Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ae128a0-ac8b-3546-bb43-6c0a27160086.roa
File: 4ae128a0-ac8b-3546-bb43-6c0a27160086.roa (raw, json)
Hash identifier: 42XHi2HslOQ3ty26elpcL/uBZN0Q907x3DJ+UF7E2n0=
Subject key identifier: B0:C4:1D:BB:32:AB:3C:B6:B3:63:32:7F:1D:9C:7D:FC:D3:D2:F6:C7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482533CDEEAC030AD93338C1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ae128a0-ac8b-3546-bb43-6c0a27160086.roa
Signing time: Mon 09 Dec 2024 03:56:11 +0000
ROA not before: Mon 09 Dec 2024 03:56:11 +0000
ROA not after: Sun 09 Mar 2025 03:56:11 +0000
asID: 13335
IP address blocks: 104.18.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:33:cd:ee:ac:03:0a:d9:33:38:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:56:11 2024 GMT
Not After : Mar 9 03:56:11 2025 GMT
Subject: CN=7c600358-cb96-48c6-b496-d13e24e4628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:3d:b0:f5:b4:bc:72:03:7e:45:0a:da:8e:
07:b6:4b:48:f9:88:16:2d:97:74:4e:4a:b9:d8:1d:
2b:fe:94:cb:87:a7:0a:e8:65:b1:00:dd:46:b0:41:
32:77:51:77:5a:a2:f9:5f:10:b9:41:08:61:3f:2e:
7b:64:75:2a:89:38:a1:a2:16:d4:23:36:62:17:91:
a6:01:0e:01:ff:e1:9f:83:a5:dd:1c:7b:16:14:53:
d9:e4:3e:aa:d0:9f:8c:5e:9b:e9:c1:7f:0f:a4:e7:
af:82:c1:91:9e:21:1a:1c:71:68:92:14:3d:d3:43:
70:88:91:d4:dc:4c:16:df:ce:0c:f4:68:72:d8:31:
61:57:3f:a1:3d:e8:7d:da:4d:3d:cd:ec:a2:98:d9:
b7:39:91:f7:c4:0a:99:65:71:a2:92:0a:5a:72:df:
2e:c6:e1:ce:d6:b9:ec:ac:0f:28:bd:71:39:b7:cf:
7f:db:ff:3f:65:46:ba:2a:a4:13:f2:31:ea:c5:47:
e7:fe:5e:65:fa:73:2a:99:99:81:ac:d9:f3:2f:54:
74:e2:92:c0:b8:88:c9:11:f3:71:4b:11:12:9c:51:
62:8c:5d:3e:47:57:eb:ac:78:c5:ba:3a:1a:96:04:
72:1c:35:7e:a9:35:ec:8e:1a:df:49:4f:43:6e:31:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:1D:BB:32:AB:3C:B6:B3:63:32:7F:1D:9C:7D:FC:D3:D2:F6:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ae128a0-ac8b-3546-bb43-6c0a27160086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:c8:e8:79:c2:74:2f:ce:84:b8:f6:06:5f:5d:bf:90:9c:83:
b7:17:4e:70:61:57:7e:bb:6c:04:9f:7d:db:a8:fd:9c:e2:99:
39:ab:23:f1:7c:0c:75:4b:2b:19:0d:19:13:b9:55:42:21:a9:
e6:01:95:99:78:3f:35:a6:ca:b0:38:ce:25:03:ea:20:fe:ff:
8a:1b:87:21:19:00:45:c7:fb:cd:1a:70:65:c9:76:b2:9f:fa:
41:20:8c:4d:7b:29:cc:1b:4c:b3:0a:fc:f3:13:e4:dc:a3:c2:
21:d3:7c:91:1c:37:80:43:49:63:7c:ce:a0:5c:4c:76:fe:c3:
bf:27:38:24:9d:93:49:6f:21:7e:a1:c5:f5:99:7c:11:4b:4c:
0c:e4:f5:4c:b1:69:05:a5:47:aa:b6:41:04:7a:a4:4d:05:77:
21:cf:b9:21:6f:95:01:a8:c6:c2:33:d7:35:aa:e6:f4:9e:84:
7d:d4:bc:17:2b:ff:ff:b9:23:74:e2:67:b1:03:e4:b9:38:cf:
3d:18:0d:b4:6c:ae:f1:30:4f:3a:1f:ee:a5:c6:df:76:c0:52:
d0:cb:af:81:33:c6:ea:94:0e:e8:39:9b:f4:f2:31:83:cd:69:
a2:40:43:ee:a9:bd:cb:1d:be:f9:2f:49:21:e0:09:95:24:07:
16:4d:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:34:51 2025 by rpki-client