Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa
File: f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa (raw, json)
Hash identifier: 9YzViUkLmp3tnoGhxRvnaeEqUXMrJzt8MQotNyjlw5s=
Subject key identifier: 99:BA:5D:D9:D6:89:2A:D7:21:DF:70:66:6B:72:E9:B9:2F:32:C2:E7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849029711AA7C6B8E0D29C779C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa
Signing time: Wed 26 Feb 2025 11:09:50 +0000
ROA not before: Wed 26 Feb 2025 11:09:50 +0000
ROA not after: Tue 27 May 2025 10:09:50 +0000
asID: 30036
IP address blocks: 104.201.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:97:11:aa:7c:6b:8e:0d:29:c7:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:09:50 2025 GMT
Not After : May 27 10:09:50 2025 GMT
Subject: CN=65d71ef1-9489-4885-a618-eb10c399d215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:55:17:62:f7:69:fd:3b:7c:c0:4f:24:fa:
ae:aa:70:c2:a5:ff:4f:5b:56:86:c6:ea:a5:d0:7b:
a4:3c:cb:ef:98:16:ff:80:e6:90:20:4a:5e:f8:4c:
33:06:f2:b6:7a:f0:10:44:75:00:eb:46:d8:f4:49:
e4:f3:e4:fb:83:7b:0f:71:8a:19:6f:c2:9d:8e:26:
29:31:8b:1a:a8:df:21:c6:2b:e9:ad:5e:4f:fb:3e:
8e:c0:38:7e:57:89:23:29:f6:13:da:68:8d:03:23:
70:13:64:ea:f1:26:6e:be:86:71:b1:d6:31:c4:c1:
a8:82:1c:ab:ef:69:a8:e1:79:71:56:b7:c2:e5:d5:
ea:93:f6:84:70:ce:dd:05:02:17:64:83:1b:06:91:
ef:88:71:14:0a:f0:e8:c1:69:97:5d:6f:d6:5e:5e:
5a:4c:9b:8b:f6:9c:b7:a1:43:4a:e8:5a:93:0d:eb:
e7:08:a3:b0:11:70:dc:1b:4b:e5:0b:3a:c2:21:bf:
cd:d9:21:fc:05:26:36:72:67:45:b3:15:ec:d2:65:
0a:2d:e4:42:7c:84:35:65:2a:6f:ea:b1:93:43:7e:
bd:20:0a:08:1b:4c:bd:5f:fc:c5:1c:1e:5c:77:17:
98:58:ab:9a:40:a3:a5:8d:31:58:76:9f:41:07:0c:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:5D:D9:D6:89:2A:D7:21:DF:70:66:6B:72:E9:B9:2F:32:C2:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f19bc62c-bea2-3ebf-a6cc-35b13e45e1a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:34:95:0f:1b:eb:14:84:3e:4f:90:35:67:cb:24:da:15:d9:
96:ec:f8:b6:2b:5b:fe:ce:19:d9:22:3c:97:48:a7:34:32:a5:
ee:00:00:61:e3:0a:2f:c6:f5:36:9a:54:50:3e:ab:a2:42:a4:
be:bd:7c:90:71:e6:44:9e:c6:53:8e:be:06:2d:06:be:46:aa:
34:75:ea:5a:b1:ea:be:f6:3d:b6:1a:6f:05:8a:01:80:e4:3c:
89:99:e7:6d:df:fc:b4:7a:33:57:6a:87:58:22:ed:21:20:8c:
d0:ae:40:5c:29:bb:61:31:da:df:91:5c:07:9f:b9:af:d9:15:
b9:09:8f:78:87:cd:2c:4b:ec:90:8a:3c:37:c4:80:9b:40:1b:
59:22:04:c2:a8:47:8d:4a:e9:8b:82:00:52:a3:e2:98:c1:03:
93:4d:05:8f:c3:fe:79:c0:84:45:cc:f4:32:10:99:a6:d6:39:
40:57:fe:d0:7d:fe:d5:a5:ba:aa:b5:11:7e:23:3d:50:88:68:
61:09:19:e4:39:97:b0:90:42:21:04:ed:6c:88:82:f6:22:a0:
42:03:3d:be:1f:c2:a5:ba:e7:2c:32:78:5e:67:5e:c8:2e:ab:
04:44:9c:6c:20:8e:70:04:50:9b:ed:01:f1:7a:76:fb:30:5b:
91:b8:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:24 2025 by rpki-client