Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4d3daef7-a83e-3d21-88c3-4dd45c12c1c2.roa
File: 4d3daef7-a83e-3d21-88c3-4dd45c12c1c2.roa (raw, json)
Hash identifier: rOuGXY9+ZAjvLrMxvt6QPaQduNENmYEdw0dos/Nesls=
Subject key identifier: D6:C9:BA:3C:B3:24:BC:36:92:76:A7:7A:39:E6:D6:CB:C4:FF:74:D7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489DB70A40EACB1525FAB48C40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4d3daef7-a83e-3d21-88c3-4dd45c12c1c2.roa
Signing time: Tue 21 Jan 2025 07:57:36 +0000
ROA not before: Tue 21 Jan 2025 07:57:36 +0000
ROA not after: Mon 21 Apr 2025 06:57:36 +0000
asID: 329007
IP address blocks: 104.250.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:b7:0a:40:ea:cb:15:25:fa:b4:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 07:57:36 2025 GMT
Not After : Apr 21 06:57:36 2025 GMT
Subject: CN=3acb46c3-c7d6-405a-8442-114f436cfc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:4d:ec:a4:fb:55:9f:f7:48:dd:3f:20:d1:
de:46:d3:b6:c5:36:da:52:f3:ce:ad:09:77:75:fd:
51:b8:59:64:8e:a1:3a:d9:48:d1:f2:f9:2d:82:e9:
6c:0f:b4:1c:f9:74:0d:dd:f9:cc:c1:2d:97:65:50:
a3:90:97:0a:e0:34:cd:37:b1:be:58:4c:91:5a:85:
a6:f0:46:6b:17:bf:bf:73:d4:21:79:dc:42:e1:30:
93:a9:f7:84:dd:85:5c:d9:de:7a:54:1f:a7:63:d5:
c3:28:9e:92:47:0c:18:1d:86:96:c4:12:17:9e:91:
8d:cb:f7:03:eb:f0:ac:e1:ca:f3:bf:57:ee:6d:07:
9e:02:37:86:db:dd:73:13:3b:69:81:80:55:46:39:
75:80:f4:9c:60:4b:12:60:44:2f:62:84:51:b4:97:
b2:2f:8e:f5:b1:55:2f:5a:45:6c:fe:6c:74:77:ac:
ca:9d:0f:f1:5c:10:20:df:ca:69:23:eb:fd:aa:74:
e3:2d:52:89:0f:4c:d0:6a:1c:cb:2b:99:30:1b:98:
9c:94:44:6c:a5:ef:37:f3:8b:6e:b3:a8:f3:9e:91:
e3:08:15:9e:54:0c:2d:1c:d4:63:b9:8c:88:6f:a0:
ad:a0:de:f3:ae:8e:15:b2:60:d8:bc:83:56:6c:05:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:BA:3C:B3:24:BC:36:92:76:A7:7A:39:E6:D6:CB:C4:FF:74:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4d3daef7-a83e-3d21-88c3-4dd45c12c1c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ae:06:4e:81:8b:ff:4f:39:44:cd:4a:4c:ce:ec:e1:c2:90:
e5:d9:c1:c2:4f:a6:20:c2:1c:bb:02:f7:fc:31:3a:3e:c4:8d:
66:b6:6a:29:87:13:c1:1e:4e:1b:8c:60:ce:bd:55:86:30:b6:
96:e8:d5:ce:0b:43:3d:ea:07:8f:21:42:25:12:6d:38:62:e4:
0b:5d:fe:8f:29:bc:63:20:cf:15:63:9f:fb:a5:fb:68:c2:3b:
4e:5f:87:19:29:96:d5:23:ac:53:19:ff:1d:5e:97:62:f6:5a:
69:d7:da:97:92:14:40:5d:d5:10:8f:e1:cb:01:6a:2c:e5:b7:
1a:61:9e:f0:9d:dd:60:88:c7:19:37:9c:95:19:3f:80:92:96:
10:08:04:83:55:ec:6c:24:5d:3c:60:0b:13:6b:d2:82:c9:f9:
5b:fb:1b:4b:2b:79:86:ec:11:bc:d0:fe:d0:52:9e:71:51:80:
8a:2f:57:3b:a8:95:27:27:1f:24:fe:20:ef:df:c5:b8:c4:23:
67:85:4f:c1:43:cf:da:00:85:e5:ba:50:72:dd:cd:57:a9:fd:
1d:ec:bf:99:01:63:d4:78:d9:93:99:97:2d:0c:9f:9e:19:96:
c7:60:92:35:f1:34:55:2e:d7:52:f4:43:a8:21:60:84:33:28:
c1:32:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:22 2025 by rpki-client