Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00534f4c-3f06-31be-888b-18c6f670172d.roa
File: 00534f4c-3f06-31be-888b-18c6f670172d.roa (raw, json)
Hash identifier: kIs9VV1cD4fSQ4g1gM/pnu00dscMHXRWUwMrBU6P/OE=
Subject key identifier: D6:F0:E9:21:80:5F:59:02:02:91:4E:97:51:E6:A6:3C:E1:C7:5C:42
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848DBFEE0713C44F3E284B6F9C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00534f4c-3f06-31be-888b-18c6f670172d.roa
Signing time: Wed 12 Feb 2025 15:22:28 +0000
ROA not before: Wed 12 Feb 2025 15:22:28 +0000
ROA not after: Tue 13 May 2025 14:22:28 +0000
asID: 30036
IP address blocks: 104.201.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:fe:e0:71:3c:44:f3:e2:84:b6:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 12 15:22:28 2025 GMT
Not After : May 13 14:22:28 2025 GMT
Subject: CN=b77d7ebd-a504-4eac-94a4-49f83b1caaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:52:f4:a9:be:9d:26:b1:d0:30:1a:73:c2:
03:ea:da:cc:d5:35:91:fc:41:7a:5f:b5:c6:fa:92:
35:10:76:6b:55:33:54:12:1e:e3:7b:e3:b3:d8:11:
c0:15:de:32:74:bc:d3:31:7f:45:61:e8:14:07:5e:
4b:65:c7:76:87:18:99:a9:b3:9f:61:44:46:ff:72:
38:98:2e:17:52:22:6d:e8:df:16:53:72:70:c8:a9:
69:15:3b:95:8b:63:0e:18:3a:2e:a0:49:32:4d:98:
c6:2a:d2:20:82:1a:5c:21:e9:13:d8:a0:5a:1e:4c:
aa:91:9a:83:3d:56:9c:fd:1c:e7:5d:58:19:73:35:
c7:f9:74:bd:d1:28:0d:b7:40:b2:cc:70:91:8b:75:
6d:95:cb:0b:47:d2:ce:67:89:f7:79:ac:6e:2b:b8:
7f:bd:28:73:6c:91:ec:bc:fd:ec:c8:e2:d4:87:bf:
57:6c:16:48:4e:92:db:4a:e7:87:56:45:66:dd:57:
c1:9a:c1:5c:7f:b0:eb:e6:2d:d6:67:16:27:11:a0:
6e:8d:55:3b:ab:0c:e5:fc:22:73:85:3f:15:a9:c3:
40:1a:ef:1c:30:59:76:ff:df:c1:43:33:dc:ba:a0:
b7:32:0a:67:82:f3:78:d9:1d:4b:c3:9d:04:07:0a:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:E9:21:80:5F:59:02:02:91:4E:97:51:E6:A6:3C:E1:C7:5C:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00534f4c-3f06-31be-888b-18c6f670172d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:f5:06:68:6b:10:b4:58:68:b6:eb:21:f7:58:f1:38:b0:4f:
27:6d:41:03:fe:d2:cb:9d:21:ec:9e:65:b4:ea:bf:a1:c2:51:
86:60:c3:d1:88:6d:8f:c3:4d:8b:7c:26:9a:47:d2:d8:06:b2:
62:a0:7a:e0:55:d0:78:5c:08:26:30:f1:40:b8:14:7c:c4:cb:
c7:78:8c:98:57:68:7c:f2:79:33:66:ca:1c:71:41:21:f0:ef:
62:67:48:b7:0d:79:49:e7:d4:fe:1c:ab:e2:0c:0b:3c:e1:97:
a8:dd:3f:85:67:fc:74:ec:ce:c7:91:ac:77:e7:f3:f0:26:71:
c6:d4:08:e9:66:bb:c4:39:fc:c3:39:27:bf:24:5b:34:b0:ad:
06:00:59:5e:49:65:c6:f3:bf:99:8e:e4:77:a8:1b:3f:a7:f4:
4d:4b:79:86:f6:ff:28:87:5b:b9:25:56:7b:ba:38:c0:2f:29:
37:db:ba:e2:4e:eb:9d:4b:8e:50:dc:b9:54:cb:ed:3c:e0:c8:
a0:13:39:c3:52:e5:da:02:fe:03:c2:f7:b2:16:09:0f:11:51:
f7:f5:f3:50:31:10:2b:cf:ad:1d:52:0e:1b:26:68:6a:9e:5d:
08:2a:93:1f:34:80:c1:0a:f2:63:b2:64:c3:64:72:c6:d7:87:
9c:89:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:41 2025 by rpki-client