Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
File: 309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (raw, json)
Hash identifier: COgJneaOVWhlOlmVMTMY8/IAsH7dc1axv4tXpgZfa+I=
Subject key identifier: 18:5E:6B:10:C5:5C:D6:D4:26:76:72:95:6B:E6:C5:F2:9A:E1:EA:E9
Certificate issuer: /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Certificate serial: 010D0C9F43285848EF61335793CFF55BA0A096C0
Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 63362
IP address blocks: 104.254.204.0/22 maxlen: 22
104.254.204.0/23 maxlen: 23
104.254.206.0/24 maxlen: 24
104.254.207.0/24 maxlen: 24
205.143.40.0/22 maxlen: 22
205.143.40.0/23 maxlen: 23
205.143.42.0/23 maxlen: 23
205.143.42.0/24 maxlen: 24
205.143.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:33:57:93:cf:f5:5b:a0:a0:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=f13d3dd4-f747-4ad0-a8bc-099955e9d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:56:15:14:d9:18:6e:94:d6:f9:09:4a:f7:
55:00:b8:30:ba:c0:77:fc:c9:b0:ad:01:bb:df:a1:
70:5f:f6:b5:e6:25:c7:e9:55:67:8c:46:20:02:ff:
a8:63:05:47:3a:64:7f:4b:c4:f4:5e:da:ea:62:db:
0a:86:d2:3a:9a:91:65:a8:18:ea:e9:f4:06:c0:2b:
f9:33:77:25:63:db:44:3b:64:ab:3c:d1:7f:b8:6b:
e5:4d:8a:b4:76:76:fa:ff:13:f7:68:a6:db:dc:57:
9d:13:04:bc:4f:38:a4:d8:75:38:5d:0a:92:4f:f7:
72:d5:6d:9e:13:0f:c6:c2:a9:b3:df:7b:64:0e:8d:
5f:01:c6:03:f3:00:cd:e8:bc:b2:82:6e:03:6e:07:
1a:11:82:e7:c7:2d:cc:65:08:71:e2:c7:d9:3c:53:
fd:29:73:1b:45:68:ae:c9:6c:4a:d2:ff:8f:50:d1:
fa:e8:20:87:31:ee:23:da:a5:ec:61:01:e2:0e:33:
06:b7:1d:a0:9e:8e:dc:18:ac:aa:00:7e:8c:08:4b:
a3:ca:81:59:25:14:2f:36:c8:73:9c:ba:18:67:7e:
cd:f3:d0:ae:10:d4:c2:da:48:35:24:a4:ba:70:55:
b9:64:96:38:1b:be:a2:f8:5f:99:88:55:ff:08:86:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:6B:10:C5:5C:D6:D4:26:76:72:95:6B:E6:C5:F2:9A:E1:EA:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/309d58ec-9dfe-3f07-b602-f7d2c3980950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl
X509v3 Authority Key Identifier:
keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.204.0/22
205.143.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:5e:3b:02:6d:46:33:9a:6a:e9:eb:0a:96:04:74:e4:54:9e:
bb:80:fe:43:5c:b9:e1:14:57:ec:40:73:8d:14:71:e5:0b:ef:
77:cb:92:b5:65:1f:39:ad:7d:f3:8b:2d:51:04:bf:2e:e7:01:
72:f5:d5:d8:b7:30:f5:61:66:c1:04:7c:83:d4:6b:3b:e4:bb:
89:35:58:10:28:6e:16:84:e0:b4:9e:4b:b6:53:03:4d:4d:90:
2e:9a:93:fe:00:3e:6c:89:58:70:b6:d4:ce:26:c2:52:f1:59:
3b:2d:13:25:c7:ff:88:56:73:53:6b:89:e3:fe:ea:ee:66:98:
f2:b1:98:0f:ef:d6:27:82:83:87:7a:04:d3:a8:f8:d1:15:46:
15:80:d3:25:5c:92:fb:e3:5a:c0:97:b5:4e:db:17:0d:54:d1:
94:3e:31:1a:6d:e5:e4:6f:10:7d:95:d8:d3:c5:ed:a1:56:d9:
f8:bb:bd:61:81:6c:09:53:b8:1c:d2:be:ec:26:97:69:8d:2f:
cc:b0:0e:5e:95:c0:1f:bd:6e:d5:0b:9c:d3:8c:ce:b4:2f:d9:
a5:09:73:18:22:81:43:ae:a7:64:82:fd:8f:6b:de:97:4e:21:
39:c1:33:b9:c9:6a:51:0f:84:64:57:09:8f:75:66:b3:bd:56:
f1:6d:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:26 2025 by rpki-client