Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/1434ec52-7a37-3fb5-8469-6fd7073aa523.roa
File: 1434ec52-7a37-3fb5-8469-6fd7073aa523.roa (raw, json)
Hash identifier: ffud+HqPjaxHJEQO5+qX1qsrbm7sgrlos0xi5RERvHA=
Subject key identifier: 5E:35:2C:54:4C:1D:7E:4B:56:44:FC:CA:03:29:DF:04:6D:06:2C:5C
Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial: 010D0C9F43285848C84B9C7016C599CF618F7BAE
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/1434ec52-7a37-3fb5-8469-6fd7073aa523.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 54874
IP address blocks: 104.167.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9c:70:16:c5:99:cf:61:8f:7b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=a52cfcc7-5fea-48cc-9087-195768817c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:40:3f:f7:b9:f2:ad:22:33:79:e5:ca:24:
94:3c:f1:29:c7:76:c3:c2:5c:1f:27:c7:c0:d2:68:
f5:6b:04:51:18:ae:0d:7a:1f:ef:4a:a1:1f:35:84:
bc:a8:8a:b3:05:c2:8b:2b:4d:f4:14:ed:c7:43:e3:
22:24:f5:5a:fd:f3:6a:63:1b:a0:de:bf:34:e8:08:
d3:21:bb:80:27:26:73:b4:da:0d:d0:b5:e4:94:27:
8b:98:6c:dc:52:80:a6:c3:8a:e6:44:a5:52:58:f4:
73:75:a2:10:95:45:93:65:d0:49:8f:89:b5:f4:36:
e0:7d:e7:ea:c9:a4:66:02:c3:1a:80:fe:31:af:52:
cb:83:61:6e:2a:59:9b:03:12:f2:90:41:c0:a6:89:
13:05:89:29:a1:9e:da:fb:34:89:70:55:01:00:35:
e1:ff:7d:11:62:bd:9a:a3:25:ae:ec:25:01:59:dd:
d3:af:44:b7:6c:bd:79:56:c1:77:b4:f0:aa:f5:5a:
67:06:04:50:f8:e0:fc:58:34:a5:b9:fd:7f:94:6a:
65:0b:b2:d2:f0:da:a6:95:a5:e6:9e:86:75:67:fa:
33:90:20:87:35:f3:d0:0d:4e:9f:ac:84:75:cf:64:
ae:71:21:d9:4f:af:e2:ac:dc:e3:7e:90:20:c1:6e:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:2C:54:4C:1D:7E:4B:56:44:FC:CA:03:29:DF:04:6D:06:2C:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/1434ec52-7a37-3fb5-8469-6fd7073aa523.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
X509v3 Authority Key Identifier:
keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:f6:34:35:31:da:d2:07:fc:d1:84:52:bb:72:e1:d7:ca:a1:
26:20:86:fe:0c:9f:83:e9:77:2c:3a:2d:8b:29:2b:d8:b7:e3:
65:6a:51:5c:cc:b6:33:d5:d7:6b:a5:94:ea:2c:0c:6b:1d:52:
04:c1:2e:fb:2f:41:14:a3:11:24:c4:03:4d:21:50:79:37:c5:
3c:8e:51:8a:f8:b3:6d:69:fc:d0:e6:cb:86:ad:ce:ab:90:9b:
fc:47:91:90:b7:57:ce:a9:49:7c:38:e1:40:46:75:e2:bf:cd:
09:15:8d:0a:d8:aa:1c:56:98:c9:75:c2:1a:fa:33:ac:0a:00:
e5:5d:77:af:8f:96:ad:5b:73:b7:06:07:b6:fd:c6:49:ac:4c:
ad:e3:34:e1:44:d9:dd:20:29:a2:97:b6:85:ca:d6:20:4e:c2:
67:20:12:1d:a9:82:c0:ef:2e:17:fc:ed:7e:bb:24:5b:c8:d8:
28:29:db:3f:3e:3f:2e:97:76:c6:cf:fd:89:2a:05:ce:63:a6:
15:c6:84:54:dc:23:0f:88:46:fa:c1:da:21:8a:6d:de:74:48:
ed:bb:e5:9c:06:ae:cd:d3:fb:8f:f5:4b:5f:1c:e1:b6:db:f1:
16:72:05:fd:40:5e:0f:d4:8b:fe:73:7f:c8:5c:ae:fe:1d:ef:
f0:c0:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:39 2025 by rpki-client