Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json)
Hash identifier: VjtLkWhk8CfwZtTDfilBL7Ozd6Rg26tVfVWsY8rU4UQ=
Subject key identifier: 73:E8:FA:59:BC:FC:54:28:1A:BA:EF:63:01:16:AB:CA:62:B2:D8:E5
Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial: 010D0C9F43285848E9CBEA778693961D4D4B9300
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 396018
IP address blocks: 104.237.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ea:77:86:93:96:1d:4d:4b:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=0e3d5166-db9a-4516-8b58-e002ea1f9bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:5d:85:36:c9:89:04:be:a0:e8:2e:91:e8:
0e:93:47:9b:37:11:c5:3f:f4:d8:14:9b:81:3b:2f:
d1:e7:77:7d:37:85:6d:72:cd:60:65:b7:e7:33:8c:
77:bd:a7:fe:29:13:06:c5:dc:a2:52:62:ae:26:e2:
42:03:4a:a0:37:12:31:c0:bf:ab:c9:bb:a2:24:41:
2f:ca:8d:a2:c4:8b:ad:bd:35:c1:f3:60:59:d7:f8:
68:51:63:44:23:7d:d7:da:88:c0:55:c9:e7:77:65:
7a:a0:39:7b:6b:f9:26:52:66:d4:ee:77:6a:86:e0:
16:ed:81:70:84:8e:72:ec:9f:f2:b1:ef:70:70:7b:
b3:d7:86:96:de:0e:d7:8c:2f:56:b6:ba:59:a5:8e:
17:94:c8:b1:56:30:b5:68:92:ef:e1:a3:2e:b4:0c:
ee:de:6b:43:9b:0b:40:ae:e2:cd:bf:d7:55:3b:1a:
7f:86:6d:89:4c:96:ac:b8:d3:e6:ce:e8:80:cc:ef:
ed:1c:d7:a5:7d:6e:a7:cb:f9:0c:c6:a1:ef:47:85:
07:04:2c:48:f9:2c:cd:84:d2:8c:21:a7:4c:4f:63:
82:ca:93:3c:2b:51:26:2b:47:45:ee:84:bf:f7:27:
04:18:10:d2:94:a9:bb:9e:03:01:c6:a0:73:8e:81:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:FA:59:BC:FC:54:28:1A:BA:EF:63:01:16:AB:CA:62:B2:D8:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
X509v3 Authority Key Identifier:
keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e8:33:a3:cf:5a:5b:42:f6:5b:50:83:48:b0:b5:16:87:59:
1c:6d:74:03:b2:81:29:67:99:bd:61:54:34:2d:73:8b:d9:94:
db:d3:e0:e7:16:8d:8e:79:0b:9e:c0:49:24:92:ef:02:f8:eb:
e2:ca:95:51:d1:18:29:b8:50:d9:c1:37:40:ec:1d:25:41:a1:
f9:3d:d3:1b:8e:24:f7:fd:48:10:79:34:c4:ee:52:ad:6f:7e:
8c:be:0d:58:14:bd:32:17:20:93:67:45:04:20:06:78:c9:ea:
60:38:cf:39:2c:e5:0a:01:ab:5e:f9:69:69:bd:d0:e9:70:7a:
2a:4f:bf:3a:1f:63:c4:e8:91:50:ef:02:90:6f:c4:25:11:05:
89:19:d5:55:85:47:2a:a0:b1:b3:13:a8:19:eb:50:fe:66:3b:
75:56:14:06:2f:3a:42:e2:45:3a:3b:48:9d:c2:86:52:67:ee:
e4:10:44:7b:eb:a9:6e:99:dc:f8:f2:27:5f:82:1e:97:74:7d:
d0:f0:75:0b:8f:49:e6:a8:57:cf:d9:16:4e:13:91:c3:61:37:
cb:05:5d:cd:e8:3d:d5:88:eb:c7:d1:9a:06:af:02:a4:96:a8:
a1:9e:be:e5:aa:a0:b8:3c:82:34:5a:0a:73:e2:64:8b:22:e0:
a8:79:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:35 2025 by rpki-client