Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/733604b3-2949-343f-af54-5057272e6a53.roa
File: 733604b3-2949-343f-af54-5057272e6a53.roa (raw, json)
Hash identifier: kSsYhxj9oQ+6pLTVEmujn5/+wuUvGSsLwBVmUQFNpW4=
Subject key identifier: 2D:63:A9:62:AA:A5:3A:73:8C:51:00:85:0B:1C:2B:B1:BA:17:B7:0C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AA28138F7B96D90A9EAC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/733604b3-2949-343f-af54-5057272e6a53.roa
Signing time: Tue 10 Dec 2024 01:06:15 +0000
ROA not before: Tue 10 Dec 2024 01:06:15 +0000
ROA not after: Mon 10 Mar 2025 00:06:15 +0000
asID: 13335
IP address blocks: 104.30.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:aa:28:13:8f:7b:96:d9:0a:9e:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:06:15 2024 GMT
Not After : Mar 10 00:06:15 2025 GMT
Subject: CN=eeb524e3-b191-42ea-a55c-214ea9907fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:cc:82:47:95:d1:91:26:80:a1:0b:11:32:
ab:9a:39:21:da:2c:6e:bd:cf:14:95:3a:6e:c2:ae:
4f:d0:a3:3a:88:7a:f4:66:1d:b4:91:18:fd:e4:b0:
07:ac:fe:89:c9:94:c7:ba:fe:13:c2:19:6f:37:19:
21:30:89:15:e9:52:6e:04:fb:73:e5:5c:ca:63:af:
ca:38:ea:f0:ca:15:e0:81:f6:8a:07:b6:b3:42:eb:
19:4f:54:19:78:29:3d:ee:0e:99:65:66:a4:e8:01:
a0:3a:01:b6:f5:9c:47:4b:b6:28:d2:82:a7:72:cb:
50:d0:3d:5b:c4:4e:90:df:a0:70:52:df:6e:c9:0d:
b2:0b:c3:d5:b2:7d:bd:b3:31:b8:2a:5f:ed:53:00:
4c:f4:44:96:15:f5:39:08:3b:57:a3:5e:e1:7c:46:
07:b1:a8:ec:4a:d2:6e:0b:f2:eb:93:ff:b7:37:da:
8c:7f:7c:29:5c:14:0a:ef:17:76:41:2d:12:51:6d:
79:01:f2:da:60:b7:dd:08:e2:37:a4:b8:9a:4e:74:
b5:e6:bd:29:9f:3a:eb:fe:c9:33:9a:73:78:4f:84:
bc:5d:d4:b5:89:c1:8f:a5:47:7e:01:69:17:de:d9:
e2:52:c4:8f:a2:4a:fd:44:56:11:61:52:65:1c:90:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:A9:62:AA:A5:3A:73:8C:51:00:85:0B:1C:2B:B1:BA:17:B7:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/733604b3-2949-343f-af54-5057272e6a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.30.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:77:68:c3:16:2e:6e:b6:b3:69:77:d1:d4:99:4f:9e:fb:c7:
09:4f:75:56:49:5e:d0:8c:8a:22:6c:89:9f:37:db:61:15:63:
bc:ff:9a:d0:f1:ac:12:7f:3f:30:1b:92:21:90:5b:1a:3e:99:
0d:c4:15:c5:f2:95:e6:b8:cb:f3:03:f2:05:06:b9:6a:6d:c5:
bb:25:08:6e:00:b6:83:d0:6b:b9:d4:0f:64:1c:17:5a:37:7d:
99:1c:2e:47:74:90:3a:10:c7:2a:04:76:e4:3e:ee:c9:80:51:
83:48:c1:34:4f:89:15:d8:60:66:72:83:04:8e:42:52:ed:a0:
cf:e6:cc:75:c6:38:b0:9f:a4:29:3b:b4:2e:20:04:d8:a9:a8:
2f:8f:5d:3e:e1:80:d9:65:99:97:0f:ff:f9:0d:b9:6b:06:bc:
70:8f:ae:75:4e:a5:68:82:07:03:00:46:c3:50:66:01:bb:fa:
77:3c:8b:69:64:4d:4d:14:20:c3:8c:dd:af:ed:28:af:dc:07:
7b:71:c7:03:91:6e:8f:55:0f:43:69:f8:27:52:e6:13:c0:66:
db:8b:2b:a9:5c:29:52:ae:9f:26:67:c1:cd:18:e1:0e:9c:37:
3b:bb:0b:33:a7:4c:ab:0e:ff:cf:ba:57:1c:19:39:78:4e:d0:
a7:88:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:08 2025 by rpki-client