Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
File: 6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa (raw, json)
Hash identifier: flpQSSlCgLkWchAEmMMS+OCJcFLy7tHe1BzcUFl2jeY=
Subject key identifier: 1C:16:7E:73:44:68:40:AC:E9:DF:B6:5D:02:AD:70:9C:94:CE:3B:5C
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328584940394A49A3126F1100A70F00
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 1239
IP address blocks: 104.167.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4a:49:a3:12:6f:11:00:a7:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=f257cc80-5133-45ce-85cf-3d11ea988cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:3c:99:d5:7a:8c:17:ca:98:24:51:32:90:
c6:8f:db:e5:69:64:d0:fb:7a:a7:ed:ee:a6:c8:35:
bf:bd:0b:5f:f8:5f:10:31:e6:b1:19:4f:0d:de:9f:
9d:f5:ca:64:47:f0:ca:3a:3e:66:c6:ee:97:e7:e4:
39:a2:21:d7:de:4c:30:64:0b:71:67:42:94:9d:cd:
7d:0d:bf:69:c9:4d:ac:4b:33:a3:0d:1f:29:ed:ef:
2d:4d:50:84:03:14:d9:d4:03:76:8d:28:c9:84:0a:
fb:7d:6e:30:30:81:df:e5:94:39:88:0f:78:7c:ee:
9a:20:ab:d3:ab:32:a5:48:84:05:97:c7:e1:9e:91:
f2:77:50:4a:db:49:ed:23:cf:a9:46:96:e9:6e:49:
e3:ac:c1:e0:93:15:d9:16:8f:d5:4e:bb:76:b6:63:
49:14:de:02:81:ed:15:6e:02:eb:1f:eb:8d:78:5d:
28:d4:5a:85:d2:0a:b5:72:ff:1a:22:96:36:e1:c9:
2f:4d:75:05:67:26:8e:ab:31:75:df:f1:3c:d3:e6:
3f:f6:43:33:26:35:a3:03:93:45:f9:f0:78:fc:41:
13:07:6b:d3:2f:b6:74:ac:56:14:c3:25:16:12:b3:
05:61:46:18:0e:7d:88:75:e2:f0:15:59:22:dd:16:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:7E:73:44:68:40:AC:E9:DF:B6:5D:02:AD:70:9C:94:CE:3B:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6d:b7:ab:57:0c:80:5b:e5:ac:85:e2:0a:a9:28:8e:ee:fa:
98:a0:53:d6:0d:7d:81:57:5e:77:93:c7:67:85:7c:9a:6d:4f:
30:f6:53:6b:33:ce:7d:3b:9d:e0:3f:64:1d:34:29:30:c0:2a:
a1:04:32:63:fc:8a:dd:22:e9:33:55:b0:9c:2a:92:92:c9:37:
d6:e8:be:24:0f:e0:cc:52:2c:68:45:86:98:21:7a:9b:60:ca:
1c:27:5c:8d:f9:7d:81:05:25:56:18:b6:20:37:f7:1b:77:53:
4e:ea:2b:76:27:33:ac:14:06:19:26:fa:a3:78:40:63:b4:97:
54:ec:87:f5:2a:ad:7f:b0:36:11:b0:dd:85:ec:11:7f:74:fa:
13:5c:86:18:cb:55:04:1f:22:6d:c7:1c:ee:bb:5d:f8:34:3e:
d7:f6:da:3a:66:55:5c:99:2c:ee:03:06:a9:b7:fc:e4:f7:8b:
cb:38:83:3f:7d:8d:1b:bc:aa:ff:c7:b6:b7:77:57:fd:3c:e5:
ce:d2:d6:59:8f:b5:c3:88:04:95:63:99:23:06:b7:64:02:63:
31:27:e2:bf:7c:93:4e:9c:f5:32:0c:bd:eb:b2:ce:a4:90:d2:
fd:7d:f0:7c:df:75:c0:9e:91:c6:4a:e5:e3:85:60:64:25:02:
e3:11:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:25 2025 by rpki-client