Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa
File: f7967a59-1c07-39dc-a959-9b6ab6129975.roa (raw, json)
Hash identifier: 5Gkg1ap0sahcsKVOd/EUWlYtq8yTnCBUCmIm67xGv5g=
Subject key identifier: 9D:F3:45:58:CE:FB:E3:D9:06:0A:78:79:52:70:A7:96:5B:C7:6F:11
Certificate issuer: /CN=3d2a810f-f980-4f77-8ab7-d979958ffb62
Certificate serial: 010D0C9F4328584882809ED754E88044B2FAB800
Authority key identifier: 0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 25937
IP address blocks: 104.244.128.0/21 maxlen: 21
2606:3a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9e:d7:54:e8:80:44:b2:fa:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2a810f-f980-4f77-8ab7-d979958ffb62
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=c2c4e5ea-78c0-428d-bf2a-f19688ff3f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:9c:d2:76:b9:64:65:b5:05:25:2c:bd:04:
d6:93:b0:81:7f:8c:38:81:35:5e:4a:a2:d1:c6:e8:
aa:72:93:e9:44:cb:4a:01:a7:7b:75:09:1e:f7:09:
83:a4:f1:ff:3d:f5:31:a4:56:fd:79:b2:dd:5e:d9:
25:44:08:9c:60:34:86:00:f9:c3:38:b2:f0:2b:9c:
ba:50:b4:c7:02:7b:99:ba:1b:35:94:2c:ba:56:c8:
22:03:c7:01:da:4b:fe:a2:89:7a:88:0f:ea:6a:89:
69:08:a8:8b:00:05:43:26:01:0b:34:b3:88:60:70:
e6:ed:33:51:c6:d4:ff:f5:4d:c2:90:83:bd:61:a3:
98:af:f5:ab:ac:a1:f3:73:10:70:a9:8b:8b:6f:8d:
17:ab:ab:52:92:f0:d2:f6:32:23:5c:58:ef:23:30:
27:ed:6a:72:f9:37:e7:57:5c:68:61:74:c5:62:48:
bb:08:38:19:7d:71:0a:e6:c4:e5:a3:5c:16:18:fe:
ed:77:a1:63:81:15:c9:df:7a:3c:ad:70:08:b7:b8:
77:59:0a:22:17:0e:2f:72:5b:82:14:20:29:b1:e9:
e8:47:30:4c:28:08:50:94:48:4d:2c:04:bf:3b:49:
fc:01:40:33:6d:9b:07:ac:0a:bf:58:6c:52:2c:f8:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:45:58:CE:FB:E3:D9:06:0A:78:79:52:70:A7:96:5B:C7:6F:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/f7967a59-1c07-39dc-a959-9b6ab6129975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.crl
X509v3 Authority Key Identifier:
keyid:0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.128.0/21
IPv6:
2606:3a40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5f:f4:b2:ae:60:59:35:11:c1:bc:aa:99:30:c6:31:60:58:
f1:f5:d5:b6:f8:a9:3e:64:ac:d9:fa:d9:08:9d:5f:55:d5:e9:
72:d0:5c:2d:19:93:3e:ae:a9:b1:75:90:7a:71:d0:19:b4:a0:
48:80:b7:19:2c:e0:22:e0:b8:4d:87:18:89:d4:84:9d:69:30:
3f:ca:b4:cf:f8:00:0e:45:b0:a2:e2:13:3b:b5:1d:64:61:3e:
2c:81:04:a8:d1:f9:1e:e6:29:f4:38:0c:5b:bb:ad:a9:b8:fc:
39:a8:f7:13:6f:d8:32:e0:3b:85:25:f8:55:7b:ae:e8:32:7b:
7b:42:78:20:8b:ea:63:41:a3:48:78:d6:76:18:d0:15:af:c9:
1a:53:a5:98:de:41:80:91:6f:ea:54:62:4f:41:02:7c:e9:59:
2a:e4:0a:d1:cd:8b:a0:1c:4a:5b:e4:dc:bd:8d:0f:75:d3:22:
8f:80:8b:0a:fb:25:e1:2e:62:ff:07:83:de:20:e9:fa:2a:c5:
30:19:90:a9:c4:c8:20:1a:ea:5a:38:b1:f8:f7:ee:4f:ca:40:
26:4d:95:94:81:b3:eb:bb:a6:3b:5f:b4:83:87:76:57:c1:ab:
24:b2:7a:24:89:01:c8:71:34:11:48:1a:58:7d:e1:e6:46:88:
69:ae:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:48 2025 by rpki-client