Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa
File: 0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa (raw, json)
Hash identifier: MZyl2PQEKuYVPm84LgHY3F/eENl5MovdIfabLrQAe7w=
Subject key identifier: DF:15:50:47:06:6A:BE:2F:A4:CE:07:2A:3F:EE:73:E4:8B:4D:44:47
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D0FF9446699BA50F8400
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 104.224.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d0:ff:94:46:69:9b:a5:0f:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=80ff1196-879b-4faa-baff-91f3634e854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:f3:56:1e:b7:9c:73:15:85:7c:a1:d6:81:
b5:4a:78:67:24:e1:11:38:55:4f:86:21:67:a9:1f:
0c:e7:21:af:9c:3a:22:fe:8b:c8:fb:31:f8:0b:cd:
fd:e3:f0:d4:76:f5:17:6b:f0:d7:c8:11:97:78:57:
f6:04:bc:43:bb:7c:f8:6f:69:ba:e0:00:8d:df:25:
fc:c8:bb:d5:4e:b6:c8:0b:b6:b8:8a:b1:ac:b1:34:
c7:d7:b5:60:bf:0b:c0:4d:34:5a:f5:45:94:b9:1c:
93:f2:d8:19:8f:79:a5:6e:23:a1:bd:01:7b:f8:37:
5e:44:bf:60:5d:54:3d:70:c3:6e:ad:6c:1c:75:bc:
c5:01:f9:9c:35:f0:16:9d:2a:5b:a8:77:4c:61:f9:
4c:f4:01:a9:fd:a9:20:36:2f:8c:b1:da:f3:6d:21:
40:fe:8c:6c:a2:a6:5c:15:7b:43:41:ae:50:3b:5d:
af:06:6c:d6:1b:c9:51:02:d1:4c:a1:ff:6f:29:9e:
93:79:cd:06:c3:68:cd:e0:df:37:46:fb:68:b4:75:
f6:db:79:26:b7:4c:59:ad:23:27:fd:81:0d:7b:5f:
6e:db:8f:1a:ea:7c:42:2e:9a:55:0c:7f:b8:20:4c:
83:2c:a8:04:67:6b:0a:63:9c:09:11:98:86:28:be:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:50:47:06:6A:BE:2F:A4:CE:07:2A:3F:EE:73:E4:8B:4D:44:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0d66700e-1c42-3ce5-9fab-dd85202f34fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
104.224.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f3:82:d6:60:6b:d7:a6:2b:e2:85:12:35:33:74:6a:98:6d:
c8:e1:fc:97:f8:63:8c:07:bd:dd:9b:2a:0d:42:aa:a1:c5:1d:
48:bb:26:46:2c:00:8c:aa:ab:47:61:a1:78:14:6c:6f:35:dc:
ad:8a:61:ae:8a:f8:cf:2b:39:fa:ab:53:d2:c3:ea:2f:7f:26:
1a:27:5c:f7:4a:7c:05:f4:0f:b9:58:ff:18:3a:71:e4:b6:12:
cb:64:64:ef:e9:ad:76:da:c9:05:23:5e:ea:30:26:65:0e:2a:
9b:16:41:69:ec:9d:1b:32:e6:be:c9:24:d3:08:67:96:b8:cb:
49:da:d1:30:47:a2:6f:b5:34:c1:a3:51:10:55:ea:f5:09:03:
cc:73:14:ee:21:fb:af:d6:12:d1:e2:b4:b9:38:6a:e5:61:3f:
d1:ac:36:51:2a:fa:8c:e0:ea:79:21:cb:c3:bf:6d:94:47:19:
34:f1:af:e8:eb:85:0a:53:87:e4:63:28:b6:43:fa:a6:39:94:
86:fb:b1:e3:fa:72:b6:94:9c:de:3d:9d:bb:0d:c2:cb:38:42:
62:b9:46:b0:e9:60:06:77:47:d9:68:f3:43:a2:80:66:ce:c2:
09:7c:fc:2c:7f:36:20:3a:b8:f8:c1:44:7a:aa:d8:60:7b:d8:
52:ef:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:31:46 2025 by rpki-client