:42:27:94:17:17:16:5c:26:41:8c:5b:c4:
4f:a4:00:de:24:77:f3:9c:1f:b1:f3:74:f9:d1:97:
89:b8:3a:19:5d:b6:00:f1:39:9e:a8:2d:93:43:60:
ac:ad:e5:13:48:6d:98:96:14:2a:df:98:8e:c6:39:
3e:84:e7:c2:65:ad:af:40:3e:f8:7b:37:7c:4f:cb:
b5:12:78:f1:6d:c2:fe:2c:b8:54:24:91:98:97:6d:
3f:2e:80:1c:8b:b2:b0:d1:5d:49:46:45:e1:69:4a:
5c:62:a7:95:59:17:5a:ea:b7:14:cd:81:d4:d5:e6:
fb:bb:d9:f6:6d:fc:1a:4e:06:28:c3:d2:b7:c5:3e:
47:2c:16:27:ce:2c:2d:10:55:74:cd:5d:c1:b3:26:
3d:69:39:19:ce:d2:41:cf:b0:52:2a:01:88:93:87:
44:70:44:77:8e:fc:1c:09:da:fb:77:e8:9e:9c:98:
8c:c1:1f:6a:75:9e:d4:03:c9:e4:e7:f4:67:dd:68:
98:32:65:b6:65:2d:e8:19:ec:40:a5:2d:71:6d:4b:
ae:99:d3:a6:90:f0:97:42:1f:7b:fc:55:e1:5d:79:
42:47:95:70:90:db:b7:2e:90:80:93:05:c6:ea:0e:
17:61:d0:fe:7f:2e:07:02:e0:08:78:7a:9c:8b:89:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:0E:C8:0B:48:B1:89:17:04:90:2E:1F:49:17:4E:78:5F:35:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:90:55:a1:1c:06:ed:46:a4:6d:9d:4b:e8:c2:b3:6e:a5:5f:
35:e8:2a:ea:0f:5d:39:6b:41:84:5f:64:d7:f0:5e:04:fc:ec:
0b:34:ff:17:40:25:76:16:4d:d9:46:c1:d0:2b:df:19:37:33:
b0:75:f9:66:c8:3a:3f:74:44:e5:01:c8:4a:c0:17:f4:fe:2d:
0a:4a:82:5a:0c:5b:45:11:ce:e8:cb:05:7a:df:49:cd:5a:7b:
db:69:cd:47:19:1c:c4:ab:87:9a:d6:56:cf:0b:67:fe:39:c3:
48:ca:f2:10:eb:1a:72:c2:1f:82:a8:ac:42:4d:9d:1c:f4:2e:
27:ed:6c:17:01:dd:76:9a:b0:a2:24:db:3f:80:e8:4b:5d:5a:
ac:23:d9:6a:d5:b9:8b:f3:fb:1f:b1:2a:e7:3c:fc:1f:8a:f8:
51:41:3c:d6:88:e3:e3:34:b5:4a:ec:02:3b:dd:39:3f:d5:51:
4a:77:4a:b7:26:00:e5:4d:e4:08:25:b7:40:e2:43:4f:2a:0d:
44:e7:01:3a:a1:fd:59:eb:bf:45:c9:c7:7e:bf:83:37:1b:c8:
df:95:01:60:e0:bf:79:02:a1:81:8f:2e:6b:12:d3:67:c3:b8:
0b:7f:74:b4:88:20:66:4c:af:c5:3f:6d:62:5b:dc:56:7f:a3:
1a:73:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:05:57 2025 by rpki-client