Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
File: 18fb001a-970c-3cab-8188-d1568ca51609.roa (raw, json)
Hash identifier: 7ZauHS+FbAzCfXPeDDuMjrlDoHilPPeh59h9zOG04Lc=
Subject key identifier: 1B:3E:46:69:16:11:7E:AA:E2:CA:AA:D7:1D:E0:87:C7:E2:03:C4:2D
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584930DE6C07D5EFA51949D015A0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 18978
IP address blocks: 104.218.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6c:07:d5:ef:a5:19:49:d0:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=601d9f49-2904-44a0-a5fa-cbaf48cc717a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:0d:2b:63:79:eb:e9:f6:8e:2c:55:15:d5:
08:d2:4e:96:46:9b:d3:c5:ab:87:7f:a7:25:74:eb:
7a:fa:0a:86:d2:0a:c7:0c:23:19:da:e8:3c:17:45:
4a:ca:14:c3:48:62:72:eb:4c:cf:b0:4d:66:8a:10:
67:89:32:fe:a7:f1:db:22:0e:75:7f:17:85:cb:e1:
65:b6:27:a7:00:c6:dd:25:fa:20:fd:8e:7b:b8:fa:
7c:cd:dc:6f:8d:a2:d0:69:8f:85:c9:fd:29:a3:20:
5e:d9:16:62:d4:de:bb:e9:ce:c9:87:9f:89:45:95:
4a:bb:d0:c9:db:74:64:0e:a3:89:8e:85:aa:59:04:
80:35:98:c5:6b:92:a4:eb:9a:67:d2:28:66:3b:80:
55:e3:e4:3e:9c:e0:72:66:46:78:22:15:3d:3c:a2:
b5:3d:48:d5:2d:e5:53:9d:bc:82:d5:ff:74:1d:18:
a5:e8:77:26:45:e6:af:36:bc:35:cb:78:a1:64:9b:
d5:93:7e:fa:49:f2:3d:e8:ee:5b:11:ca:bc:17:7a:
dd:6a:0b:a4:c3:2f:16:b7:05:a5:e9:ff:85:8c:3d:
1f:4b:4f:2a:46:99:6e:c9:65:d7:18:76:f6:63:29:
f8:9c:48:4f:ad:4d:d7:10:c2:47:de:fc:4d:02:03:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:46:69:16:11:7E:AA:E2:CA:AA:D7:1D:E0:87:C7:E2:03:C4:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ee:32:d8:79:14:d6:f2:7a:93:b2:51:0d:0e:56:2a:28:0b:
23:40:32:f2:84:c7:e4:89:a8:79:63:ba:05:40:a3:89:e8:fa:
17:b2:d5:3f:a4:e4:19:71:2e:7f:a3:64:82:40:da:01:15:69:
54:a2:04:4c:a7:1f:66:dc:5a:ea:e3:68:68:c2:dc:cf:a1:2e:
af:49:99:19:11:0f:ed:01:24:ac:fe:35:74:21:32:af:c5:c6:
2b:ac:5b:11:84:6f:73:e4:28:a9:36:d0:41:44:44:9d:87:64:
e8:95:8a:cc:eb:37:fa:78:fd:40:71:f2:a3:9b:e6:1b:ea:78:
31:86:b8:7d:e7:06:45:55:c4:72:1a:4c:28:8a:0d:ba:99:e6:
84:a5:9e:ee:7f:92:2b:79:ab:a2:91:11:2f:70:cc:be:11:c3:
2b:86:51:a9:c0:e7:a5:00:6f:d8:db:f6:af:62:9b:76:fe:a2:
e2:e1:cd:77:9f:27:c2:d7:c6:b5:ee:71:a3:9d:74:e7:3e:29:
5f:57:64:f7:18:fb:ed:ed:21:a9:7b:87:b2:2f:0f:ef:e6:03:
68:3e:34:bb:3c:66:36:9f:e2:bf:1d:74:35:dc:5e:e5:4f:bb:
7a:7c:00:8d:bd:73:fb:d2:0e:b9:1b:47:dd:54:1c:a2:c9:54:
99:69:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:02 2025 by rpki-client