Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa
File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json)
Hash identifier: 3XCF32Q+sy4vuFO/pqwqybYcI4GedL8nBrSoIILYCLQ=
Subject key identifier: 05:BD:6F:18:E3:BC:DF:B1:C5:1C:10:AF:E9:28:2C:00:58:C7:AA:E8
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CEF0A456BDCC97E1E468
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 104.224.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ce:f0:a4:56:bd:cc:97:e1:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=6cab4300-e2e0-4cc4-876a-e604984a8863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:b2:0a:dc:3f:fa:39:1a:55:a9:77:83:bb:
03:c0:fc:6d:3c:91:13:d2:b5:73:cf:60:92:1d:80:
ac:c8:a9:b7:2e:7a:04:41:ab:cf:05:0d:c2:7b:7a:
03:89:97:ef:c4:95:03:c6:c0:c3:43:df:e6:e8:0f:
db:0f:93:70:18:58:08:9d:b9:3a:a5:1a:13:fe:a0:
df:59:54:79:35:6d:f0:03:29:b0:20:c2:31:da:ed:
2f:3c:e9:f1:c4:7c:d8:40:a6:ed:3d:96:37:3d:c3:
a0:ae:ed:fd:8e:b5:ea:ab:05:ae:c6:30:45:e3:fc:
62:82:93:27:18:c8:90:96:cb:d1:2c:0c:80:8e:f3:
7c:1f:c8:1e:1a:bb:47:ce:e9:ba:36:c3:20:c3:f3:
f7:f5:0b:bf:05:f1:ef:69:54:ea:a5:09:54:19:c8:
14:b4:1e:e9:0a:8e:6a:a7:65:aa:dc:22:a5:d2:7d:
e5:22:68:ef:fd:c1:7d:70:55:de:89:1a:ba:a9:42:
f4:a8:9d:ca:a4:48:48:92:db:40:39:54:99:d0:c0:
84:df:94:c9:62:2d:2a:f2:ce:0f:c1:28:31:ab:2e:
9b:3b:e2:32:8c:aa:80:b0:d6:88:9a:52:e6:43:b7:
25:38:4a:38:4a:5c:a9:9c:b4:04:a6:83:73:75:5b:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BD:6F:18:E3:BC:DF:B1:C5:1C:10:AF:E9:28:2C:00:58:C7:AA:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
104.224.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:cb:21:74:b7:aa:e5:d1:92:39:7e:c6:94:71:46:13:0a:e5:
2b:d6:81:5b:f9:47:31:14:0e:40:73:13:30:54:27:52:50:28:
98:c4:d8:2b:13:23:39:08:2d:e1:1f:55:81:3c:10:81:44:21:
91:90:38:33:1e:97:71:e0:73:35:58:93:72:b5:0a:2f:1b:b9:
2c:a2:b1:2f:5f:c2:eb:3e:86:c2:29:83:16:bf:95:11:a5:70:
18:85:77:f5:01:9d:27:69:99:e4:3d:1b:ab:d1:82:d0:c2:2c:
6e:36:4e:da:45:94:6e:f2:7c:b6:49:0b:9f:63:31:05:8b:a7:
9b:b1:49:cb:79:5d:3f:96:8e:45:bb:67:ae:94:3d:73:3f:8b:
29:c8:28:d6:f7:04:7a:88:58:92:24:70:0c:51:91:18:9e:b3:
e2:df:1a:0d:33:cb:26:e1:02:db:9a:25:69:1a:f3:9c:1d:a1:
14:65:5b:bd:87:98:35:09:10:ba:8d:7f:79:33:b4:6c:8b:d7:
72:69:b7:24:b4:35:74:86:b0:3a:38:b0:fc:3b:5f:ad:8a:b1:
50:5a:a7:55:23:c2:e4:a0:66:21:70:80:6d:6d:7e:e7:c9:95:
cb:1b:6e:11:8d:b0:e4:cb:80:3b:e7:a8:f0:cb:34:bb:54:1f:
69:2f:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:51:01 2025 by rpki-client