Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c8675e4-9df9-3533-b501-eeae4286ef96.roa
File: 0c8675e4-9df9-3533-b501-eeae4286ef96.roa (raw, json)
Hash identifier: hkfMsjP8VtMfreQQdqESQ9E00+ZyuiznxhoXAh44USs=
Subject key identifier: 5C:84:B1:B4:67:A2:41:C4:97:12:5F:F0:42:92:BC:DF:F6:78:A3:BE
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858485B6AED864592DAC9A07DB900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c8675e4-9df9-3533-b501-eeae4286ef96.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 5065
IP address blocks: 104.250.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:ed:86:45:92:da:c9:a0:7d:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=f34252e6-a30e-4fb5-bea2-232602c8b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:b4:c5:67:0a:08:23:0d:a5:1a:8e:e6:91:
09:eb:59:c9:8c:e5:e1:e5:f2:e0:8c:37:09:1e:f1:
77:48:45:da:45:2e:b1:71:40:a9:7f:d0:2b:58:56:
00:4f:54:a9:37:45:52:83:39:20:f0:d7:16:a6:da:
92:45:23:4d:4f:25:12:b0:d6:29:c9:60:f9:16:91:
97:c8:e4:ae:ac:6a:d3:6f:b7:fd:45:d5:e1:d8:a2:
c1:6c:b1:37:21:a1:fc:93:9b:9a:63:76:7e:4b:d0:
fc:3e:f6:57:71:89:76:73:92:bf:4a:73:dd:a8:85:
96:09:84:9c:4a:67:a0:af:55:d7:64:2b:2f:1b:bc:
90:45:b7:f0:b7:d8:9f:bc:87:45:70:03:ae:ad:b2:
2f:b7:26:f8:62:85:3d:0b:1e:78:d5:cf:00:d8:9a:
3b:f1:a0:99:f2:ef:6b:fc:d7:89:1e:2d:c3:64:83:
5f:a0:fe:8d:bc:3f:19:16:b3:3e:77:b2:08:d8:25:
36:95:5a:27:c5:51:bd:23:1e:c1:f4:90:83:4d:29:
38:58:50:8c:b0:27:cb:ab:5d:43:0b:d5:75:4f:df:
95:46:0e:67:a9:d8:3b:fa:70:a4:5d:29:50:94:fe:
d8:50:e1:5c:90:2f:a3:f0:e2:78:94:6c:be:59:4b:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:B1:B4:67:A2:41:C4:97:12:5F:F0:42:92:BC:DF:F6:78:A3:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c8675e4-9df9-3533-b501-eeae4286ef96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:3a:b0:e6:98:51:2b:fa:19:52:23:fe:84:d1:e5:36:91:a1:
f5:d5:f3:82:20:d6:da:29:f3:94:0b:9b:97:ca:ff:8e:15:a6:
63:dc:a8:84:17:c2:74:8e:e6:ad:fb:c0:c0:6c:69:a7:73:37:
05:5e:ce:e7:81:fc:73:97:2a:86:4a:b9:95:38:0d:95:32:23:
b6:dc:a6:5d:2b:76:e7:05:79:06:b8:75:62:9d:9e:3c:ae:e9:
38:ca:33:84:11:bc:e5:7a:9c:ec:18:d6:e6:c6:52:35:d0:1f:
76:e9:0e:dd:4a:63:2d:26:76:88:1a:32:8e:54:f7:f5:ce:41:
a5:44:9a:0e:16:9d:c7:3c:30:8f:48:08:88:11:c0:d3:0c:fc:
a2:03:18:c8:e8:c3:82:99:31:4b:30:84:60:27:40:3c:f8:11:
91:c0:a6:32:3b:c0:8b:5c:33:68:93:ae:e6:61:34:34:21:7a:
b3:86:0f:30:72:df:e0:d0:ed:cf:ef:69:0d:c3:08:bd:de:07:
b9:3e:00:90:8d:32:b0:f5:7b:4b:12:39:ae:9e:33:4d:71:8b:
48:7a:2d:4c:f3:15:3c:d2:eb:02:3c:33:9b:93:ab:2e:e1:8d:
27:d1:96:f6:ee:bd:b6:33:0f:03:d6:bd:c8:79:f6:6e:e1:c3:
cf:79:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:24 2025 by rpki-client