Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa
File: b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa (raw, json)
Hash identifier: sJnuZWfbviIhYMD34Nb4198u8bulU/UP9YLQavQvB60=
Subject key identifier: D2:DF:3D:81:E6:A3:77:01:9A:6E:4B:65:1B:0F:CC:EF:C8:D4:F1:C3
Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial: 010D0C9F43285847F2BA29981E2E793D5913FAC0
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 399045
IP address blocks: 104.167.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:29:98:1e:2e:79:3d:59:13:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=68b2670e-efab-4171-b5a6-549f8112aa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:a5:8d:0e:7c:dd:fc:51:99:92:95:f4:5d:
7e:a8:66:37:ae:a2:e8:50:32:14:c5:fa:32:bd:11:
56:73:f6:3f:f3:d0:28:fa:d4:07:f5:4f:20:eb:52:
10:63:bf:c3:38:2c:b9:4e:cf:e5:81:a4:3c:3e:24:
e7:5f:90:cd:f0:89:89:ff:ee:b3:e7:a0:57:46:28:
5a:f8:10:df:a6:5c:4b:41:ab:9d:d2:bc:10:1a:76:
f1:69:82:51:75:80:61:13:4d:24:c5:a1:c1:c6:1d:
db:28:ac:3f:00:f4:9f:15:9e:fb:f1:f6:2e:8d:d7:
1c:85:31:90:96:2e:89:c5:34:28:8a:e4:43:cf:08:
d9:f0:af:7b:1c:4b:fe:98:cf:55:3b:83:f9:c0:e1:
b6:5d:ce:82:6d:7d:9a:48:85:71:e7:30:ba:5f:51:
63:4a:47:03:7c:b6:9c:5a:f1:3a:47:48:45:cf:95:
a5:7e:28:27:cc:a4:7f:0f:55:40:50:bb:d4:fb:ba:
8f:4d:d4:4e:5d:ff:af:48:41:07:07:f0:09:f0:89:
0b:15:1d:98:d4:e7:45:37:d3:9c:00:58:dd:7d:55:
e0:f6:70:e3:2b:e6:b7:0d:0f:d4:f8:bb:58:4b:0a:
69:64:c1:46:d5:d2:79:b2:43:99:fa:7f:3a:43:b4:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:3D:81:E6:A3:77:01:9A:6E:4B:65:1B:0F:CC:EF:C8:D4:F1:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
X509v3 Authority Key Identifier:
keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a4:9b:bc:19:e6:77:fe:a1:ae:65:4f:40:33:e3:09:e5:83:
b3:2d:b9:aa:8b:e7:62:a4:94:0c:8a:7f:aa:fe:cc:f0:df:fc:
cb:7c:35:9c:3d:5e:12:9a:76:d6:44:6d:7e:c8:76:29:12:9b:
40:6d:04:25:1e:77:79:de:27:b5:9c:d8:94:1f:aa:da:e3:84:
96:12:98:b4:a1:f6:a5:03:2a:e2:b2:14:73:c5:95:60:77:26:
b0:87:f4:95:2b:39:84:be:c9:dc:6b:8f:00:41:34:7a:5c:67:
f1:f6:05:43:2c:b2:de:dc:40:05:26:aa:6e:e2:88:b7:68:51:
d5:06:f7:9d:98:b9:57:62:70:d8:0c:d4:3d:2b:e7:17:ad:7e:
06:e8:98:30:45:44:d4:fd:38:55:52:07:66:c3:05:41:ac:59:
6c:30:63:bb:d4:22:47:62:28:6b:0c:73:05:85:a0:85:33:fc:
b0:0f:f9:18:ec:b6:27:6b:53:35:89:50:61:4d:35:16:f9:c6:
b0:7f:84:4b:7d:af:b3:04:03:53:1f:15:f0:c7:de:f7:26:8d:
00:a4:95:71:8b:64:de:58:76:bd:90:de:00:a6:bc:58:bd:c8:
d7:e8:f9:28:4f:0c:ca:a8:54:b4:77:05:7e:89:a6:13:a8:4b:
0d:48:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:03:35 2025 by rpki-client