Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa
File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json)
Hash identifier: LkZpQOq61SETqVCSE4cH2paU4W/uGmSxDgk0yFeAhj0=
Subject key identifier: D1:9E:CA:4C:80:73:1B:8B:6A:A0:8C:34:BE:D8:86:BF:0A:95:B3:17
Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial: 010D0C9F432858491D7183327E3ADBF41C7F4C80
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 62533
IP address blocks: 104.219.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:83:32:7e:3a:db:f4:1c:7f:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=7782d8a5-d867-423c-b725-d499170da9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:43:30:28:46:ca:b2:53:a7:e6:eb:85:61:
a7:3f:c3:c6:47:04:6c:ed:f2:ed:8e:6d:3d:ee:af:
76:64:8f:a2:da:e0:36:af:84:53:e1:1c:0a:e1:ec:
70:6e:5e:7e:8d:85:fd:62:51:22:86:e5:71:c8:33:
2c:0f:1b:68:53:28:d1:68:5e:f1:fd:82:86:36:40:
21:7e:eb:6e:c9:4d:fa:3e:e9:a3:b6:56:4d:8a:a0:
71:74:89:29:78:31:9e:9c:4d:f9:ce:c8:a3:7d:7f:
c9:9b:02:5e:77:27:06:64:e7:bd:27:52:0d:91:24:
6f:65:4c:62:9c:34:f1:d7:f9:aa:68:f5:75:cd:36:
9d:23:dd:9c:5d:23:d6:1a:c1:d2:2c:95:3e:0a:30:
1e:3f:2a:0d:12:ff:cc:dc:8a:04:76:74:5d:c0:e0:
9e:84:ab:c5:e5:3a:69:8e:27:56:7f:07:eb:3c:6d:
9e:ee:1d:de:5d:e6:57:ba:99:6e:fc:a3:a7:49:55:
c0:54:12:25:91:b4:51:80:d7:eb:ac:74:ba:ff:fa:
f1:ed:4b:a7:9a:50:65:90:4d:4c:10:84:4d:3f:54:
e7:c2:11:33:0b:f5:4a:ca:77:d8:77:b5:e9:27:46:
0a:ed:ea:8e:34:78:2f:49:c2:dc:40:02:2c:20:b4:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:CA:4C:80:73:1B:8B:6A:A0:8C:34:BE:D8:86:BF:0A:95:B3:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl
X509v3 Authority Key Identifier:
keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:c5:59:ac:bb:cb:84:fc:06:e4:aa:b9:37:5e:98:4b:d8:f0:
7b:85:f8:1f:85:7f:0f:bf:9c:5a:da:ae:70:d0:66:7c:9c:47:
96:9e:f5:d7:62:e5:78:d9:73:75:9a:e1:31:5a:c2:9a:82:41:
08:97:78:d4:c8:d3:00:41:85:dd:a6:70:57:86:49:90:d3:19:
a6:f8:62:10:78:09:5f:9b:c3:5e:7f:11:ae:ee:cd:24:81:07:
17:d9:fc:ad:8d:d5:8c:cf:21:fd:5f:fe:50:53:cc:5e:98:96:
d4:64:4f:73:14:62:ce:d7:c2:6b:0a:67:54:ec:c3:66:5e:8d:
5d:61:7d:ef:85:fb:f3:f5:af:ca:b3:c5:b0:35:7f:7b:f5:d3:
eb:47:d2:70:c0:89:60:52:53:81:0f:89:36:62:bf:44:f2:0a:
d8:c9:87:97:f0:ec:a7:ff:22:37:2e:32:cb:b9:6f:32:9e:39:
7e:72:ee:2b:17:07:a7:3a:3d:73:2c:84:3b:88:19:4a:7d:a9:
cc:e2:f0:d4:78:b1:8c:00:6c:b2:1e:41:be:b2:e5:b0:8e:b5:
d4:2c:fc:61:ad:c3:e6:b8:54:c1:f4:f2:34:7c:2f:84:68:7b:
8e:6d:5e:ba:fc:ae:e1:81:1d:55:28:dd:8d:fc:d2:6e:f1:fb:
00:30:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:26:13 2025 by rpki-client