Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa
File: 7d236149-de2f-3afa-a239-d8caf0a03337.roa (raw, json)
Hash identifier: Dq0m89yPjvbOkd3PxgejSzYrzjDPR9EydV3oCEmkf+Y=
Subject key identifier: 43:BA:B7:FE:95:83:05:79:BF:84:98:2D:84:CA:7F:1C:00:2A:CD:C7
Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
Certificate serial: 010D0C9F4328584917DC3480BD3E6C90667A2F80
Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 16801
IP address blocks: 104.255.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:34:80:bd:3e:6c:90:66:7a:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=37d70c10-9e89-4045-aa51-de717f00e901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:9b:b0:cf:7a:3f:29:38:af:cb:b2:16:0f:
ba:d1:b3:2f:0d:b4:f8:47:fb:f9:73:20:fb:b1:f9:
52:2b:40:bc:de:f5:26:8d:cd:29:67:10:be:9f:7a:
a8:f0:a8:86:ea:11:f5:5b:bf:67:82:81:de:e2:32:
31:3c:14:6c:25:06:52:ba:8f:94:75:c7:ba:ac:dd:
a7:12:ca:1c:53:ed:9a:5b:a1:98:0d:8c:7c:ed:b8:
84:6f:18:a7:86:dd:22:e6:cf:c0:fd:d1:5c:99:5d:
f5:fd:6b:2c:e9:72:7f:53:dc:2d:64:78:2c:b2:d7:
00:36:26:67:b7:7e:7a:d6:f9:31:6f:54:57:b6:11:
31:e7:9f:cb:90:b4:60:7d:24:a2:3c:f8:93:59:95:
e1:0a:0f:83:14:3b:5d:ba:c0:8e:ab:7b:1b:71:1e:
77:e9:41:02:74:0e:33:7e:ca:72:23:a5:3c:e8:45:
52:91:b6:14:33:b1:68:61:75:86:b9:e2:ae:97:77:
32:76:c9:4d:37:9f:29:6a:3f:0e:1e:1e:d2:a9:c4:
7e:18:59:19:3a:d4:4e:45:61:ae:7e:49:f6:00:e4:
67:c9:4c:b3:35:83:a6:63:3b:46:39:3e:c7:9e:7a:
11:35:72:54:ff:98:0b:17:33:74:b3:d4:87:b0:ef:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:B7:FE:95:83:05:79:BF:84:98:2D:84:CA:7F:1C:00:2A:CD:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl
X509v3 Authority Key Identifier:
keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:53:95:1c:1a:3f:d4:ad:c4:a4:43:41:2c:1f:9d:a5:3f:5e:
66:62:8f:35:a0:ea:92:71:b9:40:be:07:b4:a3:85:55:d9:ca:
51:b8:64:a3:08:66:9e:a4:67:2a:1f:c0:e5:a6:74:33:5b:e2:
46:e7:7c:a8:31:65:90:f4:e4:07:b9:54:fd:e5:7a:a9:64:8e:
05:70:99:4c:80:10:07:4e:7b:49:a8:ff:b8:17:01:5f:e3:f8:
5d:87:20:b1:c5:66:95:5f:11:eb:8c:01:c5:7f:e5:cd:35:c9:
f9:0d:a5:a9:2f:24:2c:07:4c:cb:8b:1a:fb:a6:74:74:59:24:
54:9a:d3:ed:73:9b:4b:2b:b4:b3:a3:c4:91:30:e0:aa:67:12:
8b:29:f7:4c:4f:4c:56:4a:19:a4:13:eb:aa:5e:ac:96:06:08:
ca:3d:f5:7e:74:f5:e6:1a:a6:81:48:59:b8:f1:3f:b3:0a:b4:
7d:80:dd:0d:6a:5f:c6:84:28:dc:a2:b1:18:e2:34:60:f5:19:
a0:0d:8d:af:8c:16:4c:6b:c7:25:ff:33:d9:37:77:8b:97:61:
36:68:c7:9a:52:fb:b9:69:00:a5:22:df:b8:d0:26:da:5a:30:
bd:c6:44:aa:8b:4e:9e:bf:78:4e:48:b4:73:a8:89:01:b2:ef:
93:54:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:21 2025 by rpki-client