Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/23854287-020e-3818-893f-e27b9fcc89b2.roa
File: 23854287-020e-3818-893f-e27b9fcc89b2.roa (raw, json)
Hash identifier: EBhYoo+SqCS6ReSKm/3GBJ38i6yLycP8CwKPQ7HqlRw=
Subject key identifier: 6C:2C:EB:00:8E:90:11:A1:3E:6A:FD:2F:03:2A:37:74:30:D2:3B:22
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858491941858B0CC513A7314C7EA0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/23854287-020e-3818-893f-e27b9fcc89b2.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 40676
IP address blocks: 104.219.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:85:8b:0c:c5:13:a7:31:4c:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=dca36509-2267-493f-9ab9-a4d1e5edd1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:bd:4c:b1:06:18:1d:b5:00:4e:0f:57:41:
c7:a1:c7:4c:a7:5d:46:9d:d4:f7:7c:77:aa:9b:13:
6f:32:56:ca:b0:dc:49:c3:50:77:5c:8d:5f:82:d1:
25:c4:2a:25:54:9b:06:48:5b:94:52:92:4b:73:40:
70:a5:41:ce:a6:f7:3f:02:e5:04:25:01:c5:cf:57:
a9:bb:26:de:87:59:13:5c:dd:a2:e8:93:d9:4d:70:
92:62:6e:97:22:44:35:cd:62:ae:9d:c7:55:31:94:
4b:bb:76:33:ac:a6:f3:99:03:2d:3c:f9:6d:26:e8:
c7:8a:9a:7c:79:24:4d:30:a7:83:d8:7a:67:54:96:
4d:bf:56:25:e5:9b:87:48:00:74:5e:b1:53:6c:f6:
9f:d5:3e:b8:8f:b2:2e:93:ef:39:62:99:eb:f8:20:
8f:3c:a5:5b:9f:6b:a7:d5:61:50:a6:50:04:37:7b:
ec:91:9b:32:fc:d8:e9:ef:f8:08:88:65:f3:de:ef:
0a:d0:94:19:22:76:1c:e1:58:c7:0d:ba:95:4a:12:
6c:11:10:32:41:eb:6b:b1:2b:0d:7e:14:cc:0a:35:
d7:80:c2:e8:31:11:7e:28:2b:b5:26:b9:3a:fc:5f:
8f:c6:6d:5c:6c:64:02:b1:3e:12:97:ff:19:09:6a:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:EB:00:8E:90:11:A1:3E:6A:FD:2F:03:2A:37:74:30:D2:3B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/23854287-020e-3818-893f-e27b9fcc89b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:92:58:c6:06:36:84:b4:a4:95:ff:ac:c7:9f:58:7f:7c:85:
8d:25:6f:95:81:76:bf:db:6f:9c:be:c2:2d:f6:a3:8a:7a:ee:
89:9d:01:e4:99:3c:ec:b0:18:49:49:1f:e7:cf:83:9e:e6:73:
ff:c0:7c:8b:65:e5:d5:a4:fd:68:c5:ba:86:22:02:c3:22:fc:
5f:85:ef:28:77:7e:a9:8f:af:b4:e4:53:54:83:ec:8a:90:8a:
07:21:58:99:0f:95:bc:22:92:1a:10:44:ff:16:78:2e:d9:a1:
55:a8:be:8b:93:56:2a:a0:af:fc:ff:0f:cd:a0:89:d2:f3:da:
b7:f4:86:4f:c1:e6:a3:12:19:97:f4:34:4d:c7:6a:d7:c7:06:
f9:a3:fb:ab:15:6d:6a:a5:32:77:03:b8:63:14:32:a6:c0:55:
34:91:ab:0d:0d:a2:c5:aa:30:b1:6e:05:4d:a5:b7:a4:dd:c9:
b0:a0:c2:34:e0:31:8d:c8:b0:21:cc:ed:f2:a5:4c:ac:36:a6:
c5:d2:37:fd:00:8f:51:0e:c7:33:0a:f6:88:85:fe:cb:5b:88:
00:9f:8a:6d:03:e7:91:55:57:3a:76:53:86:b9:fb:df:69:ff:
a1:04:7b:44:3c:88:90:eb:b7:db:3c:c8:0c:6f:9d:c8:f5:44:
e9:fa:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:41 2025 by rpki-client