Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dcd98f9-0fe6-3551-85e0-30f99ef311db.roa
File: 2dcd98f9-0fe6-3551-85e0-30f99ef311db.roa (raw, json)
Hash identifier: 4SHnkJshWb8Blc4TS5Y8WZi7oLhUPRlITnZlVkS+0F8=
Subject key identifier: 55:72:B1:A2:1B:88:43:FB:08:5A:B4:D3:35:35:5F:59:E8:42:AB:09
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848253F0EDE00C58593AE6AAE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dcd98f9-0fe6-3551-85e0-30f99ef311db.roa
Signing time: Mon 09 Dec 2024 04:18:51 +0000
ROA not before: Mon 09 Dec 2024 04:18:51 +0000
ROA not after: Sun 09 Mar 2025 04:18:51 +0000
asID: 13335
IP address blocks: 104.18.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:3f:0e:de:00:c5:85:93:ae:6a:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:18:51 2024 GMT
Not After : Mar 9 04:18:51 2025 GMT
Subject: CN=98ced5c9-3cde-482f-a4e5-f40143c202c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:86:70:d9:d8:92:3b:77:aa:fe:4b:3b:14:
c2:8a:45:5e:85:fc:9c:89:7b:52:36:c4:fb:34:c4:
d8:aa:85:4b:5f:c8:f5:37:03:76:9a:b6:db:94:5f:
d5:20:ce:74:13:f5:8d:51:53:75:69:84:fe:7b:34:
92:fb:79:ea:f2:ba:30:37:b6:c1:72:d5:3a:f6:cf:
ec:03:83:ef:a4:e4:26:0d:ad:cb:cf:1f:12:4e:72:
c0:9a:6b:b1:40:42:52:b8:e4:de:e1:21:2f:fd:1a:
ef:76:4d:fa:c8:5a:f5:3a:f6:f3:2f:7d:92:2c:32:
e7:ef:57:c0:23:56:58:17:51:b3:9c:f5:8d:a8:25:
e0:bd:b7:02:56:a3:d2:16:5c:a3:62:a7:74:b4:f8:
e4:f2:fa:0e:1d:cd:79:9a:c2:fd:85:85:5c:9b:6a:
9c:7a:79:66:38:f4:f2:bb:c8:15:40:ba:bf:75:bd:
15:99:a5:0d:e1:35:39:95:64:b7:ad:31:f2:91:f9:
cc:6a:54:7c:77:af:ba:52:07:e4:35:50:71:95:50:
05:8b:5b:27:04:8f:b0:f7:e5:05:bf:52:c8:5d:28:
bd:5d:67:92:68:a1:38:af:ab:ec:88:7b:03:21:7e:
87:91:b9:70:d2:76:c3:97:bf:77:00:2f:59:c1:b6:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:B1:A2:1B:88:43:FB:08:5A:B4:D3:35:35:5F:59:E8:42:AB:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dcd98f9-0fe6-3551-85e0-30f99ef311db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:aa:fb:38:f6:45:93:0a:9d:16:0a:4e:f0:e5:fc:bc:94:c0:
4b:d8:64:c6:88:c4:f4:bf:5d:5a:a8:54:a3:6e:b8:bf:53:49:
bb:fa:5b:04:50:83:ac:c8:d6:11:a5:98:d9:93:c0:94:22:27:
1a:b9:0f:19:0b:a5:0c:bc:40:06:44:ef:64:32:2f:cc:7e:4a:
63:a9:1d:40:23:16:d6:b0:69:ee:2e:f8:f1:bc:50:0b:9d:83:
38:05:ed:54:0c:49:2b:0b:c5:65:94:6a:7c:80:62:da:f2:94:
88:8e:8a:74:27:df:4a:c4:69:25:d0:be:a6:9a:6f:3c:cc:6e:
7e:4a:c1:4b:8d:f3:6a:75:24:7d:4c:55:7e:8c:d8:10:95:ba:
be:dc:9f:74:a2:1c:06:d2:af:8b:b2:0b:c5:e9:c1:c3:8c:72:
47:5c:dc:21:e8:53:fa:86:95:de:6f:4a:1e:1a:a7:18:81:76:
b5:74:e8:41:6f:c2:df:67:d9:3f:19:53:a4:81:77:bc:93:43:
a3:c6:01:c5:54:c5:27:97:40:bb:f1:ab:44:56:9f:76:15:15:
c0:b7:07:ca:d4:d4:98:6c:00:54:e4:49:99:8e:1c:60:e3:23:
6c:52:ea:ef:9a:e2:d8:c8:87:ab:21:a9:52:0f:29:17:aa:de:
2b:cd:07:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:34 2025 by rpki-client