Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/d108b846-f9dd-306d-af31-7c082fee40f2.roa
File: d108b846-f9dd-306d-af31-7c082fee40f2.roa (raw, json)
Hash identifier: OZEnFv5amQ6Q5/8TlSlzAeU1ccD5tJBqG6k7TY3kSeU=
Subject key identifier: 46:91:BB:7B:E5:FD:92:CB:D9:76:22:BF:9D:AB:43:58:52:38:49:EC
Certificate issuer: /CN=eb622fc4-4fd0-4955-b02b-48229b06ccb7
Certificate serial: 010D0C9F43285848EC969C73E3466DD8C93CF580
Authority key identifier: 9F:9F:2A:ED:1A:36:E3:DE:28:CF:E0:98:00:0B:9E:E0:DA:32:EF:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/d108b846-f9dd-306d-af31-7c082fee40f2.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 104.129.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:9c:73:e3:46:6d:d8:c9:3c:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb622fc4-4fd0-4955-b02b-48229b06ccb7
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=c40c0a97-2b28-4834-9099-0f42aa03a514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:f4:45:fd:d4:5c:c7:80:5f:01:b1:94:c1:
da:80:a6:8b:f8:0b:98:b4:ae:b0:59:90:82:1b:6a:
65:a7:1e:d6:17:33:77:76:62:f1:6c:00:98:74:aa:
1b:59:1c:9d:33:7b:82:80:b8:e5:0c:29:68:23:ed:
7c:fb:a8:c9:9d:05:5c:37:04:af:53:bd:17:61:e7:
aa:31:b7:dc:4b:cf:49:05:99:97:d3:f2:d9:84:0a:
a7:27:9b:60:3b:cb:1f:e9:57:8a:d5:aa:2b:c4:75:
d0:34:bc:95:d0:cf:b6:57:12:a2:22:bd:82:63:70:
90:67:b0:57:49:8b:c4:cf:28:ce:ac:21:dd:2d:d1:
ad:66:b9:17:fe:f8:97:c6:af:17:a7:42:27:10:56:
13:f6:b1:5b:4c:f8:23:78:d2:85:03:cf:74:60:20:
29:05:c7:0a:39:94:80:04:18:0f:d8:63:d2:c1:0f:
77:65:29:a1:cc:da:9f:47:34:80:5b:36:c3:25:23:
84:88:55:c4:74:21:db:e1:46:8d:fa:da:46:12:fa:
2c:b7:67:5c:97:49:c0:d1:d7:41:18:5e:3a:36:20:
81:1a:0d:99:99:4d:1c:c7:60:77:93:a0:26:db:04:
a4:f7:ef:ef:65:de:a1:03:e2:e3:d2:10:90:a3:32:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:BB:7B:E5:FD:92:CB:D9:76:22:BF:9D:AB:43:58:52:38:49:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/d108b846-f9dd-306d-af31-7c082fee40f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/eb622fc4-4fd0-4955-b02b-48229b06ccb7.crl
X509v3 Authority Key Identifier:
keyid:9F:9F:2A:ED:1A:36:E3:DE:28:CF:E0:98:00:0B:9E:E0:DA:32:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.129.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:4d:be:31:45:00:eb:8b:c1:c6:28:99:85:09:42:d1:52:31:
60:e7:c5:23:ba:6f:0d:7c:8b:dc:e1:a8:28:da:09:95:04:10:
c6:7a:c0:db:63:ea:36:12:06:6f:84:28:ee:db:8e:b9:f5:bb:
1e:e8:48:41:0c:7b:d0:86:f1:fb:f5:20:17:61:47:9a:c3:6a:
60:a3:eb:57:68:50:eb:88:06:be:3c:f3:c3:27:fb:98:4b:8a:
a3:35:88:b5:07:88:53:d6:ef:c0:f2:21:26:45:e1:f9:d2:2a:
9e:bb:a2:71:95:e4:a1:99:fe:18:bb:8d:ab:d9:c0:af:97:f2:
c6:e1:53:c9:2c:7f:2f:7f:0c:8b:87:02:fa:ce:88:eb:7f:a7:
c6:85:39:1c:6c:ec:ae:92:d2:a1:44:ff:b9:ce:53:2c:12:26:
b4:a5:d3:ef:3e:45:b7:58:6a:99:83:0d:0b:8f:49:fb:a1:91:
6b:be:1c:05:a7:f5:d4:73:e0:80:e1:46:96:b7:f9:72:9c:30:
a5:7b:00:40:65:ce:4d:90:24:f7:ae:aa:df:a4:5e:ec:08:4c:
c2:a0:78:0f:4d:36:f3:6c:dd:19:87:41:7f:7a:29:3a:22:55:
6d:e7:dd:d0:d9:b2:2f:85:d1:8c:50:81:54:f3:e2:53:e5:ec:
3e:88:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:50 2025 by rpki-client