Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa
File: 9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa (raw, json)
Hash identifier: 71gcSXL4DVsdK/P1d0dIY54UrspJsAvoGAId3hok/6c=
Subject key identifier: 01:7E:DD:F9:08:10:1C:9E:02:1A:1A:69:56:46:37:4F:1D:97:A6:0B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858488A587A139A57217CA7F3A740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa
Signing time: Tue 14 Jan 2025 09:26:43 +0000
ROA not before: Tue 14 Jan 2025 09:26:43 +0000
ROA not after: Mon 14 Apr 2025 08:26:43 +0000
asID: 13335
IP address blocks: 104.23.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:58:7a:13:9a:57:21:7c:a7:f3:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 14 09:26:43 2025 GMT
Not After : Apr 14 08:26:43 2025 GMT
Subject: CN=88cd794f-37d8-428d-9201-ec74a2f4ce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:5d:72:95:d0:69:d0:48:f0:3d:8f:37:ec:
70:d0:ae:ac:7b:22:bf:fc:d1:6f:c7:bc:1e:fd:97:
bb:df:93:fe:a0:66:f1:10:7b:f1:0c:19:01:2d:a0:
ab:3f:6e:9c:0b:e2:83:12:ec:17:dd:01:7f:96:39:
11:d1:91:11:ee:50:5a:27:cf:6c:00:98:7a:3a:8d:
65:c2:da:67:ff:9c:65:70:80:0f:34:c5:8a:19:56:
b8:1d:ed:a8:fa:f8:1f:fe:58:d8:d9:bd:70:c9:75:
2f:29:f9:10:a1:0c:24:01:11:98:c7:a2:1e:df:13:
81:08:5e:58:51:ee:56:3b:d1:0f:ca:6a:7d:67:3f:
67:89:af:4b:d8:31:19:ed:b7:d3:5d:6b:21:6a:90:
a1:36:c0:2c:1d:d9:f7:68:d3:d8:05:c5:8a:4e:77:
64:91:db:52:d1:f6:40:fe:51:59:ca:01:28:9f:f6:
53:56:5a:3b:15:43:9c:e3:42:2c:78:a8:f8:7b:c3:
3e:cc:e5:b9:b7:1c:51:0e:72:c3:bf:57:2d:97:80:
24:0b:b6:e2:0f:20:0b:15:38:28:95:f6:85:18:c4:
b2:61:b9:0b:90:e3:5f:af:6d:ea:25:0b:30:58:48:
2b:7f:4f:0d:92:a6:f7:d5:3c:ae:d7:61:49:24:f2:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:DD:F9:08:10:1C:9E:02:1A:1A:69:56:46:37:4F:1D:97:A6:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c4366cb-b8cb-3cb5-99ee-ec5225d852c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4e:d5:3b:2f:59:33:f4:dc:19:12:ce:b2:76:1a:fc:23:4a:
76:05:c4:77:89:e2:72:2e:2b:95:ee:f6:59:a0:64:8b:36:46:
cc:cd:de:c1:49:ab:1a:d5:fd:b2:00:fc:80:3d:73:28:49:7b:
3e:ea:b8:d1:d4:1d:a7:cb:48:c5:fc:e0:84:d2:7e:68:0a:c0:
3a:49:cc:57:ff:09:0f:fd:d8:f0:d4:09:bc:95:b4:f5:80:7e:
bd:8b:2f:e7:b0:e7:78:6d:6c:73:b4:15:25:77:ae:9b:1a:32:
c4:fa:a8:d5:9b:2f:97:80:fd:55:7c:1c:99:42:d6:ae:97:18:
56:89:5c:e2:b7:2f:53:4a:8a:78:4b:bf:c2:0b:88:de:c5:9d:
af:00:28:c2:9e:a6:66:70:1a:a1:fe:3f:77:7b:cb:4a:54:cd:
19:a7:3b:20:9f:2f:53:06:8b:6d:28:b5:53:43:cb:7a:09:98:
e0:8b:a7:23:98:5d:e0:24:0a:03:c7:23:94:1c:78:49:93:ed:
a5:2c:65:ac:81:3b:cc:e9:e6:27:84:fc:97:4c:ee:d3:f9:aa:
c9:97:23:67:9b:5b:2f:fa:f6:06:21:c4:4b:84:f0:b7:d1:9f:
ca:42:a0:b6:d5:b1:fa:65:25:45:81:e7:4d:5b:7a:b0:d3:f1:
fc:0a:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:45 2025 by rpki-client