Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa
File: 9145fb5a-a667-3a3d-9d91-96a829b1d736.roa (raw, json)
Hash identifier: RDqnkw8xWHaNm+pzPs/9JadYGLK/XZtUX9ocy7pi+c0=
Subject key identifier: 0E:EE:A1:EA:D3:4D:68:68:5A:E8:92:DE:C2:30:A1:36:4E:44:62:78
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848BFEBC9EB360D354DAE7003C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36040
IP address blocks: 104.237.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c9:eb:36:0d:35:4d:ae:70:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=ac533b03-4b1c-474d-9871-64e555f373f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:71:c5:8b:52:7e:b6:e1:73:79:eb:ae:31:ce:
86:ab:3e:fd:76:05:ee:e0:30:ee:e1:55:4b:2c:ee:
76:2b:67:c9:33:67:f6:7c:b1:b1:44:ea:5b:c5:00:
0f:57:93:c6:b9:f2:bd:c2:5e:fa:7b:da:1b:6f:f9:
c9:2a:a5:90:38:f4:61:4d:3c:80:c4:89:41:74:25:
13:43:3c:f7:bd:f0:5d:f7:7a:ba:c8:da:3e:9c:76:
37:1c:df:fa:6b:29:4d:fc:a0:82:07:c0:a4:6e:33:
b2:e5:77:25:3e:f2:53:32:f0:d1:06:c9:19:2e:17:
55:18:e3:97:a4:67:08:3c:68:86:31:da:b1:de:e5:
b6:3e:4d:71:95:6f:e2:dc:25:df:d2:12:0e:70:e0:
cc:31:8c:b0:31:09:5a:e9:f3:7a:db:94:19:e0:61:
c0:a4:e1:8a:69:cf:06:69:86:42:13:fc:05:94:f3:
75:33:f4:f9:72:d6:bb:44:9c:a9:79:d9:e5:85:31:
e0:13:01:0f:ab:c6:5f:40:14:73:3a:fb:bc:0a:d9:
e4:5e:61:63:c3:5e:dc:eb:d0:ee:de:7d:19:eb:2c:
93:32:c5:49:0f:4d:a9:35:17:9e:a4:9a:44:24:43:
b3:c0:63:8f:e0:a0:d0:d3:e0:d9:4c:85:6e:09:5c:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:A1:EA:D3:4D:68:68:5A:E8:92:DE:C2:30:A1:36:4E:44:62:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9145fb5a-a667-3a3d-9d91-96a829b1d736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:18:0a:ab:56:5a:90:6c:39:3b:b9:0d:59:2c:56:16:72:c9:
20:3f:aa:83:ca:38:35:dc:5b:97:d7:14:6b:51:75:68:b0:3e:
09:14:1e:8a:93:10:50:9a:21:9d:d5:4b:32:96:4c:7e:8e:bd:
19:e9:92:38:43:6b:f5:7f:a3:fb:66:24:38:86:eb:38:a0:47:
b2:04:67:72:61:75:be:ce:d3:cf:e1:78:5a:b8:3f:91:30:ef:
69:9e:7e:6c:30:45:b9:e2:0e:5e:3b:96:f8:15:dc:5e:33:34:
70:72:7c:32:8b:53:8c:06:e5:37:ee:af:4d:61:7d:1e:76:f6:
55:0a:03:cf:1f:6b:c6:ef:52:ef:99:ba:68:99:8a:af:6d:97:
07:eb:f2:1a:26:2d:97:c1:41:ee:2c:22:9f:fa:aa:f3:83:a3:
73:1b:09:03:78:c0:3a:09:49:ba:a4:54:bb:15:a9:65:7a:4d:
91:7d:a7:94:8f:df:d1:b4:0f:3c:57:2c:d2:3a:7d:f8:5d:8e:
05:47:8e:75:7a:58:63:3a:75:ea:6c:00:a1:1a:aa:4b:76:29:
87:d5:74:a1:5a:7a:5a:bc:14:01:ac:50:7d:a8:85:a1:2d:92:
d8:34:0c:fc:eb:ec:d4:94:68:79:cf:99:38:09:3c:06:47:e3:
26:78:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:43 2025 by rpki-client