Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
File: 0a661bd3-50cb-3aaa-b872-5572157cf927.roa (raw, json)
Hash identifier: agLTFJEphLwdKBaZdScW8lIOBRrUVXT2qE0F9hoX5nk=
Subject key identifier: 08:6C:0E:30:08:07:ED:15:2A:15:DA:A5:EB:EA:60:0B:B6:C8:9E:35
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584949FE885602E7286694C96080
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 11325
IP address blocks: 104.251.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:88:56:02:e7:28:66:94:c9:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=c60645d9-7db2-466f-8a13-002c0daed14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:9e:d3:f1:ab:45:24:2f:9d:8b:f6:24:5d:
b7:33:19:04:00:80:41:43:ba:14:1a:08:a8:ce:ad:
b4:6a:3f:4d:57:c4:d6:49:67:73:12:a7:94:6a:c1:
60:f6:3c:28:24:a9:57:b8:11:7c:97:32:00:dd:b7:
03:e3:bc:ab:65:63:6b:bd:fd:4c:84:2e:4e:15:60:
96:a3:2b:8a:c3:01:c2:06:4a:cb:a9:48:4f:f3:88:
b9:ac:c8:c4:46:3b:22:7b:ae:47:a1:ae:78:82:e4:
70:57:35:ec:65:ab:89:9b:30:b1:cf:98:1a:b8:12:
f7:10:79:e5:1c:18:24:8b:de:bb:40:1d:a7:64:ec:
13:88:12:58:c4:99:8d:cc:91:5e:e2:69:dd:32:8e:
41:cc:44:a4:43:a0:56:1b:ee:eb:06:cc:09:f4:ed:
02:74:43:4a:b3:af:4f:37:9c:62:4c:08:9d:09:83:
75:1c:c9:88:bf:3b:22:c3:06:d0:a2:a4:d0:c5:cf:
4f:ee:7d:2a:2f:de:6a:b0:10:0c:ef:a0:db:bf:63:
e5:81:30:7c:62:ce:66:69:fb:b8:fb:56:ce:a4:d4:
a7:03:a8:29:da:5b:9a:14:81:03:a3:49:9c:e6:16:
72:fe:e8:56:fa:a9:98:00:3a:9c:72:1f:e3:2a:e0:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:0E:30:08:07:ED:15:2A:15:DA:A5:EB:EA:60:0B:B6:C8:9E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:47:7d:05:57:67:38:90:fd:ad:00:67:8a:44:23:c9:84:5d:
be:63:c6:50:15:99:38:30:a9:6d:1c:22:9e:4e:0a:0a:01:c4:
0f:ca:fd:b2:71:40:0d:3d:d5:29:9e:51:3d:75:97:d1:93:34:
ca:08:4f:d0:5e:b4:84:76:40:1e:80:0a:ba:97:fc:00:d4:2c:
70:be:24:a4:e1:fe:bf:ca:ac:1e:14:dd:b8:da:f6:43:97:02:
55:04:42:a4:d5:3d:31:ec:55:3f:0d:66:59:f8:2c:cb:4a:a4:
d8:8d:a5:54:f1:19:3a:4f:84:34:3f:6c:5b:92:30:0c:d7:42:
48:70:e8:b4:7b:25:02:2f:16:ad:54:21:a1:71:77:6b:47:9f:
0a:7f:91:f6:81:82:59:94:84:bc:02:8f:fb:eb:f4:ff:03:3d:
a8:68:ef:40:85:e4:bb:6b:08:27:67:4d:7e:08:a8:3d:bd:52:
4c:75:e2:40:3b:4c:97:ff:37:10:24:73:78:9f:98:3c:fc:4f:
2b:01:59:d2:00:58:50:4a:96:15:95:c0:5c:d7:52:4f:5d:c7:
2f:80:13:e9:ac:f0:09:a7:ca:4b:34:04:12:cb:95:46:23:65:
24:ab:1c:bd:91:38:31:ef:a4:e9:48:92:25:01:20:12:3d:4a:
89:1a:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:14 2025 by rpki-client