Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8e47bd3-392f-3b95-826e-371e01a7c5af.roa
File: e8e47bd3-392f-3b95-826e-371e01a7c5af.roa (raw, json)
Hash identifier: kK+KcL9XeQ3rFSak5EGo654bAD0rO1y9CAezwips9Aw=
Subject key identifier: 6B:0C:6F:7F:5E:6D:8D:68:D9:AD:7A:77:79:12:86:BF:E1:E8:A2:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBBC98527AA72A92B04C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8e47bd3-392f-3b95-826e-371e01a7c5af.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.199.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bc:98:52:7a:a7:2a:92:b0:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=63e7ae21-6be0-4555-8002-48506285f3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:88:22:b0:69:14:65:05:69:5d:90:43:28:f7:
af:50:e1:0a:20:4c:82:6f:35:8f:b2:5c:85:9b:56:
0b:24:e8:20:b7:bd:d8:63:74:64:ce:66:d4:5a:eb:
d5:e9:52:91:67:2f:00:4a:ce:c4:4c:8b:4b:60:b8:
22:21:0c:ba:42:31:8b:e1:d0:ab:24:0e:d7:80:3d:
7f:0b:0c:d0:17:14:1f:1c:2f:0d:80:1f:82:92:ad:
54:fc:5f:68:c2:12:fe:66:5e:a5:ec:5e:37:a5:7a:
80:ed:bb:41:ca:a3:6f:94:69:02:41:10:69:58:80:
20:b9:07:08:d9:be:d0:1e:12:ca:31:81:d3:8d:5e:
3c:8d:50:17:c7:be:3d:e6:73:c0:83:c7:b5:de:66:
f2:28:56:3f:ff:39:d4:c6:cd:ff:24:06:bf:e3:6d:
73:b3:8e:8a:a9:86:62:97:8f:85:af:47:18:c9:c1:
c8:6b:a4:b7:7e:eb:f4:67:19:73:5b:cd:70:0a:9c:
48:cc:24:3a:04:89:0c:cc:5b:70:f3:3e:fb:49:e4:
2f:a2:b3:38:69:3e:ac:e2:01:0a:5c:f8:57:57:4d:
4b:4a:66:91:4e:fb:d2:3e:24:84:86:a7:ee:78:c2:
27:45:c3:c5:00:78:7e:e8:71:56:91:0a:03:56:4c:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0C:6F:7F:5E:6D:8D:68:D9:AD:7A:77:79:12:86:BF:E1:E8:A2:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8e47bd3-392f-3b95-826e-371e01a7c5af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:ad:99:53:ce:92:83:43:a1:17:09:90:25:d0:88:85:d9:be:
93:ec:e8:2a:51:ab:e9:10:10:85:7f:c6:fe:a6:af:a6:0d:fb:
68:96:f9:c8:fe:20:39:23:c0:d9:01:69:e0:54:fb:ea:b4:77:
f3:5c:af:33:56:02:38:c8:16:7c:ad:42:8f:db:1d:6c:fc:fe:
c3:f2:29:cf:96:40:2d:00:1e:24:a3:3c:c7:d9:b8:c4:0c:91:
42:1b:13:31:ab:00:d3:c1:66:93:44:0e:c4:d3:04:ab:20:94:
09:81:cd:ac:2d:a9:4b:af:f6:81:ac:2d:f8:7e:66:75:c4:5f:
39:b7:28:c5:8c:8c:72:10:c9:13:eb:16:a0:b2:f2:7a:8d:45:
f2:8c:62:85:1b:d8:e5:80:16:50:10:7e:82:1e:46:a5:3d:94:
40:e7:a9:c4:35:07:17:61:65:54:02:ec:ab:a2:24:d6:8f:82:
15:65:3c:e9:30:35:c2:d0:9d:aa:5c:9e:92:5c:dc:ef:b9:e3:
a3:1b:3d:dd:fb:2f:b6:bf:f8:3e:dc:5a:92:e0:d3:12:cc:c0:
de:b6:6c:44:45:0f:d0:68:12:8d:b5:d1:c4:5e:14:d5:b3:1e:
ab:54:28:55:88:1e:fb:af:b0:1a:e3:03:2d:4d:ef:d9:86:ee:
4d:b9:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:07:23 2025 by rpki-client