Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa
File: 9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa (raw, json)
Hash identifier: gWdZIHetPANBDPNDjiCMx/RhnY2CAnXwBZwidI9gGJI=
Subject key identifier: 1D:D9:0C:38:35:91:1F:BA:9C:E8:17:E6:A6:CF:6D:9C:95:BB:93:0E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F846E8FE40EAF8887CC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa
Signing time: Wed 26 Feb 2025 10:54:37 +0000
ROA not before: Wed 26 Feb 2025 10:54:37 +0000
ROA not after: Tue 27 May 2025 09:54:37 +0000
asID: 30036
IP address blocks: 104.201.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:84:6e:8f:e4:0e:af:88:87:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:37 2025 GMT
Not After : May 27 09:54:37 2025 GMT
Subject: CN=1c126e74-28e7-481f-ad94-d4dd35d79e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:37:b0:02:17:79:00:f4:a1:30:54:22:56:
f7:cf:a4:f4:c4:d9:b5:b2:35:8a:f3:68:c0:33:6b:
5a:9b:1f:41:0d:85:81:b0:5c:b2:d2:81:f9:31:f8:
ce:63:e6:3c:0a:12:44:c3:e5:57:7e:e7:b0:dd:c6:
1c:e7:5e:04:99:73:6e:f6:0f:9e:29:ad:a5:3b:bf:
6b:3c:bd:34:86:45:cc:0c:55:3f:b3:90:2c:5d:35:
31:ee:cd:9f:d8:ec:0c:6a:56:db:42:b4:28:4b:b3:
7c:a4:48:ba:9c:88:8b:de:9e:ed:82:04:f8:9c:71:
18:e4:61:0b:23:9c:9b:c6:2c:82:7b:5c:d3:50:98:
fd:8a:2a:98:ea:b2:0d:fd:cc:e8:07:e9:17:f4:92:
58:df:0b:c4:e2:52:55:fa:f6:60:99:20:3a:71:9a:
d8:da:71:01:7f:75:76:54:61:6e:6d:79:a6:87:4e:
69:9a:a2:d4:6e:49:4e:bf:f7:40:f9:16:bb:3a:4f:
83:cc:d7:3e:e9:6a:db:79:0a:e9:7d:16:ed:89:d4:
99:7e:71:3a:b7:5f:93:47:6b:d0:47:6d:e7:01:4c:
40:2d:0b:65:31:84:84:51:0f:3a:bf:23:6c:5f:dc:
01:ad:32:f6:19:53:ad:88:50:f2:aa:39:79:06:9a:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:0C:38:35:91:1F:BA:9C:E8:17:E6:A6:CF:6D:9C:95:BB:93:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d9f4ac5-5bb1-3dd3-867c-96030d4c4b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:96:2a:25:3d:e1:84:24:8f:29:51:75:41:a5:ec:a1:2d:4e:
0a:37:63:1c:55:08:35:aa:e7:65:45:a8:bb:b3:80:34:85:03:
6e:5a:5d:31:8c:38:36:34:af:1d:df:94:bd:f4:bc:7f:8b:7c:
79:bf:3b:d6:2c:37:7a:d2:19:e7:a8:a0:7f:bf:65:6f:5a:be:
ab:b0:9f:2b:e8:6b:82:82:35:73:4a:03:f1:9b:20:23:93:58:
dd:57:d2:f1:f4:59:e1:03:fd:70:a7:b3:0d:4b:0a:9e:7e:cd:
f5:ce:5b:97:c5:b8:bf:7f:ab:16:b9:2f:dd:41:f7:51:07:11:
9a:86:fc:a2:3d:3a:81:1e:8a:f6:c5:16:6d:58:db:02:3c:ec:
95:43:dc:5d:43:96:c3:1e:55:80:68:bf:87:eb:bd:dd:5a:3e:
e2:5b:f0:44:f6:3b:72:62:4e:2c:95:34:e6:33:89:24:03:12:
91:f8:46:2d:a9:ac:2e:ef:7e:70:55:21:e0:82:a5:a1:44:a0:
01:fe:60:bf:18:ba:d6:ed:51:e9:e5:f6:2c:96:b0:26:2d:c6:
47:82:c1:58:78:15:f6:d2:35:4f:f0:ff:01:58:33:94:36:15:
83:a3:98:7e:8a:e7:fe:96:12:fd:36:31:68:00:cf:49:11:cd:
de:f1:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:38 2025 by rpki-client