Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c33b4e8-5379-35bc-829c-e36cc390341c.roa
File: 3c33b4e8-5379-35bc-829c-e36cc390341c.roa (raw, json)
Hash identifier: KusV8SxWkcrl1Fdsh4YAD1wfbZLuQstp2c2E+gCImRk=
Subject key identifier: 60:F3:32:F6:52:D4:7D:21:BD:87:8D:35:B1:6C:F0:33:05:80:DC:68
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848BBBB823F34CA313C35629000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c33b4e8-5379-35bc-829c-e36cc390341c.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 9009
IP address blocks: 104.250.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:82:3f:34:ca:31:3c:35:62:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=6860f14e-fa0e-4f44-b157-c1f139b4c94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:fe:a0:41:13:8a:34:7a:2d:c6:4c:6b:b5:
3f:f4:81:d4:96:b6:4b:d3:67:6e:9a:40:30:07:0d:
83:67:72:d3:17:ec:a0:54:9b:6a:df:d6:49:96:2b:
a9:14:4d:aa:44:ea:08:f5:eb:0e:ad:ca:1f:c8:d6:
56:f0:fa:74:3c:49:c7:6a:65:79:5b:b0:f5:d0:14:
10:fb:81:e4:bc:b8:2d:ab:d8:9d:b4:ff:d9:ab:af:
61:9d:7a:c3:29:85:cf:d1:13:66:3b:97:f7:4b:c2:
53:ef:98:6d:a8:74:ff:04:37:e0:0d:7a:4b:fb:cb:
b0:90:0d:60:25:b5:d5:fb:d5:de:af:1c:97:b4:7d:
ed:71:27:16:49:87:61:28:e3:d6:98:3c:fc:c3:ab:
c2:94:bc:62:d1:39:4a:ae:e7:0f:15:b7:d0:0d:1c:
7d:47:c5:d2:81:d2:9a:4d:05:53:f4:60:57:8e:4f:
ae:2b:ab:cd:4a:7b:55:66:5d:dc:9b:12:46:5e:05:
5b:e6:49:07:7b:da:96:bb:4e:35:3d:09:f0:f5:42:
4a:cd:18:5f:0a:ea:7a:1c:6c:ba:99:3e:1d:45:d1:
da:9e:48:9e:77:aa:1b:b9:7b:de:a9:b3:04:ec:c7:
62:16:f6:27:40:fd:ad:72:cf:80:70:5a:39:e0:a1:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:32:F6:52:D4:7D:21:BD:87:8D:35:B1:6C:F0:33:05:80:DC:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c33b4e8-5379-35bc-829c-e36cc390341c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:36:6c:ad:b7:2d:63:5e:d4:90:d3:f9:57:9f:57:02:65:82:
c8:95:62:0d:6a:6f:58:91:0d:9f:b2:bd:3f:b4:fd:47:33:f1:
2b:ff:4d:5c:35:75:93:5a:40:17:56:39:36:82:3f:9a:c7:33:
51:5e:6e:bb:a0:c4:fb:5d:9c:88:99:9e:90:de:35:63:73:13:
71:43:6a:82:74:b3:87:71:54:90:00:66:58:d5:94:50:26:e7:
29:5a:8b:16:20:cd:f6:ae:ca:19:08:e6:c8:92:cb:71:04:82:
32:cf:b1:e6:d1:14:ae:18:f0:a6:21:2e:8d:1c:bb:d2:48:06:
e1:ae:5e:8b:d9:3b:70:b2:4a:b8:8d:91:cf:14:2b:40:a8:d1:
98:81:d2:09:a0:6e:30:e0:d0:04:e0:75:03:74:33:82:52:6a:
9d:ad:3b:dc:c2:42:1c:33:32:13:c0:f2:d1:6d:14:db:fa:58:
bc:22:f3:28:64:11:84:9e:49:4c:73:ba:c5:2b:e3:85:66:2e:
82:71:1b:bd:c9:2b:e3:dd:de:3e:6d:b2:28:d2:2a:c7:91:d3:
fa:aa:23:a2:23:6e:1c:c8:f1:8b:78:ba:90:46:0e:ac:d8:fa:
ae:e4:0e:47:a1:42:72:41:66:4a:08:fe:59:0e:e6:77:da:1c:
6d:21:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:02 2025 by rpki-client