Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
File: 34164e83-730c-3084-85e5-2ac39df4113c.roa (raw, json)
Hash identifier: q60XhizHu2Ru25mVRE7yp3/djLZf0mb0jOzC5M5SCSk=
Subject key identifier: 2D:C7:20:D3:33:9E:35:FC:61:AA:E7:F0:5E:EC:12:64:EC:30:46:89
Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial: 010D0C9F43285848C9B0DC1EE0816AEC3AA8A900
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 0
IP address blocks: 104.192.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:dc:1e:e0:81:6a:ec:3a:a8:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=065a144e-2372-499c-9d74-96860b4df841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:bb:8c:7c:a3:57:ba:9b:46:67:0a:a5:d1:
5a:32:4e:80:8a:ec:16:3b:3e:32:60:d1:92:9f:08:
15:a0:84:50:3c:5d:8f:7e:9f:ca:2a:5e:aa:f6:03:
37:7d:e2:f3:2f:dc:66:ba:e8:03:b7:b7:89:d3:a4:
27:c9:5c:05:cc:95:85:8b:a6:d0:cd:60:5a:67:90:
1f:ac:1b:63:be:70:12:b7:5d:5b:1d:c2:dd:85:a0:
75:e3:bc:f6:0d:69:34:00:bb:3b:ef:35:2a:49:c3:
d6:37:bc:49:e0:ce:c6:67:fc:d0:76:16:97:5f:39:
cf:21:df:81:c9:db:a7:b9:80:62:0d:95:ca:d4:79:
85:87:ad:2d:94:86:ec:ba:20:3b:55:26:4e:73:57:
92:81:2f:2b:6e:5f:d4:c3:45:c2:bf:6a:2b:55:dc:
d2:5f:6d:be:7e:9a:57:6d:97:a3:62:02:a1:04:bf:
b5:9b:2d:34:0e:67:f2:06:a8:fb:15:85:4d:58:5d:
94:57:b3:54:cc:57:78:16:5f:91:e9:e7:0f:6f:07:
d5:a2:a7:1a:e7:a5:67:2d:ae:75:7f:6b:6f:0f:0e:
e1:b1:f6:72:fe:62:83:2a:1b:92:2b:ee:90:9e:0e:
93:ed:02:b4:42:20:a3:16:8c:93:05:f8:c4:0d:0d:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:20:D3:33:9E:35:FC:61:AA:E7:F0:5E:EC:12:64:EC:30:46:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/34164e83-730c-3084-85e5-2ac39df4113c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
X509v3 Authority Key Identifier:
keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:09:79:9e:92:8e:b9:c6:a6:1e:d1:be:1b:9b:b4:b7:25:8f:
83:4e:3b:c8:36:90:61:f4:5d:2a:e2:44:be:65:a6:b3:86:66:
09:0c:f3:fd:1f:ac:3d:45:9f:31:2c:96:1d:67:1a:06:ea:93:
42:21:28:e8:d0:d7:95:94:5f:7c:2e:4a:c3:d8:99:88:9e:6a:
70:76:80:bf:2c:f2:f8:31:de:dd:ff:27:13:43:36:a0:ba:a9:
12:59:9e:cf:18:c0:95:85:7a:76:be:bc:e4:39:96:aa:61:31:
fc:8b:66:63:84:09:c0:9a:5f:e3:52:95:4b:24:bc:31:76:7b:
63:bc:7e:ad:cf:8a:43:fa:39:02:ef:61:79:82:1d:9d:a4:83:
34:07:68:a1:b1:1a:48:81:15:47:2c:b1:5b:2b:d2:d4:ba:0f:
aa:c3:81:a0:97:70:9b:f7:4e:eb:6a:6a:af:90:19:3d:38:2a:
5b:74:56:95:db:79:01:f5:de:29:02:fe:04:01:38:7d:37:43:
4f:c1:00:94:6d:54:5e:44:36:30:77:d9:1b:4d:26:05:22:ea:
c0:53:3e:2b:88:76:5f:10:a3:e7:e7:ec:6c:a0:2c:c7:7f:6c:
da:64:da:0e:d5:1c:b7:e1:e5:cf:e4:be:03:af:56:ce:79:90:
78:c4:5f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:42:57 2025 by rpki-client