Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa
File: 6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa (raw, json)
Hash identifier: cLVCzxoPbB/wW6AwV69FDlIU2XDd9jj3JVGfAQ7pY1E=
Subject key identifier: 83:DE:70:B1:25:76:25:DC:05:21:17:32:AE:A0:AF:ED:8B:08:EA:11
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858495383FAC95B2B9CE8A818EA00
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa
Signing time: Thu 27 Mar 2025 10:51:50 +0000
ROA not before: Thu 27 Mar 2025 10:51:50 +0000
ROA not after: Wed 25 Jun 2025 10:51:50 +0000
asID: 401585
IP address blocks: 104.251.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:83:fa:c9:5b:2b:9c:e8:a8:18:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Mar 27 10:51:50 2025 GMT
Not After : Jun 25 10:51:50 2025 GMT
Subject: CN=a312c42a-ce9b-491a-a1d5-1b64c34516dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:ba:a0:1b:fe:8d:43:b4:12:59:41:f8:34:
3d:eb:fa:2e:34:72:d1:3d:1b:a6:44:4d:b4:90:5d:
27:1a:e6:77:04:c5:05:5e:f3:67:9c:3b:f5:97:66:
5f:03:dd:46:f7:a5:22:19:c9:99:ac:76:77:d2:2c:
5a:6d:02:0e:7a:c7:39:df:1d:0c:77:d4:15:66:22:
9f:19:b1:ce:48:cb:4b:06:18:9b:2b:14:aa:e3:ff:
9a:de:0e:8b:0a:b1:00:ff:c6:b1:52:93:74:73:2e:
e8:3e:af:42:f8:32:b7:98:64:37:e8:3a:d9:8c:37:
24:66:b6:32:a7:65:ae:f9:9b:dc:b8:97:35:f3:d9:
92:49:c6:7d:ad:8a:c3:77:12:84:88:3d:11:6b:50:
ca:b8:4c:ed:b0:9f:81:46:62:8c:6c:ba:58:b1:87:
4a:19:ca:95:c8:3d:0b:32:ca:8b:94:0d:da:8c:12:
e4:a3:26:1b:b0:39:2e:f8:c3:40:35:17:2c:19:11:
c2:cc:9a:2a:e1:b7:6c:77:47:36:b3:6a:d5:6d:8e:
86:ba:45:22:ae:d4:12:99:c8:ea:9a:da:19:d4:4a:
f6:fc:5e:b8:b2:4e:a5:d2:4f:51:39:8e:97:71:c3:
53:f6:43:67:42:83:ce:4f:b6:a2:e9:49:e5:32:34:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:70:B1:25:76:25:DC:05:21:17:32:AE:A0:AF:ED:8B:08:EA:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6f2155f8-a34a-3bac-abdc-a78c5b62cbc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:95:d2:aa:29:e1:a6:1c:e4:35:c2:ae:a6:5b:73:53:11:1b:
cf:0a:37:be:9c:43:13:e6:6f:bc:38:d4:d0:47:af:73:cf:7e:
21:9e:55:d2:11:06:f7:24:d4:b4:eb:bb:67:ad:09:e4:ff:0a:
a3:75:69:77:35:29:29:4b:10:ff:60:34:5a:44:a2:ea:ab:42:
6e:d3:82:96:1d:89:c1:56:c7:07:b6:f0:56:65:7a:f2:39:36:
7c:4a:56:ce:07:63:57:e7:d7:3f:90:ad:0b:08:a6:9a:25:7b:
04:cf:04:f1:d8:2e:26:16:3a:04:5c:b5:0f:89:0f:7d:d8:dd:
fc:14:63:a7:11:b7:b8:cc:95:86:11:c2:f3:ca:24:33:6e:b2:
f9:96:2c:43:ab:6d:9a:86:f4:d7:71:ae:21:94:ac:16:52:06:
9d:b3:7c:de:7a:d2:7e:c0:f3:1a:5e:e6:d5:ff:da:ac:9c:79:
d8:00:cb:e0:22:75:eb:b4:31:5b:17:ca:d7:df:b2:e5:17:cb:
96:ad:93:06:eb:ae:62:25:b0:4d:25:3a:e8:10:91:6a:6b:32:
47:7c:ab:02:bc:64:b0:97:7b:4d:33:e7:26:dd:cb:94:46:77:
c6:ea:f1:fb:98:14:f0:51:57:63:c9:cc:95:0d:b4:b6:d3:29:
01:12:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:09 2025 by rpki-client