Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
File: 1367525f-332e-39de-a859-d9312447ba1e.roa (raw, json)
Hash identifier: 7I8PJw3Qq5FiPJ8S6bLDM+aZNdHM0ey1Eb39sdO0784=
Subject key identifier: 40:84:02:B1:23:FA:30:3B:58:37:04:37:F8:99:81:95:24:24:02:33
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858490296DF6D2BB5C2D60CEDC900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
Signing time: Wed 26 Feb 2025 11:09:26 +0000
ROA not before: Wed 26 Feb 2025 11:09:26 +0000
ROA not after: Tue 27 May 2025 10:09:26 +0000
asID: 30036
IP address blocks: 104.201.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:96:df:6d:2b:b5:c2:d6:0c:ed:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:09:26 2025 GMT
Not After : May 27 10:09:26 2025 GMT
Subject: CN=35bb71b1-ec40-4584-bae9-5107ad5e4634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:09:ae:63:e7:70:e0:32:0c:a9:42:8b:a9:
b9:a0:53:18:18:a8:60:77:74:32:bd:1c:14:fc:6f:
39:79:11:4d:51:77:a4:46:06:9f:6c:02:7a:db:cd:
43:80:b5:90:dc:6b:d4:95:a7:a9:a1:eb:8b:7f:35:
8d:9c:e8:25:3a:ca:01:72:dc:bd:8e:8f:eb:39:9f:
1d:e5:d7:60:98:2c:c9:cd:47:2c:68:d8:ec:73:0f:
65:48:86:26:42:a4:35:61:35:9a:3c:5f:c0:c4:8b:
28:39:b3:06:06:f6:df:4f:e0:ab:75:bf:97:ce:8e:
2d:dc:2d:ca:1d:f4:43:df:2d:6a:a4:eb:d9:40:9e:
e3:d8:97:d8:7b:1b:dc:2d:40:e2:66:dd:a7:c9:3a:
b9:3e:75:bc:f5:d9:b4:c3:8a:0f:ee:e1:a7:d5:de:
ce:cf:ee:27:0f:a4:07:9f:c2:3a:73:a5:83:1e:67:
83:c3:2c:b0:c3:c5:29:13:f8:19:98:ec:b4:0b:55:
04:7b:ca:3a:9d:58:31:1a:39:16:cc:aa:63:db:51:
bf:03:54:bf:b7:8d:b6:49:f6:d9:23:d9:e9:91:3a:
1d:e1:8e:13:62:ec:0f:15:ea:fa:bb:69:9b:a2:27:
27:80:16:94:62:08:8b:47:e6:c8:e6:77:1a:5a:17:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:02:B1:23:FA:30:3B:58:37:04:37:F8:99:81:95:24:24:02:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1d:59:3e:d9:79:4d:fe:95:ae:3f:28:8f:d8:5e:f8:38:1c:
77:2f:c3:e5:86:36:aa:c2:f1:2c:99:17:75:9d:dc:95:cb:c5:
6e:f2:86:5c:4d:a8:76:5c:8a:88:b7:61:21:95:70:02:5b:3e:
77:80:82:16:b0:da:78:eb:37:ad:8b:4d:8f:35:d0:29:31:71:
60:6f:14:41:05:30:2d:73:75:03:70:ad:1a:c5:ab:a4:9c:27:
3f:56:90:b0:50:29:7b:11:42:b2:83:17:6b:e9:13:c1:18:97:
fe:c4:17:14:1a:ee:08:34:43:11:f5:d0:01:9d:ef:6a:23:bf:
9c:e8:3e:5c:09:dd:75:45:b3:ab:d1:94:5a:c1:6d:29:9f:34:
86:42:a6:95:96:5a:d3:96:2e:81:2b:86:eb:eb:62:b9:2c:42:
ec:d7:90:27:85:4c:c0:8b:88:02:47:c1:93:e2:71:46:9e:24:
7e:67:1e:a1:3a:bc:24:67:85:44:9d:ff:4d:f3:65:51:f1:59:
0d:93:b2:6d:f2:89:69:19:f2:aa:1b:6a:c0:7c:c2:27:56:fd:
67:50:d6:48:0f:35:41:aa:8f:5d:38:5b:fd:85:fc:b1:4d:01:
e5:28:79:6d:95:b7:c6:e3:96:aa:f3:6a:83:5a:1d:21:d6:e1:
7d:e1:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:08 2025 by rpki-client