Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
File: a4264dfe-d219-3086-936c-b9b00996afd3.roa (raw, json)
Hash identifier: uf8a1wT0CoL3dU665BoZrn97M/jipPeP+xS6dNFmtaU=
Subject key identifier: DD:D4:A1:FE:4C:BC:55:34:EE:9B:7C:D4:55:CA:6B:5F:F8:5A:A1:8B
Certificate issuer: /CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
Certificate serial: 010D0C9F432858494B64128DA406A43ABCAE6F00
Authority key identifier: 9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 104.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:12:8d:a4:06:a4:3a:bc:ae:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=6349ce64-0698-4ff6-a28d-23256e9e63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:a3:d9:f2:b6:7d:ea:1f:24:69:4d:c1:85:
04:73:43:40:28:16:8d:ac:84:fe:14:05:f8:20:1c:
35:4f:d9:01:30:5c:92:8f:34:fc:aa:97:ba:4e:a1:
1c:67:74:4b:90:89:1a:91:52:12:2a:79:f6:2a:b9:
a2:87:35:1b:55:82:4d:28:2e:66:c7:2c:63:9e:17:
94:77:a6:58:af:9a:da:2f:a1:44:5b:51:06:2c:10:
e5:7b:52:62:52:ce:b8:1c:15:61:fe:bb:f1:d9:47:
da:4e:71:41:17:92:41:d3:77:ed:27:1f:38:57:a3:
b8:41:2d:50:2d:18:e0:79:80:70:22:c2:36:6d:5c:
bb:3a:69:0e:76:fc:d0:f5:d4:1e:52:9e:04:b6:62:
02:7a:97:68:a9:fa:dc:ef:b8:d0:29:c9:9e:22:b6:
0d:a0:ae:03:1d:a8:5c:65:84:14:7e:8d:c8:d9:bd:
71:8e:d6:bc:f2:fc:ba:bc:77:51:44:22:7b:6b:87:
e1:ad:ca:1d:db:53:ed:cf:0b:a4:78:93:aa:2f:60:
40:4b:f4:89:1f:a9:54:19:e0:fd:c5:70:e4:76:3d:
d6:d2:d2:c8:85:37:ac:6d:c6:70:22:72:6a:5e:64:
3c:f4:83:ca:ed:62:27:b3:c9:20:0f:44:72:36:12:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:A1:FE:4C:BC:55:34:EE:9B:7C:D4:55:CA:6B:5F:F8:5A:A1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl
X509v3 Authority Key Identifier:
keyid:9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2a:84:f0:47:fb:35:f7:7c:fc:82:dd:d5:3d:64:99:47:48:
58:fc:dd:16:bd:67:35:9d:cf:8a:32:40:44:ca:a0:86:fd:3c:
d7:16:cc:fe:24:e5:79:9f:ca:d8:e9:77:f4:c2:72:6b:09:38:
39:32:5f:f6:d4:34:51:28:3d:bd:b4:c2:46:b0:bf:cc:e3:92:
b9:78:03:88:f8:7b:a6:5b:87:97:08:be:f3:4b:7f:77:aa:11:
56:d6:65:ad:41:b6:b2:24:7f:4e:fd:cc:df:8d:d8:a4:bf:1b:
ba:e1:79:1f:b0:99:8b:3d:27:b2:e0:b3:6b:33:e6:1b:be:e9:
dc:89:04:53:37:90:81:a6:1b:c6:11:66:4d:b0:34:d2:84:8c:
b1:ed:de:95:1e:e0:cb:b5:82:17:18:ef:d6:dd:2c:35:15:90:
61:4c:13:50:50:5d:de:ba:8e:1d:d1:71:10:b1:b1:ea:d9:e1:
63:75:9d:62:38:ee:46:08:74:34:d4:7b:e1:4c:01:01:9d:05:
6a:f5:25:62:c8:48:e8:c8:44:a3:a4:f6:3e:9c:98:60:ab:cc:
c1:f6:ca:d2:c1:f1:66:b4:88:38:72:25:95:5a:f0:21:b1:9f:
6c:5c:90:c3:1b:02:d9:2c:94:e2:66:42:b7:a7:02:ae:2d:f5:
3c:19:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:25 2025 by rpki-client