Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b296d673-b1d1-3f6b-96ac-5d79dac96aa4.roa
File: b296d673-b1d1-3f6b-96ac-5d79dac96aa4.roa (raw, json)
Hash identifier: x8FSv24cMsoK5E81eRTZSj/4D3uD9racv/xGAl4A3YY=
Subject key identifier: 32:21:F2:6D:76:BF:F2:D0:D3:65:B1:BF:CB:50:80:92:3D:62:75:FB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482533AB2B88055A25D2B4ED80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b296d673-b1d1-3f6b-96ac-5d79dac96aa4.roa
Signing time: Mon 09 Dec 2024 03:55:54 +0000
ROA not before: Mon 09 Dec 2024 03:55:54 +0000
ROA not after: Sun 09 Mar 2025 03:55:54 +0000
asID: 13335
IP address blocks: 104.18.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:33:ab:2b:88:05:5a:25:d2:b4:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 03:55:54 2024 GMT
Not After : Mar 9 03:55:54 2025 GMT
Subject: CN=2914477a-63a1-4eca-a84b-52279349e20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:63:59:b5:c0:c4:28:74:55:88:73:ce:47:
f5:ec:3b:6a:1a:73:ef:ad:36:00:7a:fd:26:47:f5:
50:dd:e6:6d:09:26:09:be:fb:04:7f:78:45:36:4f:
b6:ba:49:39:72:9d:a2:e8:54:7b:36:6b:fd:d7:9b:
d4:91:96:6e:ce:fb:8f:97:08:fc:1c:bf:d8:b6:9a:
e2:b0:10:d8:02:b6:10:dc:51:31:7b:04:02:46:4f:
38:92:91:1b:ce:d2:66:75:91:0d:cb:49:77:2c:5a:
eb:d2:8f:e5:f4:6b:a5:37:53:3a:4f:c9:34:c4:ba:
e7:e8:8f:4c:a6:a1:5e:8e:7b:a5:57:9d:3b:b3:7c:
fe:09:e5:87:f4:d3:6c:61:2d:82:f2:69:dc:cc:95:
1c:b4:30:6b:02:1f:27:b7:7a:df:be:6c:ff:7e:fa:
47:12:20:1f:eb:9d:40:7f:e8:60:62:01:07:da:77:
a3:54:e2:91:9a:07:f2:c2:7f:a6:4b:e3:8c:89:49:
2b:f6:5d:78:4f:51:6f:82:d8:e1:15:1f:bb:5e:53:
d3:33:59:2e:61:89:23:cf:8c:09:30:01:0c:a0:77:
58:cf:93:0f:97:dc:fe:63:9e:ae:3e:ef:cd:2e:a7:
85:74:8d:92:56:d6:3e:c5:77:ae:ef:be:a3:48:dd:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:21:F2:6D:76:BF:F2:D0:D3:65:B1:BF:CB:50:80:92:3D:62:75:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b296d673-b1d1-3f6b-96ac-5d79dac96aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:28:63:62:87:10:04:93:ab:4f:62:fc:1e:34:ce:cb:d1:84:
09:49:85:7b:4b:a8:04:a3:4c:87:d0:e9:ef:37:bc:40:a1:86:
38:ba:9f:33:22:ee:a7:37:26:c5:60:83:0e:b0:9c:b7:b7:e2:
e4:e9:cc:7b:72:a0:05:e6:3b:78:df:90:2a:03:35:fb:52:da:
df:77:33:ce:00:7d:02:de:9d:94:78:c5:c8:12:76:fb:e4:56:
18:bc:02:25:72:3a:5a:87:bd:04:96:3e:c4:09:26:0f:ff:15:
e9:1f:d4:2c:1a:08:c6:75:19:13:bf:13:bd:f4:41:97:2f:56:
fb:83:ce:a1:39:92:7e:dc:30:ea:92:e2:91:9e:d6:ef:ed:2e:
dc:b8:c4:16:df:70:66:8c:3f:63:21:7e:e0:65:6c:96:9b:d4:
18:c7:8b:ff:88:33:19:27:4b:ae:91:59:cd:e2:d7:ea:b4:b5:
9b:b1:06:13:96:12:81:58:74:f2:de:bf:9d:12:3f:e3:cc:3b:
7b:b7:b9:f2:81:fa:74:c9:3c:e8:70:45:77:a5:57:a1:63:93:
ea:f3:4d:55:ce:91:28:3e:2d:4f:79:ce:79:92:d2:33:13:c7:
73:b7:fc:33:1d:68:68:a0:03:17:35:e6:45:d6:59:a4:4b:df:
8d:18:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:20 2025 by rpki-client