Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a96bae1-2972-3a11-a713-4e486ebac8d8.roa
File: 7a96bae1-2972-3a11-a713-4e486ebac8d8.roa (raw, json)
Hash identifier: YRvHYVrJLa5/OJByS5UmVu2tBPLFGldykSQH5qNEHLI=
Subject key identifier: 7B:93:C4:7C:3D:E5:C1:D2:08:52:D3:A0:D8:22:64:71:2D:EF:21:5F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489DB693BA6F8171356D2D83C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a96bae1-2972-3a11-a713-4e486ebac8d8.roa
Signing time: Tue 21 Jan 2025 07:56:40 +0000
ROA not before: Tue 21 Jan 2025 07:56:40 +0000
ROA not after: Mon 21 Apr 2025 06:56:40 +0000
asID: 329007
IP address blocks: 104.250.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:b6:93:ba:6f:81:71:35:6d:2d:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 07:56:40 2025 GMT
Not After : Apr 21 06:56:40 2025 GMT
Subject: CN=c71d2718-3bd0-4575-acc5-5aae1c7e63d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:d6:46:d1:f7:06:60:7b:de:fe:c6:29:b2:
ca:3d:39:b2:66:e5:0b:52:d2:5a:c1:bc:62:65:fb:
f2:c0:bf:34:9d:13:bf:cc:aa:b3:56:e1:6f:76:80:
ea:48:52:00:d0:c9:dc:e6:9f:81:72:30:7e:4e:88:
f6:a4:bb:bb:84:e0:40:58:e9:74:af:ff:98:f9:9c:
34:45:ed:71:52:18:a9:d1:fb:14:0b:12:e9:41:f8:
6e:8e:94:81:dd:86:56:39:0a:c6:5b:0f:41:14:96:
a4:76:5a:92:d6:23:f4:8f:ab:ab:fe:94:43:23:14:
64:29:ea:8f:82:eb:32:11:3c:c1:88:1f:ee:a6:cb:
ff:0c:71:45:a9:8b:5a:1b:da:21:ee:5f:aa:77:a1:
dd:94:64:97:ed:0a:5f:36:f3:48:1f:76:4b:d4:7c:
9c:08:4a:2d:d7:64:56:9f:99:a5:c3:20:74:85:50:
17:8c:dc:13:79:94:47:b6:9f:38:dc:dc:4a:05:42:
dd:62:72:3d:6b:21:02:8e:7d:7d:98:0f:df:ad:0c:
76:70:59:6f:88:6e:a3:09:2f:7a:e5:f9:09:9b:2a:
e1:d8:eb:4c:2c:89:ea:25:d3:43:44:2a:2b:42:bf:
93:db:31:2f:9c:8a:f6:bb:0b:0f:d6:ee:db:5e:23:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:C4:7C:3D:E5:C1:D2:08:52:D3:A0:D8:22:64:71:2D:EF:21:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a96bae1-2972-3a11-a713-4e486ebac8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:a0:7b:75:89:f9:58:d2:03:64:67:7c:ec:aa:1e:ed:6d:c3:
ca:3c:d7:8c:7a:83:66:09:ea:50:28:12:06:fb:da:be:31:e5:
9e:15:39:27:f0:4d:36:c6:98:37:b9:54:7e:b9:e1:50:1a:55:
9c:e3:12:03:b0:a6:b4:bd:2f:b4:7d:ae:00:00:75:23:39:34:
45:8d:e7:7b:cb:d8:9c:68:61:cb:f2:2e:10:8d:e7:63:57:6e:
79:15:3b:7c:64:c4:f7:ed:38:cd:b5:1d:ff:79:6f:7c:1f:5e:
f6:95:3c:5e:e7:2d:1f:01:05:76:c9:91:27:6a:ad:15:28:15:
03:22:de:c8:8f:60:bc:96:de:c8:4a:3d:3e:36:3d:4d:10:71:
75:33:54:6b:a7:37:90:6d:0d:09:d2:1d:39:97:22:be:9f:e6:
9f:25:bf:be:bb:64:85:9c:2a:ff:bb:63:27:e6:6d:95:b5:52:
17:ba:cb:64:63:17:89:64:f2:00:04:96:0d:ca:50:a8:55:79:
12:6d:89:a7:dd:7a:e9:9e:31:dc:2e:74:39:ec:c7:e3:6b:88:
67:5d:07:82:67:a4:f2:a4:53:17:69:2b:ee:2b:f7:35:85:21:
48:7f:68:f5:5b:2d:bc:bf:2a:72:5a:d2:0f:68:f0:62:af:20:
78:3b:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:20 2025 by rpki-client