Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/864cdd22-92af-36bf-9b72-1c5adf079a80.roa
File: 864cdd22-92af-36bf-9b72-1c5adf079a80.roa (raw, json)
Hash identifier: 1Im/YTzOZtiV6SJ91apn+bTYzEHnkvJASaRqBs1VQn8=
Subject key identifier: 2E:1F:D3:EE:DE:EB:03:13:85:A3:DF:87:4D:84:DB:53:68:DD:80:D9
Certificate issuer: /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial: 010D0C9F432858494B640E1CDAA5C79D5DD99C80
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/864cdd22-92af-36bf-9b72-1c5adf079a80.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 7018
IP address blocks: 104.160.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0e:1c:da:a5:c7:9d:5d:d9:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=95e6dfa7-a195-4157-8380-c021dbfa3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:2e:a0:37:7d:f5:f7:66:70:13:d8:a3:13:
8d:dc:2c:c5:d8:43:d6:f4:81:c1:0b:18:d7:e2:ce:
ee:5a:58:62:bc:e5:b5:75:7b:fd:c2:79:1f:51:0f:
db:40:36:9a:ab:b0:2a:ae:b6:dc:ca:34:eb:3b:5c:
68:b8:39:af:1f:7d:8b:ae:de:94:af:11:e1:7a:b5:
f7:6b:57:42:e8:44:5c:d8:0f:4c:33:af:a9:17:d1:
c2:1d:e1:46:e2:a3:be:c8:56:45:7c:09:7f:dd:4e:
0c:1a:0e:ea:6b:17:a3:b7:2e:da:06:10:12:5e:11:
e2:0f:b8:0f:58:31:52:11:79:85:ab:85:1f:11:1e:
3c:21:d4:20:3b:ac:f4:7a:0e:8f:02:81:42:d5:9a:
51:79:20:91:9c:3b:97:e7:71:8e:c1:f7:80:af:b2:
b1:df:b4:c6:34:cc:4c:00:e8:9f:5f:da:cc:62:5b:
40:bd:ac:27:5d:d0:47:52:6a:30:4d:aa:71:e2:a4:
5f:a2:a4:50:55:3a:f2:1f:ae:58:c4:d4:28:b1:c6:
0c:c3:fd:6a:dd:b6:93:6b:7c:01:0d:55:92:e4:b5:
85:af:77:d0:f8:54:14:25:fd:8b:ea:33:b8:86:eb:
b4:f7:bf:2a:a8:d1:55:74:5a:be:d8:7c:b2:86:50:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:D3:EE:DE:EB:03:13:85:A3:DF:87:4D:84:DB:53:68:DD:80:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/864cdd22-92af-36bf-9b72-1c5adf079a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
X509v3 Authority Key Identifier:
keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
sbgp-ipAddrBlock: critical
IPv4:
104.160.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d5:ef:8c:05:b8:d7:66:2c:ad:0c:80:58:93:57:e2:d1:2d:
cc:22:62:39:fe:39:33:a4:0b:0c:4d:ff:36:ca:2b:7a:ca:3a:
a4:85:6b:fe:f2:95:71:24:18:1b:be:6b:12:e3:61:55:f4:87:
e9:e2:23:98:88:87:1a:0a:ca:9f:78:d7:d6:95:d2:a5:11:98:
83:31:71:95:bb:fa:df:71:22:53:f6:8c:6d:5d:7a:3c:4d:3d:
e9:16:ac:31:ac:9d:a9:02:b4:a7:5a:dc:c2:5d:27:ef:89:f7:
2e:e8:10:51:db:f0:92:f2:68:28:84:cb:3c:c7:c1:6f:75:9c:
b3:a7:c4:1c:e0:a9:c7:01:0e:51:ca:b1:27:9e:06:e6:53:e4:
d1:b2:ee:2c:e2:fb:76:0e:0f:7d:75:40:d3:9a:d2:f5:d7:2a:
3d:46:d9:1d:23:1b:95:20:80:23:0a:fe:31:56:d1:c3:3a:2c:
76:37:e1:37:0a:98:49:61:9e:38:49:50:76:80:4b:46:31:2f:
e0:9f:59:66:65:85:1a:9b:9b:ba:27:2b:87:20:f0:24:df:ae:
eb:bf:a9:6a:85:16:85:80:f5:7f:d6:f9:a2:48:76:5b:cd:73:
ff:93:db:77:21:b6:ad:99:a8:fe:9b:ac:77:10:ee:70:42:d9:
85:0a:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:51 2025 by rpki-client