Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa
File: b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa (raw, json)
Hash identifier: 1nmMA7o6IreZwWquaKx4pU7zSFyHNE/1ypzIOxTY0S0=
Subject key identifier: A1:99:9E:DB:BF:CE:35:6E:BE:E8:6F:A7:6A:09:7A:6B:0A:3D:50:CB
Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial: 010D0C9F4328584898D5FDF9BB1E72D17B1EB7C0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 46606
IP address blocks: 104.254.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d5:fd:f9:bb:1e:72:d1:7b:1e:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d4833636-5055-46f0-903d-77e4551cd688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:85:1f:39:8a:58:6e:a0:28:e3:f3:60:79:
df:a2:b3:7f:da:db:bf:e7:f0:be:5c:ff:4c:75:95:
5b:7b:d0:75:41:b4:7b:c7:a1:0b:3b:74:13:cd:f6:
5f:a0:d3:c3:54:f1:c6:e4:0f:21:d8:2f:ae:e8:6b:
f8:58:2a:af:f5:ab:6d:df:b8:84:d2:70:d2:45:92:
80:bf:9e:83:ba:10:98:af:7c:aa:c2:80:b6:df:1a:
69:bc:7e:79:e0:7b:4a:d4:d0:09:81:03:99:50:60:
b2:28:0c:fc:21:98:d4:90:25:38:08:65:43:ce:b8:
85:75:5b:98:5a:a3:aa:27:15:89:bc:31:8e:95:6d:
f6:ef:f2:83:00:cd:a3:6b:04:36:6f:c6:44:c3:3b:
20:29:38:9e:4e:2c:f3:b5:2b:92:11:0e:1b:3b:fe:
8c:c7:dc:5c:5a:d0:2c:4b:70:ac:b5:bb:39:32:39:
09:41:db:f2:0a:89:bf:d3:14:93:7b:26:68:f4:40:
42:94:9f:aa:56:fb:44:a9:d1:10:98:08:80:ae:de:
13:85:43:96:74:7f:6c:b2:79:60:62:ad:dc:c5:87:
b5:3d:35:88:56:b2:26:32:10:67:be:fe:6a:d3:6f:
44:4a:23:17:05:f0:ff:38:78:bb:dc:d5:d6:67:f5:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:9E:DB:BF:CE:35:6E:BE:E8:6F:A7:6A:09:7A:6B:0A:3D:50:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
X509v3 Authority Key Identifier:
keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4b:49:70:9d:10:53:3a:9a:f4:ea:91:b1:99:bc:e8:1b:db:
0c:38:63:0c:5d:b3:9b:db:81:46:37:e4:ea:08:4a:6d:05:d1:
48:3b:0b:e9:2f:a3:d1:10:d2:a5:e2:c3:67:db:e2:11:f1:96:
ea:81:23:0d:b7:1b:e3:6c:56:f9:4b:62:2a:24:b0:33:d0:6d:
c8:45:bf:4f:4e:b4:e8:29:8f:1c:84:47:55:33:74:6e:3d:96:
16:90:fc:d2:ac:72:56:fd:2e:c2:89:e3:51:28:48:2f:ae:29:
79:c5:fd:a7:b4:22:13:b3:eb:5b:91:13:b2:45:94:10:6e:3f:
70:a3:37:67:b0:6b:d6:72:a5:fc:a0:98:fc:c8:69:bc:38:f4:
62:e4:76:06:0b:6c:75:c5:1a:da:36:86:0e:f2:10:a7:93:e7:
cd:fc:c0:46:70:98:84:32:d4:9e:a6:f0:0a:a9:61:42:59:fe:
09:dd:f3:a7:bd:3a:6d:e1:47:0a:c0:fc:5f:31:72:1d:a2:49:
74:2a:30:db:72:78:d9:d4:8b:94:b1:bd:bf:a5:1a:1b:be:78:
b4:2c:d1:41:48:c6:77:8e:5f:23:84:84:51:8e:d4:1c:6f:a3:
7a:68:7c:99:68:68:cd:2e:45:84:57:95:9c:d7:f5:8c:7c:a9:
0f:29:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:57 2025 by rpki-client