Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
File: a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa (raw, json)
Hash identifier: CSLchaU+5XB1V9dV6pmlgyiWyMmEPpAjOz+Q8D6f2yQ=
Subject key identifier: E7:C4:D8:AA:6B:21:DF:71:E0:E2:68:9B:B8:04:FC:76:5F:71:4C:ED
Certificate issuer: /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Certificate serial: 010D0C9F4328584913AC32769717C4A242080B80
Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 14588
IP address blocks: 104.219.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:32:76:97:17:c4:a2:42:08:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=1b96a6ea-255a-422c-b433-42f39a5ef0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:91:98:ee:04:dc:ab:0d:19:d1:b7:98:71:
20:5a:11:3d:c9:59:79:67:b2:ba:91:2f:a7:e7:bc:
5a:41:50:3b:28:c6:54:f3:87:fb:ab:9c:78:b5:ad:
f3:1d:fd:4d:bc:16:10:56:1a:06:d6:fc:01:7a:b5:
7c:90:f0:00:9f:08:a9:c5:37:85:08:88:71:fb:fe:
2c:0b:43:8f:c3:98:f7:11:02:d9:5c:47:7e:7f:8a:
a1:34:e6:db:d0:f6:10:13:00:31:aa:d8:d9:1d:b6:
08:2f:2b:d5:31:07:9e:e2:44:a2:a8:b1:9e:db:f2:
b5:7c:53:6d:ec:32:32:c6:62:b7:99:7c:ec:7e:40:
05:e5:c0:5b:2d:c3:bc:5a:9a:c0:5d:ad:39:7f:4b:
fd:5c:52:98:b3:fa:ef:e0:d6:ef:08:2e:39:0d:a2:
9d:cd:05:b2:fc:c4:22:41:d4:d5:62:d1:14:6a:a0:
81:db:26:c3:c8:cb:3d:b5:46:91:65:98:4a:4a:5b:
0a:51:cb:87:29:74:42:de:ba:8c:45:51:82:a1:19:
f0:2b:fa:6c:89:fc:6a:64:97:74:12:bb:6a:63:1d:
f3:40:bc:a3:08:d1:9b:18:4a:59:fc:ef:5a:29:55:
a8:bf:17:55:0b:fd:17:37:a3:66:62:53:2f:c4:d9:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:D8:AA:6B:21:DF:71:E0:E2:68:9B:B8:04:FC:76:5F:71:4C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl
X509v3 Authority Key Identifier:
keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a7:9e:df:83:e2:13:86:a5:a6:76:cb:65:52:8b:2f:09:de:
10:3a:6b:15:77:9e:85:8e:7a:e4:12:98:4e:5c:fd:5c:bb:8b:
f4:d3:94:67:bb:a2:85:9c:1a:b5:6d:fd:65:88:3f:e0:db:14:
02:85:1e:d2:e0:77:e2:c5:9a:7e:c6:7b:a6:6a:73:fb:c1:7a:
2f:e5:a6:3e:5a:e8:72:24:17:fb:d3:d5:94:e9:02:f2:6f:2a:
99:63:24:67:e2:07:5e:8f:fe:95:d0:ab:34:42:3f:60:1b:62:
9c:52:19:1d:fd:ef:36:07:67:d7:36:91:80:71:07:c0:0a:d1:
91:63:d2:cc:31:0b:d1:85:31:44:b7:4e:0d:b7:8c:fe:1c:e5:
4e:64:f3:53:a0:45:73:50:f3:de:dc:ee:fc:4a:08:a8:38:9a:
a6:2e:82:0b:30:f2:4d:e1:ce:2f:9a:50:fb:86:24:17:0a:ba:
c5:12:f1:aa:31:fc:c3:e9:5e:19:a3:60:f9:26:17:ec:4a:0f:
38:78:c1:18:d7:67:85:1e:56:70:97:42:8b:71:b9:c0:25:6a:
67:d5:19:e1:ae:f6:52:f0:94:50:73:6c:35:fb:94:6d:6d:3d:
0d:11:16:6b:e4:2d:0c:a0:af:4d:df:ca:11:44:40:d6:1a:06:
05:b9:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:43:03 2025 by rpki-client