Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa
File: f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa (raw, json)
Hash identifier: JNkKmagH+uZq8/2x5rKox6K+vR3k1XP0275eyJ2tUqc=
Subject key identifier: 16:A5:A5:77:76:8D:95:4E:AF:9A:30:25:13:22:78:BF:AD:68:A6:B3
Certificate issuer: /CN=65a67cfc-305d-4049-900c-33f3b01e742a
Certificate serial: 010D0C9F4328584953C4487F3DFDC99FEA41CFB0
Authority key identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 394637
IP address blocks: 104.128.177.0/24 maxlen: 24
2620:e5:4000::/48 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:48:7f:3d:fd:c9:9f:ea:41:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a67cfc-305d-4049-900c-33f3b01e742a
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=020d74a0-4e52-427b-9fbb-b4838f3b5cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:53:29:fc:a7:f1:86:50:3c:88:37:f7:74:
a7:6a:49:5e:32:98:25:a9:5b:30:d4:b1:53:af:53:
73:42:65:d0:e8:ac:42:3e:c7:3f:fd:b2:95:ae:97:
6b:2c:6a:43:47:dc:e9:ef:8c:32:22:e0:51:ac:09:
aa:25:17:8f:93:76:1f:ed:fd:93:a0:02:a5:a7:e6:
7e:51:68:c7:f8:e2:5c:88:28:90:d1:c1:a2:d6:87:
28:26:7f:7d:09:7e:5b:51:33:fb:c2:4f:d6:36:f3:
32:f9:8e:39:54:f9:58:58:33:18:54:f5:28:a7:fe:
e3:78:72:25:bc:52:a1:db:52:7b:45:97:3e:60:0e:
6a:28:45:f9:01:48:1b:b0:e3:a1:f4:9b:9c:23:0b:
38:a9:a6:eb:39:13:34:9a:46:89:dd:fd:87:69:af:
13:78:9d:8b:26:47:bd:3f:85:2d:4a:7f:41:93:d4:
58:97:7a:e6:6f:b1:b9:05:66:4e:ec:89:0a:5c:4e:
b1:79:b2:25:37:60:fe:cf:16:ab:33:43:bb:19:01:
ea:b7:43:ee:95:23:fa:a4:7e:69:0e:61:25:cc:4c:
3e:fd:51:10:6c:11:2a:bf:20:44:4c:21:f3:d9:76:
1d:b6:db:92:53:ae:47:4e:7b:3f:b1:18:29:1e:15:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:A5:77:76:8D:95:4E:AF:9A:30:25:13:22:78:BF:AD:68:A6:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/f2e1aa48-86b1-3f58-a3e5-4adcc365ff95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.crl
X509v3 Authority Key Identifier:
keyid:9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.177.0/24
IPv6:
2620:e5:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:65:ac:5a:30:69:aa:ad:64:f4:85:4c:fe:d9:cd:b5:14:7c:
54:5d:c8:69:af:85:d0:ee:b1:c3:e5:2b:5d:47:c3:49:fb:3f:
80:14:27:06:47:83:3c:89:49:b6:67:9e:16:3a:6d:bb:64:fa:
f2:c2:46:da:5c:73:c0:13:51:49:ed:83:4a:1c:44:a5:db:db:
d7:69:cb:26:db:98:8f:0b:39:5b:21:b6:b9:14:65:10:aa:97:
0a:d2:8a:c3:7f:b0:7a:35:cc:c9:31:b7:cf:65:c3:de:68:8e:
74:49:f9:3e:83:54:65:03:33:36:b2:ae:e9:e7:ca:ee:56:47:
5b:42:46:b3:ce:2a:05:eb:08:2f:e5:94:0f:e1:a9:eb:c9:fb:
04:6f:aa:ef:13:25:cb:b1:db:fb:4b:6e:84:92:75:89:61:82:
77:be:14:35:2a:ef:cc:3b:aa:ac:62:f1:a9:3c:d0:f2:44:b0:
c8:b6:f8:b1:55:bb:4d:4d:1f:5d:af:4d:7c:b6:96:83:28:f0:
f3:bd:78:12:a2:6a:e2:13:ba:55:47:65:9f:4d:59:31:5c:75:
b0:40:d4:91:da:d7:74:b6:a4:77:66:ad:d1:4f:bf:5d:df:67:
a6:dd:30:f5:30:01:06:20:27:09:03:92:54:fb:d0:e0:9f:d9:
20:42:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:26 2025 by rpki-client