Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa
File: 3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa (raw, json)
Hash identifier: cARiL/IyrXpUZSDFPG+TQK12CMQZg950F8TYI3pQevQ=
Subject key identifier: 2E:EC:1D:E7:D3:B8:54:81:C6:E6:3E:56:EB:33:BB:5D:C4:A6:ED:22
Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial: 010D0C9F4328584898D5FBDDD3A723FCD207A200
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 27580
IP address blocks: 104.153.152.0/24 maxlen: 24
104.153.153.0/24 maxlen: 24
104.153.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d5:fb:dd:d3:a7:23:fc:d2:07:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=f01ff084-687c-4d92-aa9f-cdfc6f65c5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:d8:db:31:5d:90:2b:8c:8d:a8:f7:dc:b8:
ec:4e:57:2e:e5:e2:58:70:ae:bf:f5:81:1b:90:19:
79:db:24:80:4c:a3:03:49:5c:13:80:a4:7f:d5:95:
65:7e:be:8f:b0:78:6c:fa:b8:51:8c:29:09:95:b5:
7d:f7:92:99:db:d2:63:83:6b:36:a3:76:ea:5a:a0:
fa:db:93:67:4c:59:af:45:11:72:37:c3:48:aa:d0:
e0:19:b4:67:2e:1e:1f:98:da:cc:64:30:94:c3:33:
1d:a6:bd:69:de:24:88:35:73:d4:39:3e:28:a4:de:
16:d9:4d:7d:99:18:b4:c2:d0:4f:45:d5:d7:57:fe:
09:82:43:18:9d:74:c2:06:fd:c9:1c:18:75:6c:75:
14:30:01:ee:2c:a8:44:d7:e6:6a:d4:76:f7:63:72:
3c:58:da:ec:54:65:93:32:c9:ed:9c:3a:da:88:1b:
7d:cc:aa:29:90:40:ea:49:6a:6e:fd:88:fd:30:58:
7f:fa:3d:40:24:f5:31:99:52:13:ec:cb:d9:c0:ad:
6f:16:7f:83:17:fa:6f:5c:60:34:fb:3e:e5:68:f8:
76:0a:0a:bd:e8:51:e3:35:34:78:23:21:bb:cb:bc:
df:fe:e3:16:17:50:8c:8e:49:0a:87:54:33:e5:a0:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:1D:E7:D3:B8:54:81:C6:E6:3E:56:EB:33:BB:5D:C4:A6:ED:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
X509v3 Authority Key Identifier:
keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:88:5b:fa:e9:f4:90:1f:12:ea:27:c2:0f:dd:c9:fa:45:73:
a4:c0:b9:bf:fb:be:72:58:10:84:8d:19:11:5a:bf:0b:f5:5b:
42:06:fe:34:a9:ab:c2:4e:46:1a:1b:e5:2b:c4:d5:59:1f:ae:
56:09:c5:c4:3f:a1:93:a9:98:90:e1:15:6e:11:62:bd:2d:f0:
96:aa:89:39:5f:99:99:43:b3:55:84:28:4c:f4:7b:cc:3f:a2:
1f:61:f0:7d:72:14:70:f5:ba:ba:44:3d:f7:0c:70:fe:fc:c9:
04:eb:7b:31:f0:b0:9d:11:be:2d:ba:4e:37:2c:78:d0:5c:18:
a7:a5:c7:81:1f:e8:27:6b:dd:1e:bc:81:53:e2:7a:53:82:09:
54:ea:9b:50:8d:ff:ca:51:6e:15:f8:af:b1:0d:65:eb:a6:de:
82:b1:aa:11:3b:23:df:7b:d4:3d:67:19:b2:2f:ea:d7:5b:43:
13:67:23:33:c7:28:04:59:1f:d3:1e:37:11:d3:45:fb:f6:ea:
55:20:bb:4e:73:c8:c6:bd:35:89:46:b3:73:8d:e7:c7:e4:00:
7f:33:30:0d:5c:3b:5c:ad:fe:ed:54:9e:1e:88:35:a2:31:27:
40:3a:53:cc:fe:3c:56:19:47:a4:6b:87:06:34:5f:9d:8a:bd:
13:b3:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:07 2025 by rpki-client