Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f12f5938-9bfb-3b27-ba4a-c04085a6432f.roa
File: f12f5938-9bfb-3b27-ba4a-c04085a6432f.roa (raw, json)
Hash identifier: DVk3ejf6J2bki0YC83g6kCNiaXCmDWC1cYYzawm233I=
Subject key identifier: DE:C6:10:E0:89:AE:00:39:E7:10:22:CB:E4:08:BA:C5:35:DA:9B:BA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F99E7FD798058717E1580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f12f5938-9bfb-3b27-ba4a-c04085a6432f.roa
Signing time: Wed 26 Feb 2025 10:54:47 +0000
ROA not before: Wed 26 Feb 2025 10:54:47 +0000
ROA not after: Tue 27 May 2025 09:54:47 +0000
asID: 30036
IP address blocks: 104.201.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:99:e7:fd:79:80:58:71:7e:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:47 2025 GMT
Not After : May 27 09:54:47 2025 GMT
Subject: CN=d874ae35-1823-4b8a-aa6f-6a7fc341befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:18:f9:4e:14:50:7e:13:02:51:da:4a:56:
d7:b3:ca:b5:74:a7:9a:0d:fa:d5:e0:85:ac:4e:30:
05:68:e6:d6:56:23:72:e0:6f:20:0f:2b:c2:a1:2b:
4b:c5:b3:87:dc:0f:32:7e:67:a7:0e:db:46:f9:09:
01:68:51:68:22:f6:e4:5e:1b:91:5a:54:3e:7f:aa:
16:ff:19:fb:5a:2e:01:1d:06:d2:f7:4b:bf:77:dc:
be:19:f1:c2:96:ab:b1:b8:91:15:a6:52:74:90:aa:
59:86:9d:cc:fb:8f:b0:c7:d2:08:f0:a7:b9:a6:5b:
47:37:9b:b7:e3:f3:cd:bb:e1:8c:da:a6:83:30:a5:
3b:4f:e7:18:1b:3c:73:2f:6f:6c:38:e4:9b:1c:71:
75:e2:14:47:34:c0:73:4e:15:42:24:c0:1f:09:fe:
99:b1:96:16:f9:bf:56:e6:de:56:2c:ca:19:46:80:
86:b5:ec:6c:99:b9:27:1a:4e:21:ee:1e:e7:f9:c3:
53:ec:d0:45:68:08:f7:13:42:d4:02:84:f4:b8:2e:
06:e5:49:ec:76:e6:d7:1b:6c:98:fc:30:f9:72:c2:
5e:c4:e8:79:c3:46:0d:75:76:b4:ba:b1:b2:57:01:
3c:08:84:9a:b3:f5:96:6a:df:74:a8:a3:22:07:e0:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:10:E0:89:AE:00:39:E7:10:22:CB:E4:08:BA:C5:35:DA:9B:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f12f5938-9bfb-3b27-ba4a-c04085a6432f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:fd:3a:fb:0c:b2:68:bf:8c:d6:1b:d2:72:28:f0:de:9b:f4:
29:49:65:55:2d:ab:cc:6e:de:34:f8:20:1a:78:ae:5a:ac:70:
ea:bd:27:b4:15:f3:3a:d3:1f:d0:9e:37:62:6c:ca:f5:41:c0:
f9:9c:9e:80:97:ac:90:e9:a7:69:e7:16:96:85:d8:48:b1:87:
6f:15:72:75:7e:2a:c3:b1:b0:45:15:f9:58:a3:05:25:3b:1f:
bc:9a:be:b9:69:09:bc:89:5d:49:08:aa:3a:65:9f:07:fa:62:
b8:c4:0b:03:82:41:85:a0:1b:07:18:13:9f:91:cf:f0:78:24:
d9:16:bb:46:c1:5d:dd:5d:0c:29:83:99:0c:19:ee:01:51:cc:
2e:4e:d6:b7:fb:c6:f7:db:59:99:bc:be:4e:1d:0e:c4:a6:d3:
76:a5:19:0d:99:0a:0f:1d:6c:ab:b3:7a:75:06:0e:24:1c:91:
6d:99:29:8e:55:4f:2f:06:61:d8:7b:b6:35:2e:de:76:00:54:
0d:90:f0:99:b2:7b:cd:6a:46:f2:df:3c:03:55:39:99:b9:31:
6b:d3:0d:98:ec:6c:33:c2:4e:3a:70:e3:56:1b:65:66:54:4f:
56:b4:1e:a7:23:11:06:c4:7e:a2:0e:65:0a:92:c8:6c:ba:09:
09:34:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:44 2025 by rpki-client