Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa
File: 3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa (raw, json)
Hash identifier: CKWElte6uE+xGBM8HNl0+g7UgrqZzeNlk649idmmYHY=
Subject key identifier: 89:AF:EF:20:A4:BE:A7:18:AE:83:91:56:DB:6F:1A:13:DC:F1:14:2F
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F4328584815FD087FF7C91BC6FCECEFC0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa
Signing time: Tue 03 Dec 2024 17:08:42 +0000
ROA not before: Tue 03 Dec 2024 17:08:42 +0000
ROA not after: Mon 03 Mar 2025 17:08:42 +0000
asID: 16789
IP address blocks: 104.156.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:fd:08:7f:f7:c9:1b:c6:fc:ec:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Dec 3 17:08:42 2024 GMT
Not After : Mar 3 17:08:42 2025 GMT
Subject: CN=a8b6641f-d2b9-4a16-8324-d6ff1600b7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:49:9a:3a:c1:d3:4d:11:a6:0a:91:55:0f:
6a:9f:ef:5d:5a:dc:b3:6e:de:e9:36:28:72:92:97:
b6:5b:84:19:d0:ab:1b:9d:06:3d:3f:13:f2:ef:e9:
63:2b:7a:fc:f6:b0:83:84:66:17:42:58:2a:08:f2:
d1:7c:a1:83:4f:40:d5:f1:54:62:f8:64:cf:e7:65:
b0:d2:5a:36:55:ff:70:52:1a:4b:76:e2:7f:7b:f4:
5e:54:03:24:8d:40:b8:37:39:e0:a2:02:6e:55:57:
fd:d7:b6:14:6a:2e:61:a1:e7:eb:f5:bb:a9:40:af:
0c:8c:92:10:be:6c:02:06:23:b2:c1:da:ea:ca:df:
c8:13:9a:a7:39:87:9d:e0:b3:e4:23:ac:ee:02:86:
cc:39:27:1a:67:ab:9b:ea:3e:65:a6:6d:b0:05:d3:
9d:7d:58:cd:19:f1:f6:df:73:1a:58:7d:2f:f9:ce:
56:2c:57:35:df:f3:7c:ee:85:69:8b:81:23:53:36:
23:71:c5:44:d3:63:ce:2e:56:e8:2f:60:13:c1:00:
c7:24:7f:23:8c:bc:de:45:ba:f3:5d:ae:28:43:03:
8b:2f:93:4b:d2:4c:1e:aa:57:07:03:cb:7b:3f:e2:
4a:11:18:c2:ae:97:43:9f:cd:2a:4e:24:71:12:70:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:EF:20:A4:BE:A7:18:AE:83:91:56:DB:6F:1A:13:DC:F1:14:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3e3b5b42-836a-34e7-badf-cdb1abc030ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:7e:e0:a2:11:ef:ba:20:c0:61:42:60:2b:a0:74:47:9a:92:
e1:71:8f:2a:c7:d6:c5:5b:ab:77:b6:de:7e:d0:d7:8a:ac:cb:
69:df:21:7c:ce:38:c7:54:76:b5:5d:eb:a0:43:f2:db:c7:a7:
29:5f:d5:7a:26:0c:06:75:1c:fc:a1:9c:29:a1:98:a7:40:52:
b3:f9:d0:e7:54:05:0e:b5:d1:75:e5:61:22:0d:3b:67:1a:d5:
4c:b7:a4:70:fd:19:b1:14:9a:1c:15:a8:27:e3:29:ee:f4:ea:
a2:54:72:ab:54:44:dd:a9:c2:b4:08:3e:b0:2e:d7:ec:ee:ab:
62:21:da:aa:a6:3a:ed:8c:02:51:96:75:75:54:a9:95:96:75:
7a:a8:df:73:34:47:eb:c9:84:ba:5d:bc:d7:64:03:30:7d:4f:
eb:1e:cb:75:80:25:0e:aa:45:ab:d3:93:88:d5:c9:34:0d:15:
c5:0e:c1:bd:1c:e3:9e:84:4d:21:18:0e:4d:3a:5b:85:ce:87:
28:d3:cc:55:e5:e4:93:c9:6b:e3:7d:1c:56:52:eb:6e:07:43:
22:59:37:2e:cc:87:03:a0:7d:d1:cb:5e:de:cf:d2:4b:64:f1:
ec:b2:c4:33:f7:11:59:54:38:31:f8:7c:37:71:e4:96:e5:98:
ce:76:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:17 2025 by rpki-client