Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/712feeee-d132-31f8-b85a-65cacc4cd0eb.roa
File: 712feeee-d132-31f8-b85a-65cacc4cd0eb.roa (raw, json)
Hash identifier: hM7Hh8+GMm6xhHh7+qHVXZgnAdz+P3p9n9/uU3hFDH0=
Subject key identifier: 27:77:03:96:33:B9:A7:07:BF:44:80:F9:BE:D5:BA:98:B3:FA:DC:3B
Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8
Certificate serial: 010D0C9F432858489075F39240A0DA8E852A5140
Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/712feeee-d132-31f8-b85a-65cacc4cd0eb.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 46892
IP address blocks: 104.207.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f3:92:40:a0:da:8e:85:2a:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=7ad30f1a-83f6-49d9-a430-3767ead6094e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:af:94:de:ff:df:cc:e1:5f:0b:54:50:41:
d5:e5:92:22:a2:ad:88:af:54:c7:9b:29:16:9d:fc:
f6:7a:32:ce:8d:49:c3:1a:7c:3c:f2:f2:e7:1f:bf:
29:92:2a:8c:25:8a:9e:6f:ef:75:27:26:b1:75:b2:
13:ad:6f:65:df:e0:f0:31:41:a8:41:28:f6:e9:74:
a0:3d:52:7d:09:18:63:69:b7:ab:72:bd:ae:17:0c:
76:46:f8:e0:72:9e:9d:ff:c7:11:15:bf:1b:cf:41:
f1:69:d6:fb:12:b3:99:2e:48:d8:0c:e7:eb:cf:26:
c8:b2:18:bd:18:98:79:9d:de:fe:9e:33:ff:ad:db:
78:66:5b:ad:1a:af:24:15:9d:ea:c2:15:b0:4c:7f:
40:49:08:28:75:97:96:20:5d:c0:29:8c:f0:16:de:
21:c3:89:7b:fd:c1:53:51:57:4a:b1:20:41:d5:c2:
01:2d:d7:33:2d:39:74:d9:f3:e5:67:ab:da:7e:ee:
15:d3:65:a5:7a:84:16:78:cb:31:67:44:3f:0b:cf:
01:ee:b8:98:a5:69:d0:dd:d4:0a:b8:86:2c:32:fa:
4f:a3:ed:9a:3f:ea:6e:e9:31:d1:99:e3:c1:22:32:
33:d7:70:47:5a:c9:87:71:ab:5d:cc:48:ff:e5:93:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:03:96:33:B9:A7:07:BF:44:80:F9:BE:D5:BA:98:B3:FA:DC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/712feeee-d132-31f8-b85a-65cacc4cd0eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl
X509v3 Authority Key Identifier:
keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.207.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b2:98:59:d0:ac:4d:f4:d0:28:f5:82:5a:14:4f:69:45:5c:
49:71:bd:58:b0:1b:44:90:84:fc:e3:26:26:d4:aa:44:8b:a6:
8f:17:b5:94:ec:72:b4:dd:1c:b8:b8:1a:c2:13:66:06:9b:e6:
1b:e6:16:4a:51:af:83:73:3f:ea:4c:36:a5:21:e0:d4:78:04:
68:d8:a4:57:11:33:b3:1f:62:19:36:ea:b1:4d:f4:53:73:99:
a6:cb:bc:42:f9:95:cc:79:cf:77:de:db:0b:58:be:15:4b:93:
01:24:fb:22:d8:95:af:2d:e0:43:e4:73:01:e6:65:4e:ef:29:
5b:8f:f4:64:30:64:9c:12:d9:b3:c8:34:80:e4:2e:fb:89:6e:
db:55:e0:14:8a:eb:75:d0:58:ba:3d:d7:d2:bc:1b:a5:7a:12:
2b:7f:75:8b:2a:86:36:df:87:b4:02:3f:48:f2:90:c3:c4:71:
d4:12:85:f8:10:83:c0:df:f6:27:7a:5e:4d:dc:4b:27:cf:f8:
32:f9:ef:53:ba:da:74:1f:87:4d:cf:0d:80:65:84:e7:8c:b2:
97:18:d4:26:fa:c7:72:ee:64:15:c2:8e:24:e8:fb:00:f8:33:
ec:ed:c6:4b:cd:84:94:a1:7c:9e:40:34:f2:8d:0c:3e:18:5e:
62:a0:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:28 2025 by rpki-client