Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e0a37bc5-7dac-3ec7-bd5c-aec0a441965c.roa
File: e0a37bc5-7dac-3ec7-bd5c-aec0a441965c.roa (raw, json)
Hash identifier: UNL0WgmtN5i4fUI1cUsft1iAP9a3P7wcPgWgwnzTPaw=
Subject key identifier: 86:8C:5D:B5:87:D8:8C:53:87:D5:82:E2:07:B9:E1:2E:22:5F:20:FE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBD44FDA968095F05B6E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e0a37bc5-7dac-3ec7-bd5c-aec0a441965c.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.155.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d4:4f:da:96:80:95:f0:5b:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=501feffc-6845-4749-9c0b-41306788ce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:12:8b:13:bc:24:82:12:dd:9a:06:28:54:
ca:37:07:e5:5f:1b:32:05:41:67:75:e2:2a:12:50:
19:12:51:f8:a8:77:24:e5:be:e4:c8:eb:ca:af:2a:
39:8d:89:40:7b:0c:28:80:0a:c6:94:25:d2:3a:2f:
9f:60:f1:ce:b3:bf:84:ca:6a:d2:80:12:bf:71:99:
f7:53:d0:64:79:1c:33:f3:c0:0f:2a:40:5e:ea:1f:
40:1c:ef:a5:8a:62:48:9d:f7:54:68:73:c2:ce:ea:
dc:b3:5c:1c:95:7e:74:81:67:a6:62:86:8f:84:2e:
14:9e:1a:0c:be:0d:1f:7d:59:58:eb:ed:53:1b:43:
b4:ec:85:b6:e7:a3:d9:42:b5:9b:b9:63:86:03:88:
e2:22:89:80:bf:ed:07:65:45:72:48:1c:8b:49:d1:
4c:4f:c3:20:95:94:d6:e8:a7:fc:35:7c:9c:b1:9b:
0d:54:3d:28:c4:d5:f4:9b:8c:ec:5c:cc:16:45:de:
e4:27:8c:28:7d:62:a9:88:8c:5f:a6:d1:02:80:2f:
0c:bd:1f:b6:7a:4f:03:87:7b:80:be:53:ec:72:aa:
80:87:28:85:11:c4:d2:4b:59:e1:96:00:b7:0b:30:
4d:6a:1f:21:75:0b:c6:b0:42:00:e9:38:8e:c6:c5:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:5D:B5:87:D8:8C:53:87:D5:82:E2:07:B9:E1:2E:22:5F:20:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e0a37bc5-7dac-3ec7-bd5c-aec0a441965c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:66:25:8c:18:21:ea:84:4e:95:2b:31:7d:04:2a:4f:de:4e:
84:77:d2:4b:0c:7f:b7:c0:23:e4:de:20:90:9f:9e:f3:ca:0f:
af:3b:f3:53:98:c0:75:d1:4f:92:03:9c:97:06:9d:dc:13:e0:
c8:a1:b6:d7:4d:a8:30:d4:9f:f9:e8:f8:c6:1c:22:9f:e1:e9:
34:d9:53:c1:e8:81:1e:aa:09:f3:77:10:d2:74:d7:42:60:75:
d7:59:8d:75:ce:57:94:b5:66:3e:eb:12:86:a3:87:98:ef:00:
d9:09:b2:d1:54:d0:05:10:85:df:09:ea:56:94:8e:ed:a2:1d:
3a:d0:27:81:35:a8:7e:47:a6:24:39:f4:a3:1c:1c:3e:fc:9d:
b6:74:a3:b1:13:5e:4b:30:59:ed:e5:4e:db:6b:55:de:b3:3e:
6b:bd:27:7b:50:89:77:9a:17:db:a0:ad:f5:12:be:9a:9d:cb:
be:92:67:c9:3b:c7:ca:ba:ba:ef:b6:d9:ab:95:3f:7d:57:ec:
c4:ea:bd:f9:0f:cc:39:99:3b:9c:d8:0e:c4:5a:d1:0a:80:29:
f4:d8:d9:68:17:f6:da:4e:6c:60:20:b3:eb:a3:00:8a:16:0c:
8f:97:40:2c:1c:f7:de:4c:8b:07:80:b7:44:71:9a:ed:7d:51:
dd:60:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:43 2025 by rpki-client