Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa
File: 0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa (raw, json)
Hash identifier: 4NlhHAnRdmBmwwWjwUkFn0plnv367LyvTCILU8ANjmM=
Subject key identifier: 85:1E:16:E8:4A:81:78:54:8D:6B:A7:38:80:36:9E:A7:6C:12:FD:50
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825414DD0669CBF7C86C6A400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa
Signing time: Mon 09 Dec 2024 04:23:23 +0000
ROA not before: Mon 09 Dec 2024 04:23:23 +0000
ROA not after: Sun 09 Mar 2025 04:23:23 +0000
asID: 13335
IP address blocks: 104.18.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:41:4d:d0:66:9c:bf:7c:86:c6:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:23:23 2024 GMT
Not After : Mar 9 04:23:23 2025 GMT
Subject: CN=60c5adae-112c-4352-b0ae-542736f7526c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:a6:5d:32:fc:8f:c5:31:8c:d3:8e:6d:0d:
92:58:af:60:89:64:fb:66:0c:d8:bd:b1:59:16:82:
54:6a:3f:6e:39:de:6b:8f:95:5f:55:41:c9:5a:29:
3b:c8:aa:1f:8f:c2:29:0a:5f:51:59:98:fb:25:8f:
08:df:7f:da:ad:89:94:90:61:80:f1:b4:b3:d0:75:
4c:81:8d:8b:f1:a1:fc:28:db:34:f0:f9:f8:e1:21:
fc:65:1a:78:f2:0e:a2:42:13:32:89:ae:97:b9:22:
ec:13:2b:6c:eb:3d:cd:f1:d9:db:0a:10:2d:98:c6:
bf:a7:a7:09:c5:36:f9:97:cf:1e:6a:29:68:6b:8e:
8d:22:bf:7f:3a:74:8a:3b:c4:a8:f3:cc:d1:4f:36:
c4:09:6b:74:9f:07:bc:9f:87:b7:13:98:ca:24:03:
8c:d1:94:2e:37:02:2f:ba:d0:88:96:15:2c:51:fb:
e2:e9:8a:66:3f:31:df:a5:e3:a1:22:ad:99:f1:62:
80:7a:87:90:da:12:fa:37:94:30:b5:50:0e:c6:87:
f0:15:87:44:4f:31:22:25:46:3f:1a:2e:ec:bc:95:
f6:05:80:b8:0c:eb:2b:76:be:79:da:8b:5f:a0:bb:
d4:30:03:9c:c7:ae:81:cc:00:90:a7:79:71:33:ea:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:16:E8:4A:81:78:54:8D:6B:A7:38:80:36:9E:A7:6C:12:FD:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb4ddf-34e6-3cfe-bdf3-c6f956d1e6cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:00:96:a0:ce:f0:4c:b2:0c:a4:1b:10:d2:de:40:ad:c0:1a:
84:64:b3:0b:1e:0b:fb:1f:d7:38:24:57:3e:be:ad:21:54:73:
74:f2:59:92:38:66:b5:96:3a:8e:b5:6e:f9:7e:fb:e9:0b:ac:
d3:37:d7:da:bb:d1:21:f7:ff:0d:41:48:2b:0d:1f:a2:2f:54:
57:9a:f5:79:81:a3:dc:c6:64:97:63:48:1a:f7:b1:a7:be:13:
59:63:31:35:e7:00:d0:33:a8:b9:cd:19:8e:3f:f7:55:6e:02:
21:9e:ea:47:45:d3:0e:00:dd:62:4d:20:1e:3e:b5:c2:be:fb:
18:6a:56:77:c4:6a:87:a0:ba:6c:03:55:2e:99:d4:b2:5b:ec:
7d:fe:ec:a8:8b:ba:bc:d7:37:1e:81:bf:f7:94:fd:78:b7:27:
93:a4:47:c1:d5:c4:fa:00:8a:82:a6:b2:53:22:01:58:09:13:
16:e4:63:c1:f0:cb:09:6f:af:98:10:b2:b6:9c:6b:0c:45:05:
97:a3:86:70:fa:2c:18:8f:b3:69:b3:6f:0f:60:c2:7c:95:e3:
48:51:b7:45:5f:1f:41:2c:2d:8d:91:96:ab:c7:2a:c2:4b:a4:
95:5e:e3:0c:d4:2d:e0:77:26:f1:88:dd:8c:ec:b1:a9:53:dd:
c5:48:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:28:02 2025 by rpki-client