Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa
File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json)
Hash identifier: ZU88NccQyYAvmo2sVLzrr+Q97b5r8PbDcyS/SkarqlM=
Subject key identifier: EE:5B:32:65:78:0B:CB:7D:A9:F0:80:35:1D:6A:3D:86:D6:3A:AE:F8
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F43285848A830AB46AD2A64E419F5FF00
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 22773
IP address blocks: 104.200.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ab:46:ad:2a:64:e4:19:f5:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=f25b0950-0dc3-422e-bdca-2def54968873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:8c:81:5e:f3:bb:ef:70:4c:f7:93:bc:af:
cc:c4:8d:fb:89:4e:21:b0:44:6f:be:30:a1:b3:23:
50:22:5a:3e:bc:fb:bd:e0:2b:fa:99:81:01:33:42:
bd:7d:21:d8:ba:cf:63:14:7b:35:48:6f:c1:c7:55:
0f:48:4e:d7:d3:f4:50:43:3d:27:73:5d:2f:22:1d:
8f:00:fd:8d:01:5b:2f:99:70:b7:bc:d9:08:1a:e2:
d6:ac:ba:0c:06:38:b0:dc:c8:1f:f9:6b:1f:f2:cf:
85:81:ee:2f:8d:cb:7f:9a:bb:29:f0:3b:56:23:30:
6d:77:48:74:47:47:90:2e:52:c1:04:01:f6:3e:06:
c7:e4:17:dd:b5:de:60:35:f2:e0:39:ba:64:e1:80:
06:13:d6:a8:21:cc:dc:f1:1c:a0:3a:1d:55:11:db:
52:4f:fa:2b:85:7a:84:67:b8:7a:70:7a:e9:30:b8:
a7:53:c5:27:8c:1c:d7:db:8e:16:6c:1b:42:8c:27:
f7:66:96:35:e8:25:40:e9:7d:d2:bd:8e:bc:85:4d:
06:8c:e4:fa:71:40:43:75:fa:2b:9b:d1:d0:42:e4:
2c:58:4a:d7:fd:1e:b4:95:00:70:f3:2b:00:9d:e9:
1d:2b:c0:98:6b:51:a5:03:de:99:c4:2b:77:32:9a:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:32:65:78:0B:CB:7D:A9:F0:80:35:1D:6A:3D:86:D6:3A:AE:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:02:07:b9:4c:40:45:b3:e5:c6:7f:92:eb:ed:34:0e:10:92:
ba:d2:3f:12:32:fb:e7:7c:75:09:eb:a0:53:99:f8:24:48:05:
b5:fb:bc:4d:d7:c1:18:ef:6b:dd:62:78:d3:b5:33:fa:d5:08:
a0:47:d4:0f:05:27:4b:8b:f4:10:a9:aa:e0:e7:73:95:ef:41:
2e:4a:f8:50:86:66:4a:45:6c:66:a0:6a:16:dc:fb:a1:8c:a5:
e1:71:8d:7f:71:98:df:a1:b6:30:06:ba:91:2e:67:0b:78:bd:
ef:9d:78:96:ed:a3:a8:73:60:19:72:3d:fb:b2:4f:5f:47:3e:
1e:b9:12:c8:8c:8e:0f:a2:1d:68:50:4e:a8:a9:fa:88:47:04:
aa:dc:77:cc:1e:7d:84:fb:88:1c:3a:7a:f1:9c:c5:d8:7d:35:
fe:55:45:11:4d:06:5a:af:35:eb:7c:20:41:75:cc:fe:b8:91:
88:05:34:a3:57:a5:64:bf:50:e2:88:d7:6c:38:3c:ee:a9:d8:
58:57:4b:04:02:b1:10:36:02:10:10:09:18:7d:88:a5:d1:70:
85:48:df:01:aa:b2:b1:81:95:e9:4b:d2:8f:57:21:72:fe:b4:
6f:d7:47:f9:d0:33:b9:eb:cf:af:2c:3f:e9:e0:c9:db:5d:78:
1a:e6:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:56:21 2025 by rpki-client