Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa
File: fba7741f-d7cd-3d32-850c-1efffef1bce5.roa (raw, json)
Hash identifier: XmlbsKlHcUjI2TmSYl09mpCyiaXc+2+1WrXWDuyvnKM=
Subject key identifier: 56:E9:F2:3A:FE:67:62:D7:19:58:DB:C0:0D:8B:33:58:A5:1A:80:FF
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285849287E6790F68EA7F384FBE600
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 1239
IP address blocks: 104.218.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:67:90:f6:8e:a7:f3:84:fb:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=513cdccb-4201-45b6-9bd0-b6ca712cbb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:eb:10:49:53:2e:8e:df:a2:28:5a:1c:01:
ed:28:0f:6d:f4:ad:20:3a:51:7e:29:75:24:b8:31:
97:93:35:e8:0b:ab:40:b9:ab:d6:f2:6e:ae:6f:aa:
f2:0f:f8:1f:39:88:a2:ca:ba:fc:7d:ad:0a:aa:83:
c3:fe:2f:58:1a:b8:52:6a:be:88:f5:8d:32:df:d5:
de:39:26:7a:4e:b1:aa:82:9c:07:42:7a:58:e9:6c:
e2:46:28:6d:08:25:5d:22:f9:f9:62:8b:87:3d:be:
eb:ab:34:dd:66:68:f9:30:5c:d8:f5:81:b3:a5:01:
e9:27:f1:79:29:4c:26:ce:26:a1:b7:0e:14:4d:5d:
0f:a8:96:5a:dd:25:d4:23:7a:38:17:c2:ce:66:16:
54:4f:6a:c4:11:3d:3a:ed:9b:26:04:13:f2:70:08:
f6:f7:d7:ca:1d:d5:7b:8f:67:11:f1:8a:ec:a0:78:
f0:11:d8:58:23:b8:ff:b9:3b:8a:bb:4a:40:d2:a2:
b4:c1:30:55:c2:bd:aa:08:dd:b9:87:31:33:37:4b:
b0:91:6d:a0:0b:d4:0a:28:79:ed:be:90:a7:44:6a:
8e:ca:cb:6b:04:a6:6e:1a:00:32:1f:b9:6a:f4:4e:
f4:d4:a7:93:74:cd:42:50:f4:50:c1:14:ba:1c:ed:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:F2:3A:FE:67:62:D7:19:58:DB:C0:0D:8B:33:58:A5:1A:80:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fba7741f-d7cd-3d32-850c-1efffef1bce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:92:2d:18:d6:2c:96:ce:bc:67:9d:c3:e1:6f:c7:6b:4b:5e:
67:f5:03:72:06:1e:c2:2d:a3:a2:74:f6:07:44:0e:26:ba:66:
91:b9:55:de:77:3c:d0:70:e3:6c:3c:8a:e9:dd:10:a2:55:04:
d0:9e:c3:76:0f:f9:24:4e:ae:73:98:f3:f3:8a:64:5e:ca:b9:
8e:49:ab:91:cc:a0:27:0d:fb:52:32:56:f0:34:d7:cb:12:c0:
e7:76:74:54:76:59:4c:58:4b:f1:10:3d:40:4a:66:65:b4:07:
3a:27:e6:65:fd:1e:e1:6b:ea:7e:eb:f4:5a:0e:7d:f1:f8:b0:
24:cb:8f:a8:7e:9f:1d:95:a9:58:de:36:a7:f0:6c:f3:a4:e4:
54:3c:c0:a6:23:d0:bc:f7:16:89:0d:a8:46:50:73:f3:5b:c1:
37:7c:77:03:9e:22:fd:26:95:78:ce:7d:0e:f5:f5:bc:e7:93:
02:9d:f3:29:32:b8:2d:2f:21:2b:86:6f:b9:af:3a:18:47:6c:
8b:7c:fc:ce:44:93:da:40:72:d9:36:80:1d:77:f1:cd:ce:04:
39:8c:61:e6:a2:83:f2:5c:58:3e:fd:4a:ec:d3:ba:62:83:95:
63:24:9a:1f:cd:5c:8b:05:1c:8e:72:ff:03:27:ad:d4:3f:b2:
08:af:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:49 2025 by rpki-client