Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
File: dd1a3125-5c2f-32ec-a661-69fe5e642535.roa (raw, json)
Hash identifier: mNTe8bGfmWi7Jz/apBQV9Yl4EddMR7tMkcVsRVREH98=
Subject key identifier: 7D:49:2C:84:D4:C0:4A:51:CE:06:A3:45:84:98:F4:AD:55:6B:C5:F8
Certificate issuer: /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial: 010D0C9F432858494CC94327895140B807FAD880
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 40772
IP address blocks: 104.36.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:43:27:89:51:40:b8:07:fa:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=0cf30682-1ab8-4105-9455-947226ff662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:da:0c:a8:95:25:42:d0:ef:24:d1:e5:2b:
ba:4a:4a:af:09:22:da:18:a6:91:e1:af:56:99:44:
a6:52:3f:7a:1a:b1:60:d7:1c:ca:94:51:6d:93:67:
8b:29:b2:c0:53:a0:57:a2:87:f7:10:be:3f:72:6d:
77:37:d8:3b:47:24:d5:d0:a4:29:b4:b1:d3:be:a0:
71:a2:cc:23:ba:33:86:6b:79:6f:89:f8:fd:e7:e0:
67:43:33:fd:d1:1a:f1:a5:b9:28:3e:bc:c8:8c:6c:
bf:ef:c5:92:1b:52:98:2d:b0:e6:e2:cf:20:f5:53:
60:45:ef:9e:af:8e:d7:e6:1a:9f:65:47:42:ac:2f:
2b:66:93:58:e1:b3:c1:38:cd:b8:8b:ba:37:9b:09:
9b:51:fd:01:2f:d1:53:18:2f:2e:85:53:ef:93:26:
12:cd:2c:c8:9d:0f:f6:f5:e3:ab:89:c1:77:5e:3c:
db:9f:eb:92:25:6a:cd:ea:80:41:99:a6:52:8a:2c:
e9:3c:7a:d0:ca:ec:a8:82:9f:c0:42:03:2e:4a:b4:
e6:13:1a:7e:0d:19:ce:84:ae:1d:5b:de:37:6c:df:
9f:ac:01:bd:c9:1a:52:88:af:e1:a3:d3:a3:5b:68:
d1:88:89:b8:4d:d1:32:95:24:14:8b:2a:ed:86:29:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:2C:84:D4:C0:4A:51:CE:06:A3:45:84:98:F4:AD:55:6B:C5:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
X509v3 Authority Key Identifier:
keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:d2:8c:9d:2e:45:79:8f:28:ed:1c:ef:89:04:8d:1e:14:8b:
20:40:56:1f:9d:40:4f:a4:e5:2c:46:fd:d8:6b:d4:c5:5f:05:
c8:0d:bc:cd:18:3b:be:da:33:94:5c:12:4e:b6:8d:ba:3e:22:
dc:0e:eb:23:72:58:ee:0b:85:e3:aa:1e:7f:9d:6d:4d:40:78:
b7:d3:f1:c9:52:13:bb:84:95:a5:94:3d:83:79:20:6f:5e:c7:
68:65:be:43:2b:02:65:12:80:cb:0c:ec:9e:d6:a2:48:7c:2d:
ee:1f:a4:82:99:93:a0:ba:0e:e3:95:36:21:f7:3b:38:71:88:
9d:6c:9b:c3:ae:3b:40:bb:10:db:b5:d1:e3:ce:84:ca:93:6e:
43:76:33:28:37:0b:db:8e:55:06:ed:cb:ed:48:65:be:af:b5:
eb:b6:36:bb:0a:81:de:41:d5:c0:e1:af:43:01:e7:78:b5:c1:
6e:6f:f5:d1:c2:f6:a6:eb:c0:e2:27:0b:2b:d0:7a:75:6e:77:
14:2d:90:ec:a8:8f:9e:a8:8a:18:b6:dc:f5:f4:34:a4:f5:86:
f1:9e:82:97:c3:36:34:d9:e2:01:2e:de:c6:2c:32:f6:d2:04:
92:3b:b2:94:30:33:d1:38:0e:ad:64:6a:a5:6e:80:42:f8:41:
8d:3e:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:02 2025 by rpki-client