Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3fd93ce-8833-3108-b9d4-1801771ac123.roa
File: c3fd93ce-8833-3108-b9d4-1801771ac123.roa (raw, json)
Hash identifier: FWJsPj5LVjKXg0LmyIuFQL4jnXqwNY7V2SENQDB7NE0=
Subject key identifier: BC:45:1F:F1:62:D0:1D:50:7E:6A:C8:4B:61:A5:96:90:F3:1D:64:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482558A3064EA747EBCD8CDC64
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3fd93ce-8833-3108-b9d4-1801771ac123.roa
Signing time: Mon 09 Dec 2024 05:10:23 +0000
ROA not before: Mon 09 Dec 2024 05:10:23 +0000
ROA not after: Sun 09 Mar 2025 05:10:23 +0000
asID: 13335
IP address blocks: 104.23.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:58:a3:06:4e:a7:47:eb:cd:8c:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:10:23 2024 GMT
Not After : Mar 9 05:10:23 2025 GMT
Subject: CN=2c4eb0e9-7c28-4bdf-b38f-0d40e0bc3e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:a9:07:fe:72:50:75:f0:10:83:10:78:c1:
f7:51:d9:2b:ee:be:89:b7:d2:ec:bb:ae:e2:3b:8f:
e7:c9:6b:62:13:c9:8c:49:ba:e2:d7:26:a3:0e:fb:
3c:47:10:36:e2:1c:6e:ea:17:a5:0a:7f:1a:68:4a:
7c:84:78:1f:b6:e7:7e:cb:95:c1:f5:ed:0f:e1:ec:
05:d1:62:d9:91:5c:7b:57:5a:8f:46:9a:ba:e4:11:
7e:61:c6:5a:df:d1:71:f7:f6:86:41:41:81:71:00:
f2:8c:ae:7c:1c:1f:2d:6b:43:55:0e:fa:c8:22:85:
95:13:d7:ad:3b:f5:75:2d:d1:63:c8:96:b3:fa:76:
36:ad:d8:56:6d:e3:94:6b:eb:7c:14:ec:f8:12:7e:
b4:7a:4e:58:c9:cd:56:82:09:e3:2b:88:d9:db:c8:
37:b0:d8:62:11:cc:a0:99:30:bb:8c:a4:d9:5a:03:
87:69:90:ed:b8:1f:4d:ed:d2:91:b3:1c:5c:a3:42:
9a:df:15:4a:c1:97:dd:7b:14:5a:e5:fa:ff:a3:e5:
ba:f1:8d:82:42:81:6c:42:30:39:c0:6c:8e:43:ec:
a2:de:1b:09:b5:5c:ec:c8:5a:0e:ef:02:79:6c:55:
46:bb:fb:16:61:bb:e2:10:bd:d1:f3:d1:c1:f9:95:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:45:1F:F1:62:D0:1D:50:7E:6A:C8:4B:61:A5:96:90:F3:1D:64:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3fd93ce-8833-3108-b9d4-1801771ac123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:49:c2:f3:b4:27:39:68:43:4a:10:fe:99:74:ea:bf:ed:db:
fc:b3:b2:f2:7d:2c:24:d1:8f:64:59:09:5e:4b:fc:86:b1:65:
35:a0:a1:ac:03:f7:d5:c5:50:4f:02:5b:07:7f:de:9e:07:e0:
33:74:c2:ec:86:d6:88:63:4c:16:1d:bf:71:b1:93:b0:a6:6c:
57:d7:6b:e8:ee:db:00:ee:69:48:8e:9b:8c:cf:b7:ce:b1:f2:
8f:7f:25:f0:be:9c:90:50:f1:9d:1b:93:db:e9:f0:3d:70:ac:
d5:c7:3a:4d:9f:61:b9:86:c9:2d:63:20:6b:a7:e5:56:e8:a6:
85:cd:ec:d2:5f:34:72:ee:b1:ae:ac:01:56:d4:e0:e3:d6:53:
fe:db:cf:69:eb:97:bf:72:a9:72:b0:ad:01:61:85:5d:32:20:
1c:ef:0b:b2:be:36:5e:1d:3b:b1:25:dc:59:ad:2b:f5:15:51:
7b:2d:7d:cd:55:30:21:5f:8c:81:6d:5e:35:ac:59:b0:2f:2e:
65:ef:a2:dd:4c:c5:ca:cc:fa:d4:d8:d6:1d:d2:10:cd:eb:5d:
a8:aa:b8:c6:2b:2c:2f:01:33:6a:9d:92:b8:6e:61:2c:96:82:
3f:21:c0:3c:b8:d9:a3:8a:f6:1f:04:22:2d:cc:73:b3:84:3a:
cb:ec:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:16 2025 by rpki-client