Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa
File: 7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa (raw, json)
Hash identifier: R0Gf3PYG8/5WgT0D+D3WW8PyWnq0jJ0Yr/Tv+BlIOng=
Subject key identifier: C7:47:0A:2E:63:A5:9B:02:D9:F3:42:8A:49:2D:E4:04:34:01:B8:7F
Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial: 010D0C9F43285849350EA941B291EB1C4EEE3DC0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 211936
IP address blocks: 104.171.160.0/20 maxlen: 24
162.250.96.0/21 maxlen: 24
162.254.0.0/21 maxlen: 24
202.165.72.0/21 maxlen: 24
202.182.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a9:41:b2:91:eb:1c:4e:ee:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=bd548a59-bc85-4372-8f0f-ef4d9907be0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:47:92:d3:05:08:a3:d0:04:5f:c1:03:bf:
2a:30:fe:67:b6:97:e5:45:08:0f:8f:86:ce:0f:c2:
ce:f6:9a:5d:df:bc:be:a7:ad:47:a3:0f:63:20:27:
7f:6b:b8:ec:fe:04:d9:40:3b:7d:83:39:79:83:2e:
58:77:32:cb:4e:07:a7:0b:bd:dc:db:a8:9d:43:a4:
23:33:ec:37:67:c8:5a:aa:5d:d9:71:61:52:46:d4:
c9:18:a6:14:84:e7:2b:29:90:0f:fe:bd:ed:84:fc:
48:6a:11:37:3d:02:6d:5d:68:01:b4:ab:6d:05:d6:
60:4e:62:ae:82:93:f0:a9:65:2b:b3:df:f4:df:69:
02:e7:75:24:b5:43:25:69:9d:07:8a:51:4a:7d:a5:
70:e3:3d:2c:3a:19:df:49:bc:34:c8:f5:89:bc:eb:
3b:05:28:1b:5a:de:22:91:10:f4:d2:cb:bf:79:60:
d7:7e:7a:d3:31:ce:cb:1d:e6:cb:a3:9c:f0:e1:6b:
76:28:6c:d0:81:bb:09:b3:da:a4:02:f7:f1:4a:c4:
ce:2d:70:13:76:ad:22:08:ea:f5:98:3d:7a:17:14:
44:ab:cb:a5:dc:4e:01:c4:9f:70:ca:8b:59:bf:2c:
94:b3:e5:1c:0a:72:cb:af:b6:3f:e6:90:2e:99:7f:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:47:0A:2E:63:A5:9B:02:D9:F3:42:8A:49:2D:E4:04:34:01:B8:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/7d4abf73-9c6b-37dc-8a9d-d24d3a44976f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
X509v3 Authority Key Identifier:
keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.160.0/20
162.250.96.0/21
162.254.0.0/21
202.165.72.0/21
202.182.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:1b:56:74:9b:62:df:41:0e:ff:aa:a8:bf:65:24:42:27:c0:
70:61:8c:6f:cd:b6:f2:0e:67:67:2f:c6:f6:63:ec:61:72:c1:
82:34:32:c2:d3:ac:f5:d2:8c:d5:4b:a7:5e:89:52:37:aa:da:
a9:4b:a8:14:7b:30:e1:3b:22:59:c5:df:5b:d4:bb:db:1e:e2:
78:d9:cf:08:44:94:30:de:8d:7d:67:ce:48:a8:74:b1:16:df:
fd:da:82:44:06:73:22:4f:4f:4e:9b:fe:56:03:e1:a9:4c:a0:
56:05:47:d1:58:a3:30:85:70:0b:f9:ea:1f:fb:9d:cd:0f:55:
14:72:f1:ac:9b:b8:79:b2:30:9c:c0:82:bb:aa:25:ab:89:d8:
37:ce:24:83:ff:be:52:35:44:30:69:1c:e2:eb:30:45:ed:fe:
c1:de:7b:77:b3:ad:24:41:1a:b1:d6:35:61:e6:9f:ce:e7:ce:
d1:c9:64:73:5b:62:f5:5c:ba:4c:38:d6:61:ac:07:c1:47:5b:
40:26:fd:23:1b:3e:22:21:53:24:89:04:db:36:62:96:74:b0:
e8:8f:b3:3e:1a:09:ae:21:f6:f1:ee:9e:cd:e0:3d:69:83:2c:
f1:01:90:da:81:27:1d:42:7c:a5:4f:60:b7:fd:6f:8a:31:28:
51:b7:d2:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:33 2025 by rpki-client