Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca4347d2-2c30-3094-b456-90eeed0b6339.roa
File: ca4347d2-2c30-3094-b456-90eeed0b6339.roa (raw, json)
Hash identifier: 34ZR2tWODrm39xDi9Hf6LZGbMCbZ7JLoJ9h4QsYIgdk=
Subject key identifier: CC:CF:59:F1:A4:25:26:7F:39:4E:9E:B2:E7:CF:65:8A:EF:0C:21:1E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489E1480A5317D13D8045A9480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca4347d2-2c30-3094-b456-90eeed0b6339.roa
Signing time: Tue 21 Jan 2025 11:05:55 +0000
ROA not before: Tue 21 Jan 2025 11:05:55 +0000
ROA not after: Mon 21 Apr 2025 10:05:55 +0000
asID: 329007
IP address blocks: 104.37.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:14:80:a5:31:7d:13:d8:04:5a:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 11:05:55 2025 GMT
Not After : Apr 21 10:05:55 2025 GMT
Subject: CN=be3aa3c2-ed6c-44a4-a3f6-9ab1a5e1f69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:95:b0:f6:ff:2c:2b:e8:ed:89:4e:cf:42:
9e:3d:16:19:51:00:12:a0:01:13:0c:05:12:3f:46:
38:b3:fe:73:c3:f0:9f:7e:d9:3c:1c:60:83:6d:85:
67:ad:c1:3c:d6:29:8e:54:60:fc:20:ee:91:58:24:
b8:81:4a:a0:e2:8c:e3:6a:cc:19:ec:a4:0f:71:6a:
78:c6:57:4f:83:c6:8f:5a:93:3f:c6:8b:49:cb:b8:
99:01:39:df:2e:12:bf:c9:1e:75:38:26:43:f3:65:
ab:06:32:51:0a:14:06:01:53:fc:5e:83:bc:c0:1d:
4c:c9:b1:05:55:1d:39:e2:fb:2b:36:c7:c4:82:23:
ea:b1:c9:da:5b:39:b0:89:c1:7a:02:66:22:8d:2a:
b4:07:6b:b3:54:62:4f:de:23:b0:bd:ad:e7:86:be:
1c:99:22:c1:07:48:42:83:6d:8e:d8:fe:c2:ca:67:
27:77:06:68:02:7a:ed:d3:de:f5:06:18:44:97:c2:
83:c3:67:ef:f8:96:df:7d:9c:41:b1:5c:ac:c9:4f:
11:c3:0a:b7:cb:07:1d:29:58:d2:57:d6:35:23:ee:
ab:50:af:33:46:83:ec:0d:ef:44:d1:fc:4f:c3:2c:
66:89:42:ad:e3:f4:10:7a:42:97:45:a2:8a:c2:7e:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:59:F1:A4:25:26:7F:39:4E:9E:B2:E7:CF:65:8A:EF:0C:21:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca4347d2-2c30-3094-b456-90eeed0b6339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:e5:85:47:65:8f:fd:60:6e:25:0c:0f:b9:90:4d:83:20:0b:
61:8d:88:a7:70:b8:ac:e8:57:81:62:6e:2a:a8:9c:e5:8b:a2:
40:14:27:b1:ce:70:10:89:04:d3:1b:79:e6:1a:70:5b:0c:34:
1a:05:76:85:00:c8:3e:bc:84:b8:54:05:97:00:81:88:c0:d1:
77:a5:fd:69:a9:21:9c:13:9c:35:b1:e8:be:8c:a0:42:ce:27:
af:65:db:8b:35:1a:90:c3:70:a2:21:1c:3d:7a:18:00:97:21:
6e:b8:62:8d:91:69:fe:cf:d0:42:41:3c:29:ba:d7:ee:1e:76:
37:89:85:38:67:a4:c8:b9:8b:ce:38:d3:e7:25:d2:58:12:63:
51:c1:3b:5d:a9:f9:57:52:85:9d:50:13:c4:37:8c:e0:e8:fd:
d7:b8:f1:93:c8:b4:e1:6f:41:5e:b8:ec:20:8f:22:55:85:d7:
40:2e:ae:46:93:fb:ec:2b:c7:51:0c:b6:04:bc:00:fb:2e:08:
9e:ab:e3:c5:d8:f9:60:66:ce:c6:a9:83:46:07:ad:51:0a:60:
09:79:26:ea:93:76:55:fe:2f:48:6b:56:a0:10:81:d3:ce:0c:
cc:95:64:1d:18:9a:c3:e6:04:c4:13:53:96:78:d5:ea:92:2b:
0d:00:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:48 2025 by rpki-client