Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa
File: 306f4639-2ca2-3128-acf0-ed21010e43ec.roa (raw, json)
Hash identifier: 0Oh3aDlvXV/90i62lqHLi+7mCpwjF7/RPLUdRdeiZpk=
Subject key identifier: B3:03:19:7D:50:D5:88:14:87:03:6C:92:DD:20:18:9F:75:3A:0A:50
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848EB3108CB9FC56FCC83763700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa
Signing time: Tue 18 Feb 2025 02:00:38 +0000
ROA not before: Tue 18 Feb 2025 02:00:38 +0000
ROA not after: Mon 19 May 2025 01:00:38 +0000
asID: 53356
IP address blocks: 104.243.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:eb:31:08:cb:9f:c5:6f:cc:83:76:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 18 02:00:38 2025 GMT
Not After : May 19 01:00:38 2025 GMT
Subject: CN=aa905417-9ef9-47c3-b05b-6c1e58e12bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:e7:91:3b:d0:8d:bd:ce:c9:59:ae:46:73:
17:0f:08:b5:84:4d:71:7e:79:19:71:a5:24:ef:43:
d0:ea:97:63:38:dd:28:09:fa:37:38:bf:90:48:be:
26:7f:f2:e2:4c:a6:58:42:d5:82:9d:23:80:fa:ab:
f6:b9:b6:18:8e:7f:40:d6:1b:05:81:20:a9:e4:25:
17:f0:bf:a5:0f:c3:6a:3a:43:5c:23:16:d4:00:36:
99:92:c3:9f:7a:1c:ee:75:c2:81:94:30:a8:30:ec:
8d:27:f2:c2:40:32:89:0a:48:14:47:0c:dd:7c:09:
7d:c7:5d:ae:ce:73:df:af:f9:d2:a8:09:dd:d6:9b:
a6:01:d0:35:38:40:1e:9e:0b:99:b6:a6:e0:45:11:
69:47:26:8f:d9:68:76:3a:4c:3d:6b:a7:c9:73:d6:
e6:ed:a5:57:4d:99:f5:42:76:db:b4:70:64:75:0f:
ac:e7:10:2f:bb:a2:2c:96:be:8c:22:86:cb:8e:87:
1a:6e:42:ac:7c:e6:b6:6c:9c:12:95:89:f8:a6:11:
80:4d:2d:bc:69:44:35:5b:4e:01:9b:87:03:fb:e3:
22:7d:f7:cb:77:c5:b8:82:57:a3:fe:88:39:9b:c6:
c2:dd:3f:f7:8a:b6:10:29:e9:2c:6d:31:04:4d:9d:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:19:7D:50:D5:88:14:87:03:6C:92:DD:20:18:9F:75:3A:0A:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/306f4639-2ca2-3128-acf0-ed21010e43ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:1c:49:92:b8:33:d3:82:d5:04:1f:67:4d:05:66:77:9e:a5:
59:1c:eb:0a:fd:46:5e:85:ef:48:7d:3f:c5:20:45:7b:ac:be:
9d:c5:27:81:ea:74:95:76:c9:96:bc:1a:1b:da:69:61:dc:c1:
6c:86:f4:00:18:4e:05:f6:3d:ce:64:74:89:23:3a:5a:1e:22:
fe:61:69:19:36:d0:6e:7a:0f:84:53:67:9d:b3:7c:ba:56:fb:
c4:47:a2:b6:37:05:24:3f:2e:2b:51:22:2b:20:9c:aa:df:94:
78:ad:e2:2c:47:3b:0d:5a:ed:57:4d:f2:dc:e2:d2:d7:f9:07:
ca:16:2c:6f:eb:ec:9a:50:ac:9c:1f:5b:ff:4d:e9:00:35:5d:
39:41:ed:6b:e8:ec:56:a6:cb:42:da:f8:97:36:62:53:ef:76:
9b:3a:33:68:17:72:96:bd:2c:c7:3e:00:01:5d:2e:19:a4:c2:
26:49:ab:2c:dc:54:73:f7:01:22:1d:6e:51:f2:c7:ef:a9:49:
de:ca:77:6a:c5:96:21:bb:a8:61:06:24:22:02:f2:14:c8:fb:
cd:2b:8b:fa:bb:2a:6f:bb:f7:37:f9:fa:f5:1b:2e:24:f9:86:
68:fa:4d:d7:d4:13:b7:1b:5f:41:65:b5:0a:56:97:0c:08:1e:
e7:13:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:57 2025 by rpki-client