Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa
File: 0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa (raw, json)
Hash identifier: GdgbFDvjaNVLbgIg19TlUIHKUMbXBseeg0EMyljZ0B0=
Subject key identifier: E8:D8:37:A3:AC:08:4B:C0:08:8B:A6:23:FF:D7:FE:20:F9:0B:63:4C
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F432858489A3B43AAF6AC37D7AA405EC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398993
IP address blocks: 104.233.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:43:aa:f6:ac:37:d7:aa:40:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=94f613cc-49a8-4bac-88ba-e2517d1c903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:59:3f:11:62:03:9a:ab:d6:41:72:8e:db:
b8:4a:19:4a:61:1b:bb:3c:ad:ed:0b:da:3d:50:67:
aa:fe:14:23:0c:fb:45:91:cc:0b:bd:49:f7:2a:56:
b1:06:4f:db:2a:f2:47:78:b7:1f:7c:65:49:34:b8:
19:94:8a:04:7b:83:fb:d1:85:a3:64:8e:5c:ce:06:
d7:f2:4e:93:a2:f8:50:ae:89:ef:2e:d1:5b:e5:f1:
15:bf:8f:71:ce:3d:9e:02:50:2f:97:5d:21:1b:ae:
81:15:c5:ba:cb:18:50:29:ba:f9:81:b3:8d:fe:49:
70:7e:0b:b5:40:bc:40:14:9f:03:9f:09:8e:90:34:
4a:d8:58:36:2e:be:ad:54:87:95:a6:5f:2d:d5:10:
0d:d0:09:09:6c:37:c1:1b:66:65:c4:22:12:f1:0b:
f4:50:5a:e9:24:43:92:4c:8d:6d:3a:2c:ed:86:e2:
3b:e4:82:90:3b:c7:36:ac:59:61:1e:97:be:15:f7:
3f:cb:a5:21:3c:f7:ad:14:65:aa:4e:f4:d9:29:80:
f9:24:c3:09:cc:1a:d9:2f:5a:35:c8:d5:af:ea:88:
a3:d4:38:d3:6c:ea:d4:a7:4f:07:f1:2b:87:39:50:
87:30:d6:9f:97:e8:fd:9b:97:95:0b:2b:70:9d:35:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:37:A3:AC:08:4B:C0:08:8B:A6:23:FF:D7:FE:20:F9:0B:63:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0cd8034d-c6ee-3905-9e4c-ab663d70eb79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.233.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:c7:80:31:99:68:9f:1e:1f:e6:b8:da:a1:86:4a:65:42:0f:
c4:ca:f0:bc:55:22:10:1a:1e:58:25:21:ce:c5:1a:9f:e2:e7:
38:b4:03:70:fc:32:c0:13:69:6c:15:fb:23:05:b4:fb:88:ae:
cf:72:48:cd:17:77:b0:f4:30:a4:a5:7e:34:49:57:57:83:5b:
25:22:70:62:b2:d4:86:ed:f2:9b:55:7b:65:ff:ea:6d:19:bd:
ef:57:6a:4b:0f:72:e5:89:6d:43:bd:3e:20:8b:97:48:42:bc:
a2:d8:29:8d:8f:9e:d5:34:99:3a:31:49:0a:9a:3a:68:7a:97:
8a:75:f6:b2:29:5c:d4:82:3e:4e:c0:b7:d3:2d:57:11:27:1d:
92:fc:c5:72:5e:ff:2f:3e:93:14:6c:e3:f6:d1:34:69:aa:78:
52:72:24:54:53:0a:a5:c9:a4:54:9f:a9:57:53:7e:ae:2b:56:
06:ef:24:ea:f9:29:e7:6c:ee:26:4e:e2:52:63:7b:bb:80:f6:
78:d2:52:f6:9a:c7:0e:b7:a5:91:6a:c6:1f:9f:54:c4:1c:ba:
eb:87:60:44:7c:04:9e:c9:a8:e2:35:d9:33:a9:8b:d5:4e:0a:
d6:f6:ec:53:80:81:64:f8:5c:35:6b:bb:9e:35:3c:1f:7a:6c:
3b:1c:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:17 2025 by rpki-client