Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8914fced-e6b7-3d31-99ce-cb8092fb6619.roa
File: 8914fced-e6b7-3d31-99ce-cb8092fb6619.roa (raw, json)
Hash identifier: e45lw+1+W7cA4QtbK9nm6hsnV9jZsy+WAIO27LRXVXE=
Subject key identifier: D8:6F:AD:F2:E4:D6:38:69:8A:7A:21:01:FC:CE:BA:77:92:82:91:FE
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489DB7EECD51F82E164B4117A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8914fced-e6b7-3d31-99ce-cb8092fb6619.roa
Signing time: Tue 21 Jan 2025 07:59:24 +0000
ROA not before: Tue 21 Jan 2025 07:59:24 +0000
ROA not after: Mon 21 Apr 2025 06:59:24 +0000
asID: 329007
IP address blocks: 104.250.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:b7:ee:cd:51:f8:2e:16:4b:41:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 07:59:24 2025 GMT
Not After : Apr 21 06:59:24 2025 GMT
Subject: CN=453e02c2-d549-42d1-84a7-c265c615cf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:c8:4d:66:30:a0:ae:62:28:f7:53:2c:5f:
87:1b:38:0c:35:fe:7e:b4:d8:11:ed:6f:67:b4:bd:
a3:56:01:27:82:1f:81:cb:ff:18:80:3a:60:25:23:
53:86:b1:1b:b9:8e:7e:67:29:b6:3b:23:82:dc:d8:
f7:79:f8:e6:67:41:bb:ca:74:20:8c:90:b9:19:74:
56:36:c6:81:f9:6a:0e:a7:ef:b5:a9:f8:fe:72:3a:
d7:87:8a:89:97:4b:1b:79:67:16:d3:f1:3c:24:cd:
6d:73:dd:78:2f:a8:6c:b0:13:52:38:b6:e0:c5:c1:
62:76:de:34:e2:07:ba:ba:5b:de:4c:e2:8e:23:9f:
0d:a1:36:d8:3a:70:eb:78:96:80:77:4f:c3:d7:1d:
10:9e:18:d1:ac:a6:49:be:bf:a3:95:7c:9c:10:c3:
5b:2c:dc:c5:f3:a7:49:e9:0b:71:62:ec:50:e0:1b:
68:88:3f:30:39:f1:db:89:fe:22:8d:63:e1:ac:d6:
1d:95:e4:d1:59:0a:b8:64:23:1e:40:d4:bc:d3:a3:
b5:4b:50:e3:04:00:7a:61:48:03:66:3e:ce:92:cb:
6a:1f:53:61:d0:fa:fe:a0:2d:89:57:bc:64:e2:49:
e8:a3:ec:97:3f:15:0b:a8:24:03:50:30:38:5d:b6:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:AD:F2:E4:D6:38:69:8A:7A:21:01:FC:CE:BA:77:92:82:91:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8914fced-e6b7-3d31-99ce-cb8092fb6619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:61:d1:db:9b:94:73:e0:38:0c:de:4d:4d:00:5b:95:fb:38:
fb:5a:9f:42:97:93:f2:99:d6:90:b4:8b:39:7d:57:f0:14:3a:
84:82:1e:53:e8:61:ab:03:1f:c5:e2:35:09:2d:ec:29:d9:a6:
25:8a:bf:ef:62:80:1f:c2:c8:c1:e7:7d:d4:df:b3:31:eb:b7:
55:24:ff:84:96:fc:7d:a1:25:df:93:40:16:79:c8:58:48:5e:
40:e3:13:81:d9:c5:51:c5:47:eb:2a:5e:b5:40:cd:96:ef:5d:
f3:93:dc:ae:cb:f2:ca:ec:dd:83:fb:89:90:10:5a:7b:3a:3f:
95:b9:6e:ee:fa:a3:ae:c3:f3:c1:ce:b2:30:4c:4f:a9:0d:48:
0e:06:eb:c3:04:b5:ba:9e:75:7b:c6:27:db:3b:77:14:cd:f9:
88:d4:b3:bf:56:fd:e9:c3:cf:9a:8f:c1:e5:12:84:e5:63:29:
14:d2:18:95:3d:bb:20:8b:e0:88:50:31:81:cc:94:6b:db:53:
82:68:82:54:41:eb:a1:38:20:d1:d5:c1:0e:38:5a:c5:d8:00:
d2:9c:6b:30:d3:5c:7c:6c:66:b1:b4:6f:60:f0:89:12:43:dc:
b0:53:c1:b0:32:e0:61:75:cd:2c:42:c8:7d:72:12:9e:11:54:
d8:7a:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:04 2025 by rpki-client