Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/38da023e-dd53-3899-b3c8-30857b7b3a0e.roa
File: 38da023e-dd53-3899-b3c8-30857b7b3a0e.roa (raw, json)
Hash identifier: Ajb/1pTV/3IcETpxN5phPYdcAymIiw4SZWPg7AhtDRw=
Subject key identifier: A7:19:A8:8D:AC:54:B9:87:AA:71:8A:20:25:9C:BB:67:D2:7F:2E:0C
Certificate issuer: /CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
Certificate serial: 010D0C9F43285848D6412A86E325780BDECB96B0
Authority key identifier: CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/38da023e-dd53-3899-b3c8-30857b7b3a0e.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 203380
IP address blocks: 104.152.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:2a:86:e3:25:78:0b:de:cb:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=9e84a405-7044-43cd-8ebf-9a58a0b02fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:bc:51:5d:d3:fa:17:1a:c4:4b:6d:f3:a6:
44:17:06:4b:50:41:1f:ac:48:51:af:1f:16:cc:41:
53:67:40:c9:1c:a0:c4:af:33:75:e8:1b:36:a4:9c:
62:aa:c5:91:9d:f4:d3:7e:66:49:43:39:2c:c8:c3:
0c:75:61:1f:6f:5c:36:6a:72:63:47:00:41:42:f0:
c6:aa:84:c1:72:31:7d:50:1a:87:05:56:ab:7a:04:
c2:25:54:33:46:07:70:d3:31:4a:6e:f1:43:f2:9d:
ef:cb:a5:10:68:65:f6:1c:ec:d0:56:b3:6f:ef:c9:
eb:76:b8:c6:8d:41:fb:59:3e:e7:22:d0:96:63:1c:
8c:69:f0:dd:cf:3a:fa:6f:40:c7:b9:db:3d:ff:ab:
f7:92:f9:14:06:a9:b9:b5:ff:87:3e:8e:b2:45:56:
b4:2c:e2:a4:e2:7d:1f:a8:4d:e0:9a:e9:32:65:59:
48:72:46:c5:2c:e6:0a:d5:c0:65:0f:ad:a3:12:48:
ff:33:f8:e5:31:9c:d0:56:cb:ed:fa:23:5d:ae:b6:
94:12:f0:4e:b5:1c:05:74:b2:58:1f:64:80:4e:59:
5f:96:64:37:f8:c5:c1:4a:00:19:15:f0:63:4c:58:
f0:cb:1b:90:06:57:f2:9b:61:fe:00:ab:ae:c7:af:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:A8:8D:AC:54:B9:87:AA:71:8A:20:25:9C:BB:67:D2:7F:2E:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/38da023e-dd53-3899-b3c8-30857b7b3a0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl
X509v3 Authority Key Identifier:
keyid:CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:fc:10:4b:3f:ff:9d:52:d2:f3:ed:f9:49:a0:68:26:95:12:
bd:60:65:7f:75:5e:95:f9:4f:bc:3f:90:ac:97:02:e8:57:99:
f6:5f:02:3e:31:b6:59:be:f0:45:49:48:38:b8:f6:67:c3:f1:
a9:96:d6:44:fd:6a:2b:20:10:79:e3:67:32:3f:e5:93:af:24:
48:6c:a6:a2:b1:78:2a:ca:f7:54:c1:a5:88:23:fd:65:69:a5:
ab:cb:3e:0a:b8:55:51:4a:d4:b8:81:63:ab:e9:26:40:27:93:
fa:ce:38:66:c9:da:02:a6:b3:85:88:5f:ed:43:f5:98:52:53:
22:1b:7d:5d:95:65:68:da:42:be:ed:ce:1f:c1:23:93:d8:d7:
7c:fb:d4:7f:dd:4c:7d:45:28:98:c1:68:c0:e0:f3:c0:99:d1:
3a:2e:41:27:51:f5:ae:16:a6:f9:c1:fe:68:8c:ef:00:f3:67:
11:df:3e:2f:05:99:67:58:fa:93:9d:b7:f4:4a:92:40:61:e0:
fa:91:47:9f:d8:56:74:4c:d5:14:63:a9:b3:7c:d7:5c:82:b6:
33:ad:05:4d:1e:7f:18:e9:17:d9:f4:34:5a:fd:88:36:de:58:
fb:e0:a8:3c:57:c3:65:3a:00:6c:d8:b2:4e:4d:5a:89:9c:7a:
dc:2b:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:46 2025 by rpki-client