Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/1d265e89-2a74-3e00-acd9-22236c169e9c.roa
File: 1d265e89-2a74-3e00-acd9-22236c169e9c.roa (raw, json)
Hash identifier: q3cYBfw0Wfvje9MmNJa3GHleokUO6mBzC7a4pw5JNRA=
Subject key identifier: 3A:F8:FA:E4:04:1F:BB:BD:A8:D8:C3:A0:D4:0E:6D:18:F1:DD:0B:A7
Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial: 010D0C9F432858491D715D2ADFBA48BDCA22DA10
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/1d265e89-2a74-3e00-acd9-22236c169e9c.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 6461
IP address blocks: 104.250.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:5d:2a:df:ba:48:bd:ca:22:da:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=74630974-945f-49f4-a736-eaef9db5eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:49:d8:25:2f:8b:36:06:9c:af:16:7d:c8:
6c:1b:ce:ca:2b:3c:94:8c:fc:d0:86:af:b3:ae:96:
ce:fd:6e:a2:23:97:16:ad:ec:39:b3:08:1e:82:90:
31:b2:ab:ff:72:6e:f3:89:4f:96:23:8e:2e:89:32:
85:98:5b:92:14:a1:4e:79:3b:24:cc:8e:35:14:12:
39:25:06:eb:2d:4a:81:04:9a:13:8d:69:5f:85:da:
8b:40:c9:0e:0f:6d:a2:49:a9:a2:18:35:13:fe:ed:
18:6b:23:0d:06:c8:97:b3:42:7d:c5:eb:76:26:ad:
58:6d:83:b4:78:f6:ba:07:31:53:9d:3b:d7:24:63:
89:7e:f8:0d:59:51:12:8d:2f:f7:d4:76:83:28:17:
f3:ee:14:9c:1c:d2:7e:bf:44:e7:c4:91:4c:56:73:
01:ba:22:1e:4d:f8:7a:00:d8:8e:d8:00:b0:5d:68:
e7:ba:da:5a:43:4b:2e:61:d8:9d:d8:8b:71:4a:f6:
5e:28:02:64:db:0a:ae:10:59:23:72:c6:e2:af:20:
09:0a:b5:6c:52:32:0d:6d:f1:f2:e9:ce:1b:cf:b5:
65:9f:63:4c:bd:9e:98:73:fb:ff:84:40:ab:60:d2:
86:29:a3:11:29:0d:1a:6f:1e:52:b0:ea:65:5b:e5:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:FA:E4:04:1F:BB:BD:A8:D8:C3:A0:D4:0E:6D:18:F1:DD:0B:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/1d265e89-2a74-3e00-acd9-22236c169e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
X509v3 Authority Key Identifier:
keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f3:40:7f:e0:95:a5:33:c7:91:21:6d:55:f4:08:a0:3f:2e:
a2:e6:74:08:ed:30:5e:ce:b9:cb:ca:06:51:52:c6:25:6a:eb:
41:9f:56:e0:4d:a7:39:7e:26:b6:b9:99:0b:57:97:e3:d3:31:
b6:f8:5b:1b:c2:78:58:d0:04:33:39:18:2c:92:19:92:e2:d6:
65:19:cf:6b:02:a4:f1:44:39:c5:cc:0c:55:39:b2:a5:1c:40:
12:0d:30:23:28:5c:8f:b5:94:2a:31:8e:18:0b:0e:6b:ef:4f:
8a:b0:95:bd:92:b0:c5:29:da:53:90:3c:92:4b:98:a7:f4:d0:
a9:09:bf:f3:bd:cf:f0:db:c8:fd:9e:56:d2:0e:1e:c2:ee:12:
61:37:1b:19:fe:c9:0f:62:c3:56:01:08:40:7f:94:e5:98:84:
22:34:c9:89:58:9a:3c:d2:f7:aa:8e:a0:0d:e6:ac:79:92:ff:
e5:f0:8b:d8:e1:bf:58:d3:87:78:0a:1a:a5:b7:f6:05:b2:fe:
55:f4:d6:5f:85:a8:ff:a6:90:01:78:cd:f0:f0:fa:fa:91:34:
53:1d:19:95:bf:53:95:06:ca:b4:fe:59:1e:b9:1d:f2:93:73:
fc:c8:bb:b6:9b:ea:44:b2:18:8c:ba:19:65:0c:32:1f:03:60:
96:4e:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:16 2025 by rpki-client