Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52a60e52-56de-3ba3-b018-10cef613863e.roa
File: 52a60e52-56de-3ba3-b018-10cef613863e.roa (raw, json)
Hash identifier: n2uEMl7YFr0ShpE88EibSu+kgdVPM4GqDhDpYMFhxNg=
Subject key identifier: 41:4B:50:D0:43:C1:BF:50:6A:E8:C9:C1:54:D3:3B:06:1F:1D:49:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A9ACB88A94328E8E15D860
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52a60e52-56de-3ba3-b018-10cef613863e.roa
Signing time: Tue 10 Dec 2024 01:05:17 +0000
ROA not before: Tue 10 Dec 2024 01:05:17 +0000
ROA not after: Mon 10 Mar 2025 00:05:17 +0000
asID: 13335
IP address blocks: 104.30.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a9:ac:b8:8a:94:32:8e:8e:15:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:05:17 2024 GMT
Not After : Mar 10 00:05:17 2025 GMT
Subject: CN=5d2ec54d-d7df-4420-ad75-2f228e3f36ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:06:77:a6:59:c2:09:3d:8e:21:f1:fa:5c:
a7:ab:72:a9:21:cc:e0:7b:c4:15:d0:bd:ea:95:9b:
3b:0d:2b:0d:70:08:48:32:e2:12:22:47:6a:15:eb:
d3:38:a2:f0:41:fb:ba:56:2e:e2:a0:30:3b:98:4e:
d2:87:2a:ef:f0:8f:71:f7:20:62:6d:1f:fc:c9:f1:
85:60:91:23:47:59:b3:98:23:79:14:38:3b:0f:cc:
56:4b:ce:98:77:76:8a:52:b9:d4:bd:d8:4a:21:5b:
11:23:e1:2b:f1:56:d4:f2:f4:d4:a1:60:0d:38:26:
5f:22:57:42:60:2a:2f:50:de:28:b7:dc:f0:60:b5:
6e:1d:76:f1:9c:96:33:2e:bd:45:47:1d:20:b8:2e:
39:ff:13:b8:97:8b:0d:8a:61:e4:1c:ee:9a:e4:e9:
e7:95:bf:e2:68:d0:d6:6d:da:e8:17:48:ea:47:c9:
66:22:0d:d4:49:1e:8c:2f:75:f7:ca:f6:fc:24:b9:
c7:0a:fe:3d:4d:e4:4a:7f:54:f7:2b:a8:35:e1:a9:
e0:90:44:ca:6b:e6:a4:6a:b3:e8:4d:0d:44:30:52:
24:0d:83:10:dd:1f:98:02:a0:51:2f:1d:ed:cb:5b:
14:d1:3c:9c:21:ab:31:9e:81:9a:67:41:a1:7a:27:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4B:50:D0:43:C1:BF:50:6A:E8:C9:C1:54:D3:3B:06:1F:1D:49:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/52a60e52-56de-3ba3-b018-10cef613863e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:f5:9c:0e:2d:9c:d9:99:1f:07:a5:c2:1a:02:71:9b:f4:1b:
81:44:1e:93:df:7b:0d:c9:7d:ba:ed:a3:ba:ee:0c:90:63:00:
52:77:76:8e:ea:38:86:fe:16:4b:4e:9e:03:a1:5f:d3:28:b3:
91:92:a0:a9:9e:d7:aa:31:c3:77:47:77:a8:40:ec:55:ae:38:
16:22:f9:ea:66:8b:2e:a7:9e:f1:d2:b2:4a:e8:38:78:b7:05:
ba:ca:7c:2e:7f:6f:05:3b:9b:04:2a:9f:c4:9e:d5:e7:f2:ad:
b2:36:c5:b8:3f:95:b7:d6:43:a9:be:93:19:73:92:76:65:65:
19:23:76:18:74:db:5c:89:e9:62:a2:ec:81:c1:c8:48:d2:53:
8c:dd:19:c9:79:2d:ff:3a:5d:d1:d4:57:db:0e:bb:81:bb:9d:
13:c1:00:eb:e7:59:1e:64:f5:1f:33:15:ac:6c:01:4c:a3:c0:
d1:d1:2d:d4:54:87:4f:07:70:a9:3b:92:ab:05:a4:d4:db:70:
9c:74:2b:b2:6b:3a:ce:9f:85:1a:55:92:d0:1f:b8:46:1f:68:
84:a4:71:01:a4:8f:de:6d:20:3c:22:13:ba:c4:d0:b2:25:75:
68:8c:7b:1c:c2:72:63:e9:f4:e1:71:a0:f3:4f:b2:b6:19:04:
a3:c7:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:59 2025 by rpki-client