Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa
File: caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json)
Hash identifier: 64ALni8Z4gUHFwYjiJ7s5NNGX/vEBQ9PYQeVPWuTNmo=
Subject key identifier: 0F:A4:BA:5F:61:1C:A0:B0:0E:7D:61:93:C4:2A:69:4E:D4:FE:F7:57
Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial: 010D0C9F432858494E2EB1AB606B905840078C80
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 23470
IP address blocks: 104.128.72.0/24 maxlen: 24
104.128.73.0/24 maxlen: 24
104.128.74.0/24 maxlen: 24
104.128.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b1:ab:60:6b:90:58:40:07:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=d746619e-2e93-41a1-bd67-c6fd54b077f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:24:49:75:71:8d:38:48:62:0d:6c:9b:ab:
7b:bd:8c:16:d3:3d:5e:e3:1e:6f:8c:7b:5a:a5:4e:
6c:01:b2:df:1a:66:66:65:f1:d7:fc:e9:cf:56:1c:
c9:31:b1:c8:de:b9:13:75:94:55:0f:45:7d:1b:c1:
61:d1:d9:bb:e3:48:e0:6f:d5:25:30:2a:cb:64:73:
e4:99:57:68:ed:5c:60:25:65:f8:90:4f:ea:95:24:
07:e3:f3:05:50:e5:23:c7:4d:aa:f7:f8:79:8f:94:
2c:8b:09:e6:48:17:3c:cb:6f:9c:a9:4d:16:25:9c:
d2:12:b7:67:39:16:9c:45:5c:d4:b2:97:c7:e2:64:
62:85:45:59:f7:f0:14:af:f6:01:18:d6:39:a8:85:
49:86:6f:f6:ce:b9:71:0b:a0:b2:78:20:98:28:e0:
02:e8:fd:93:e0:01:3d:d2:47:4c:f9:ce:7d:b8:dd:
1f:75:d3:8e:15:5c:01:ea:ff:b7:05:b8:4d:08:b3:
63:71:12:fc:e2:ab:2f:27:77:23:4a:38:f0:a6:bb:
07:5b:59:16:b9:a7:e9:5b:0a:a2:69:cd:a9:4b:4b:
dc:af:8e:82:8d:ac:2b:72:45:e4:52:19:60:ad:05:
90:a1:b5:a0:e4:1f:ce:26:9b:16:1f:fd:78:c7:64:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A4:BA:5F:61:1C:A0:B0:0E:7D:61:93:C4:2A:69:4E:D4:FE:F7:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
X509v3 Authority Key Identifier:
keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:08:e5:3b:3d:a0:5d:e1:76:92:fa:ea:b3:80:ff:be:d3:2c:
63:32:96:96:28:80:67:7f:29:2c:c5:07:47:35:83:36:7c:84:
d9:29:bf:48:be:7f:ad:78:1a:89:18:12:96:bc:ae:4a:83:5f:
bd:a8:bf:6e:bb:3c:d8:96:92:2e:04:54:71:f5:85:1a:29:b5:
98:e4:99:7b:3a:22:36:36:36:70:b4:f0:80:8f:01:76:d0:b1:
58:a4:ae:cd:f0:80:23:40:f4:7e:b2:95:82:15:bb:e6:89:35:
75:e5:39:f6:91:42:9d:24:d4:67:05:48:c8:ca:10:39:d9:27:
a5:24:97:34:87:ff:8e:92:b2:e7:76:8b:60:a9:c0:da:dd:9e:
88:60:6a:bb:7d:10:36:da:9d:8d:55:a4:71:1d:f2:04:7a:6a:
86:99:47:a8:a5:45:a3:00:e3:45:ea:e7:fb:cf:f9:1a:89:50:
19:f3:8c:32:44:92:2c:70:76:c6:80:b8:c7:d0:08:88:83:0c:
04:93:fb:02:04:ca:f7:a4:81:fc:ad:41:d8:a2:ea:16:2f:6e:
6c:f9:05:89:0d:73:b1:0b:94:07:e0:a4:56:a0:a9:b1:33:27:
1a:35:f5:da:5f:2e:32:85:99:54:72:5a:17:30:37:07:a1:7e:
a0:a7:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:56:56 2025 by rpki-client