Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa
File: bbd6b25f-8695-34b1-ac59-247d8785d485.roa (raw, json)
Hash identifier: 5MXi8L5Eo/Yx+083m9AFbDIjkDcwbry21sg34GNz3Sg=
Subject key identifier: 2A:D3:6D:B2:03:A4:00:AC:46:29:EC:0E:14:62:32:D9:A0:D8:41:E7
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068B0F64FB6CFD2AC71140
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 104.137.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8b:0f:64:fb:6c:fd:2a:c7:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=2166eb03-b646-49de-8ef3-610bfb86b014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:bc:e0:07:f0:8f:0b:2f:ff:0c:80:9a:82:
e5:79:f9:c9:e6:95:18:7f:62:31:50:24:a8:a9:89:
f3:98:ec:b1:21:3d:cf:03:29:07:41:96:9c:85:61:
1a:e5:72:26:25:38:de:5f:ae:92:1c:42:73:b9:58:
3a:78:5c:00:93:93:53:22:7c:b7:b2:76:49:0e:9a:
d6:df:ba:c0:92:32:15:43:e3:84:5f:02:a0:1e:9f:
09:e7:c3:92:39:b5:c2:23:f1:d5:0e:34:c5:ee:37:
e8:05:df:89:4b:e5:01:6f:e8:92:72:56:bf:3e:2f:
2e:e9:89:59:ed:b5:64:e8:66:31:fc:a8:d2:cc:03:
68:c2:38:a5:f0:98:ce:15:bb:69:00:cd:32:bd:30:
a1:e8:a4:56:de:cd:9a:84:f3:ac:87:0e:b0:5f:3f:
c2:56:38:60:18:7d:dd:c0:52:83:e2:dd:0a:fa:8a:
5b:37:08:bb:f2:14:c8:94:2d:2e:35:f9:91:23:67:
bc:14:8c:ba:f0:3d:df:d6:dc:c3:7d:7c:79:62:b3:
cb:88:80:1f:e3:a1:36:f8:d0:61:db:9d:5a:d1:8f:
36:1d:3d:20:ac:32:bd:7b:b0:4b:96:a2:15:14:fa:
61:fc:2c:c0:6d:f0:f3:89:f7:9e:e9:06:df:d1:72:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:6D:B2:03:A4:00:AC:46:29:EC:0E:14:62:32:D9:A0:D8:41:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
104.137.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:65:7a:17:36:f2:51:91:30:3c:6e:03:fc:43:c3:b8:2f:81:
53:98:62:46:9a:a1:17:8d:6d:26:53:20:04:0d:64:de:4f:38:
aa:6e:1c:14:cb:6e:36:81:09:78:e7:ab:64:38:ac:0c:d5:d9:
32:a7:16:4b:ef:74:42:65:fe:5b:c2:a2:f1:91:11:3b:35:e4:
01:fc:2c:0c:6d:13:24:85:db:65:26:cb:ac:ec:96:20:ed:bc:
57:e3:80:ae:c5:aa:18:ff:a4:8e:5b:a7:b1:b6:5f:67:fa:40:
58:74:af:9b:f9:93:67:8f:88:9e:45:dd:fe:96:9c:75:a4:9e:
eb:f0:8a:48:c3:3e:36:68:a0:c1:dc:8b:b3:ab:de:24:d8:be:
f3:32:2f:a7:03:b0:d7:98:77:d8:d1:cc:87:a9:2e:d5:2e:19:
a5:f7:75:53:61:94:f9:41:93:90:97:fc:0d:4d:b2:57:4d:10:
11:67:65:29:9e:72:14:a0:94:64:bd:ea:a1:62:37:2e:e9:cc:
63:6e:7a:32:15:1d:eb:97:f5:62:8c:c6:c3:e2:c7:df:77:30:
22:ee:03:93:90:48:aa:4e:e7:cb:93:c7:90:c4:43:ed:84:18:
ca:0b:b6:d4:55:cc:b2:93:36:99:36:6a:5f:63:ee:6b:69:dc:
3b:e2:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:38 2025 by rpki-client