Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa
File: f68f6e01-5422-3936-ab82-458179ed5da6.roa (raw, json)
Hash identifier: mzClnY2RR4tuTYcJesJiPL3FtZqSMS7sP4cIvRIuupA=
Subject key identifier: AA:00:31:D7:B5:EA:3A:F4:49:BB:36:71:35:45:51:6D:19:1F:E5:08
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C2B63B1E942BBE2ECB403680
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 399114
IP address blocks: 104.249.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:3b:1e:94:2b:be:2e:cb:40:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=fb4a8c72-f08e-46ee-98a3-89fe7f4d516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:f2:05:02:4c:a7:66:aa:d3:c8:4d:47:bc:
f0:a8:e0:2b:7f:55:68:87:69:c6:d1:6c:f2:e3:a1:
e6:4b:0d:4a:30:78:a0:8d:4e:de:84:3f:c6:6e:04:
a1:9c:a3:54:55:b3:c9:83:2e:e7:79:e2:3d:58:3a:
44:05:2f:e7:75:06:3f:bd:f4:ad:c1:34:ec:11:15:
14:e3:03:ae:c7:ed:7d:4b:b1:f7:0a:7f:19:55:42:
5e:75:3b:09:3f:5c:fc:77:29:bd:a8:fa:b7:cc:d2:
b9:dd:63:53:07:7b:e0:07:57:1f:ad:08:f2:da:76:
40:4e:2a:7f:11:ed:7f:09:19:d3:f6:0d:42:8e:8c:
82:cf:51:5a:c8:f3:73:9f:ab:87:7d:3a:6b:ff:bc:
bc:22:f9:83:88:a4:d4:88:0c:f1:57:1e:b9:19:ad:
49:36:b4:e0:eb:95:5f:ce:22:3b:9e:e0:b9:37:4e:
c1:a2:44:90:c3:dd:92:50:d8:b6:66:8b:0a:1a:19:
f9:f2:dd:7f:84:f3:2a:75:9c:14:39:8d:9b:4c:4a:
b2:51:a0:86:ca:d1:a1:c7:55:7b:d1:68:f8:27:bc:
91:a5:a0:f8:ec:ec:85:69:be:98:6a:d9:c7:22:b1:
ff:e9:63:2a:aa:3f:c9:c3:11:e4:a8:d7:fb:63:05:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:31:D7:B5:EA:3A:F4:49:BB:36:71:35:45:51:6D:19:1F:E5:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e9:f9:a8:ff:c5:d5:ea:a8:4c:6e:98:59:82:b5:93:3f:17:
1f:22:54:f5:0f:46:6a:81:6b:3f:46:6c:5d:93:99:f2:5e:da:
d4:4f:a4:77:5f:40:87:54:9e:90:77:10:fc:28:e9:a8:bf:87:
17:79:b4:30:d3:fe:65:40:9e:65:fe:fa:62:e3:8d:5b:f1:31:
5a:85:9b:03:50:20:41:ca:ff:1f:74:34:61:bd:25:57:cc:f2:
e9:3b:b3:a3:6d:82:5b:74:72:b0:0c:e0:3b:1b:91:5e:2e:1f:
45:4c:a7:e4:80:19:b6:51:cb:3f:d3:04:1b:7c:74:6a:d0:f8:
77:a1:df:55:4d:b8:80:67:3a:2a:fa:bf:c8:b7:88:d3:2d:4d:
0d:41:04:74:1e:bb:fa:11:c1:13:ba:c2:fb:f3:63:28:c7:27:
4c:90:f0:c9:3b:49:f6:f0:1c:be:e2:fd:92:72:53:29:38:33:
4d:85:07:cc:c8:6a:e8:30:f4:d8:73:78:b9:44:a3:eb:df:41:
ce:5f:0c:2b:f1:ad:04:ba:7c:d9:6d:21:d7:31:58:3b:c2:a2:
09:fe:cf:cc:f7:b5:b5:b2:f2:ec:91:3e:93:f7:1c:cb:81:fa:
34:7f:6d:b8:0c:ba:7b:b9:41:cc:e1:9b:d6:e3:46:02:a4:70:
b7:2b:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:29 2025 by rpki-client