Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b342a83c-b2ad-3b67-b4fe-3f17f7566987.roa
File: b342a83c-b2ad-3b67-b4fe-3f17f7566987.roa (raw, json)
Hash identifier: EBQLXSQp9NDs33sQMuxAh3hQwJKke5C3ABZiW9nB9Ss=
Subject key identifier: 23:44:46:E9:45:65:2C:D3:AB:E5:28:1A:72:BB:1C:A2:4F:95:F1:EA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482540D3C57715B9F7810A5BA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b342a83c-b2ad-3b67-b4fe-3f17f7566987.roa
Signing time: Mon 09 Dec 2024 04:22:25 +0000
ROA not before: Mon 09 Dec 2024 04:22:25 +0000
ROA not after: Sun 09 Mar 2025 04:22:25 +0000
asID: 13335
IP address blocks: 104.18.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:40:d3:c5:77:15:b9:f7:81:0a:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:22:25 2024 GMT
Not After : Mar 9 04:22:25 2025 GMT
Subject: CN=ecaae763-575b-47df-8b33-3b69eea73d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:68:af:6d:37:5c:77:13:11:19:13:00:02:
86:ae:ec:2d:34:17:4f:4e:1a:e4:bf:e5:30:d7:62:
b2:0e:61:87:0e:ac:ec:ad:04:dd:5a:1f:93:df:a5:
18:d8:6b:02:73:ab:19:13:61:52:e4:91:5c:7d:9e:
c2:b5:3a:89:d5:7a:f2:97:b3:e0:6f:4b:0a:b9:75:
cd:8e:57:67:e4:3f:29:38:57:62:64:03:be:cf:1c:
f6:ec:c6:e7:1d:1c:f2:3c:ad:13:e8:12:44:3c:ad:
92:07:c6:c0:36:99:09:1a:f7:5f:8c:fe:76:22:bb:
95:98:0c:60:4a:71:d6:46:68:d5:a0:d3:47:d5:1a:
a7:0b:41:61:26:fd:e2:8f:dd:15:4e:12:c1:ad:d7:
2a:74:fc:b8:2c:7f:c8:f5:16:d8:f1:72:ff:88:8e:
3a:f2:a6:36:ac:f0:41:ef:1c:9a:d7:c0:bf:8e:73:
b4:a9:e1:90:69:be:47:5a:9b:3b:f2:79:23:c8:bd:
41:09:21:0f:7b:75:cf:26:77:94:0b:b0:e6:65:bd:
aa:71:f6:a1:20:b6:f2:40:f1:83:fa:0c:41:08:5e:
9a:d9:2f:47:d9:28:37:60:af:7a:f9:87:14:67:28:
ca:28:65:b3:69:ac:1c:fd:d3:b1:4b:2b:4a:ac:a9:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:46:E9:45:65:2C:D3:AB:E5:28:1A:72:BB:1C:A2:4F:95:F1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b342a83c-b2ad-3b67-b4fe-3f17f7566987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.18.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:dc:8e:e4:d6:47:04:e7:ad:05:9b:31:6d:e2:0a:fb:68:7e:
70:b4:ed:a4:63:d9:70:4a:ae:99:62:76:ba:e8:05:f4:43:36:
12:c8:d0:14:ce:70:63:80:12:a4:13:a8:81:9c:ef:6e:7f:10:
27:00:a5:8a:4d:2d:9a:69:53:f4:e4:5d:67:42:4f:dd:dd:c8:
ef:4a:0f:cc:70:1e:9f:58:7b:08:65:54:49:aa:54:9a:1d:05:
06:c1:9d:68:53:bd:9b:64:de:70:b8:1f:88:c8:b1:91:82:e9:
bc:08:5b:33:ce:5f:2c:77:9f:ff:cc:8a:be:18:10:4d:ef:78:
20:e8:d2:fb:eb:61:f6:85:bb:39:9f:ab:97:1c:55:f3:71:5e:
ec:fc:34:ec:28:33:58:a6:32:66:3b:c7:34:13:e6:28:91:56:
58:38:f9:25:4e:e1:0e:29:2d:a3:48:8b:55:7d:f3:1b:7e:58:
68:8b:aa:3e:3b:10:c1:f6:bb:e7:f4:e6:14:24:8f:c8:a3:c1:
cc:19:0a:f5:cb:f0:9b:33:5f:22:c9:0e:61:0e:d1:f7:12:f3:
2f:93:44:0b:71:db:bb:09:34:f3:63:8a:5f:54:bd:cf:88:c0:
b8:ba:34:55:cf:9c:a3:04:6f:47:86:c3:3a:65:50:4c:d8:c0:
e0:f7:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:00 2025 by rpki-client