Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa
File: b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa (raw, json)
Hash identifier: 0UJi+bvmdNDWKFiRxUi2K3rpzJwWqBaAY1XS6UHPDdM=
Subject key identifier: B2:3D:EB:B3:88:AD:A7:D9:F1:28:B3:31:E8:BA:3A:42:7F:B2:EF:71
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A750D9036A482F40582C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 104.199.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:75:0d:90:36:a4:82:f4:05:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=5ba5ed03-090b-41b8-9794-7c94294803bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:be:c5:71:2f:0d:d7:27:a1:0b:6e:da:26:
d1:7f:57:cc:10:3f:c4:a5:fd:91:a6:b9:a9:b8:01:
e8:65:f3:d1:c6:a9:f9:ef:50:59:82:ad:0a:bd:91:
90:ca:51:a9:d9:44:a7:b4:49:4d:1d:b9:6c:66:0f:
30:33:64:12:44:65:56:5b:a2:e5:e6:2c:43:1d:ea:
29:bd:65:4e:7b:91:8c:78:64:07:17:83:b7:65:1d:
f0:95:1a:a2:57:34:01:aa:c4:66:5a:07:25:06:30:
da:7e:ac:c3:04:2d:40:c4:e3:b9:53:13:0c:52:4d:
64:a2:e3:67:b2:dd:0d:5d:c5:02:90:7c:6c:a1:5e:
9f:c6:46:37:a5:d5:ae:16:74:f9:d8:4f:cf:bd:dd:
ae:e5:6d:7a:89:11:0e:61:ee:d4:a3:08:62:c8:27:
b1:07:1f:15:5d:de:8d:7a:99:1b:2b:6a:57:89:7e:
2d:44:92:e8:1f:92:bf:0f:a3:2d:85:a5:82:c3:db:
f6:bd:c5:31:7f:5d:5e:b1:5e:36:45:2d:ca:9d:e6:
50:bd:a3:b9:02:57:7c:e6:e0:14:ca:81:f6:2c:58:
e3:33:03:f3:64:b3:0d:c7:01:b5:d2:0b:82:d8:8c:
b7:2e:9f:b7:e4:0a:b2:21:08:fe:62:dd:67:5f:a9:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:EB:B3:88:AD:A7:D9:F1:28:B3:31:E8:BA:3A:42:7F:B2:EF:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:fe:be:2e:9f:cb:c3:a5:9b:1c:e1:a4:40:13:1b:a8:ed:fb:
6e:45:e2:32:1b:7d:cf:d8:45:01:34:45:ed:98:44:f0:60:bc:
87:2f:29:a7:d4:e3:7b:71:eb:e7:1b:24:94:85:13:7f:34:b2:
a0:2a:6e:6b:97:76:1e:5d:ef:bf:e7:18:f5:d7:3f:63:b2:fe:
54:b4:f6:a8:d5:bd:1c:6d:b0:2a:00:86:16:ad:7c:1f:18:a2:
d9:46:cd:6d:c9:bf:a6:36:08:ca:27:47:b6:4a:48:3f:29:ae:
9f:6f:76:6f:1e:ed:ec:d8:c5:8b:35:e7:37:82:30:ae:c9:67:
c3:e2:36:e1:8e:a0:7f:2a:7f:7d:81:b0:af:f2:2e:06:74:18:
c7:a4:9d:8c:42:55:48:fd:aa:df:a7:b3:a1:01:ac:40:21:d6:
70:30:28:a7:8d:f2:78:22:24:0f:de:16:46:d1:42:89:9a:1a:
f0:87:5c:60:f6:5b:6b:63:b7:bc:fa:cc:59:f7:25:15:80:af:
63:34:2f:93:eb:b6:32:de:33:05:3d:74:de:cc:82:14:b0:0f:
bc:1b:34:84:2f:1c:67:b8:6b:10:89:d0:a5:a9:d8:22:8c:b9:
9d:ed:da:b9:80:d5:8a:f3:21:8b:58:56:2d:e1:46:d3:a5:19:
9c:c8:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:33 2025 by rpki-client