Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa
File: 5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa (raw, json)
Hash identifier: QOnkNvalVJUC/oPUIwnns+nKGPf2nkbJKXEZSjEBqPQ=
Subject key identifier: DB:E1:AB:AE:DD:C6:4B:02:5F:E8:FA:10:39:02:F6:C0:8F:29:84:69
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848F4F97269534880437880B780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54004
IP address blocks: 104.37.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:72:69:53:48:80:43:78:80:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e7563bb9-89fc-4962-afbe-044043bf43b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:ed:2e:e8:f6:b0:5c:7b:11:31:a6:5f:f9:
b5:1a:d7:24:db:36:eb:5b:71:31:1c:1b:a1:0c:61:
44:8c:f7:e0:8d:50:03:a3:e2:44:a7:79:ef:8f:eb:
d4:b3:66:0d:38:6e:f3:a2:27:b6:98:b5:41:fb:e7:
39:86:75:e7:f4:79:ab:31:06:0a:8e:d3:1e:2c:22:
b9:b9:9f:43:77:5e:34:8a:5c:6a:e8:e1:b6:9e:6e:
78:f2:ee:85:26:01:8e:12:0f:9a:3e:fb:9c:56:5b:
8f:53:80:91:ba:b4:78:04:35:a4:b7:4d:4c:53:8f:
b0:3f:5e:da:5f:a4:40:6a:0e:a6:8b:77:b7:d3:32:
24:cc:bb:59:6c:e3:10:64:a2:32:64:9a:26:ea:39:
3c:8f:70:f1:48:c4:23:02:62:d9:a7:d6:b7:f5:05:
6b:ec:86:b8:17:8e:0d:3f:e3:67:e2:cc:eb:ec:a5:
5a:d7:5e:19:8e:80:81:6f:d4:4e:47:86:3e:59:93:
9f:0f:e4:7f:35:fa:c3:e5:c9:f3:31:34:9a:f5:6e:
c9:71:d1:58:72:a5:c3:63:d8:44:6b:fb:65:54:6c:
17:88:ea:34:a2:5a:c8:01:d3:25:ac:7a:4d:fe:cf:
6f:97:75:74:2d:82:d3:78:99:fb:c9:1d:0e:d2:b8:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:AB:AE:DD:C6:4B:02:5F:E8:FA:10:39:02:F6:C0:8F:29:84:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:68:60:86:06:57:f5:0d:d4:6d:ce:5f:88:1c:30:9b:57:b7:
0a:e8:94:10:d2:ac:5c:17:ce:95:e9:9c:9f:fd:f9:42:b0:92:
72:40:85:08:63:13:7b:18:ba:37:96:f8:d5:37:60:ea:86:2d:
b4:e5:00:e9:9f:90:40:cb:dc:b0:9c:99:ec:5d:28:02:db:02:
82:cf:a8:e8:6a:b5:5e:75:d0:6d:a5:24:8b:e3:7c:a3:37:4f:
4e:1f:eb:17:f2:c3:f1:39:46:e2:ed:81:0f:a6:75:92:c5:3d:
ac:b6:17:25:89:91:32:b2:e6:c4:e8:d9:f9:f1:9e:02:d6:ab:
ec:70:02:0a:53:4e:cf:14:36:21:88:5e:c0:ec:6d:da:f9:06:
63:26:e5:5f:dd:fc:5f:b9:01:0a:b5:84:7e:63:70:18:4a:ce:
56:62:74:30:8f:ca:fe:cf:ff:61:1b:0c:bc:b5:8f:74:c2:3e:
e0:3d:fc:ad:93:0d:c1:42:2f:33:d2:7a:78:c4:55:1d:a4:37:
5e:e7:77:86:27:ed:6c:33:03:92:8c:82:a6:17:40:6a:e8:e1:
3f:b8:3d:90:9c:72:82:e4:e5:52:fc:45:89:74:03:75:05:6a:
98:c9:d0:5e:6d:c2:ae:5d:cf:f3:6f:c1:60:c4:bf:54:f7:d3:
8e:7f:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:01 2025 by rpki-client