Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
File: 339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa (raw, json)
Hash identifier: 8DQQmRCcmYOgsKvoG9cYGGcxk2KSyVEW27oKtLJ+WsQ=
Subject key identifier: 42:2D:1D:0A:3E:8F:7F:54:AC:47:1F:31:CF:94:46:0A:36:4F:7E:6A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584909E6A5DE0D2EACBA06396B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 9009
IP address blocks: 104.250.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a5:de:0d:2e:ac:ba:06:39:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=d5754d75-2cd5-4889-aaca-6c6498596d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:3e:d9:d8:26:42:c2:19:80:4c:c3:b2:9d:
57:a3:9e:9c:36:6b:d4:be:7d:e5:b8:16:80:bb:b9:
2d:1d:26:e0:9b:9b:fd:86:45:e8:d7:7e:51:96:01:
ea:35:3e:8d:03:09:1b:23:8e:bf:dd:ef:21:19:d1:
ff:a3:db:c8:90:c0:35:7d:24:81:5f:62:bc:4e:7f:
b1:eb:95:bf:ba:37:21:22:32:6c:e2:31:c6:cd:e3:
cb:2d:0d:cd:b5:59:f9:59:4e:50:ba:08:73:41:e1:
80:66:36:c6:b6:ef:0a:0d:b9:d3:fa:9c:40:b2:ad:
f2:98:e7:ed:97:43:d1:e5:09:07:51:e8:80:65:97:
95:13:a9:57:62:0b:ca:05:d7:8d:45:cd:57:81:35:
35:43:1e:42:ee:59:7c:52:55:63:22:6d:c5:77:82:
48:ba:57:be:9d:33:40:06:cc:f4:22:f5:ef:54:52:
57:0b:9b:0e:4a:72:4d:cc:95:63:18:d1:1e:1c:64:
71:86:71:30:1c:d2:35:53:c1:25:32:f2:47:74:31:
38:5b:fa:aa:55:4b:ba:5e:28:c7:b0:e5:7c:e1:9c:
76:8b:66:6b:1a:f1:f5:15:42:00:2a:ea:a6:5f:72:
66:3f:c4:38:54:7f:d7:60:10:96:32:35:0a:f9:e7:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:1D:0A:3E:8F:7F:54:AC:47:1F:31:CF:94:46:0A:36:4F:7E:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:5f:4d:16:60:de:37:ff:d9:c1:46:20:03:c2:b6:b0:80:61:
20:24:af:24:6b:90:ea:b5:58:2c:39:14:61:06:52:7c:f1:28:
a9:70:ff:7c:40:7d:6c:0a:ab:6c:54:af:b5:7d:0a:ef:b6:5e:
9b:f7:cf:96:bb:47:2a:fd:c6:f9:37:c0:70:8d:a7:19:7d:cd:
00:95:7a:64:d6:eb:03:71:a9:22:f1:2d:55:fb:48:cb:66:9f:
ed:81:ea:f1:4c:ca:6b:96:08:0c:d5:01:4c:c6:2b:ef:6d:11:
4e:f3:fe:16:5b:26:5a:10:8f:fa:84:2f:38:a7:83:2e:1f:3a:
d1:2d:ca:06:e4:de:ab:76:41:40:46:b7:9a:78:27:73:09:d5:
2b:68:93:14:8d:68:c2:21:fe:14:f2:7f:be:a6:f9:1e:75:61:
48:89:b0:74:7f:40:20:54:1f:57:59:bd:85:a8:02:3e:c6:f5:
6b:72:9a:69:24:60:a2:48:e5:fc:33:3d:af:c7:29:fe:4d:17:
32:20:9b:57:a3:15:af:92:1e:02:dc:00:d1:b9:98:16:d7:a6:
93:0c:6b:f7:04:c7:cc:3e:62:9e:18:02:88:0d:06:97:3e:61:
97:b4:25:bb:9c:b4:d1:31:55:d5:86:8e:08:14:76:96:cf:d8:
f3:98:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:16:30 2025 by rpki-client