Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa
File: 3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa (raw, json)
Hash identifier: HQtVIte9t6dHivz7/hR5X/wPlwXOie29HbwSeamo69g=
Subject key identifier: CB:7B:09:65:5C:ED:4A:47:8C:5F:4E:9A:6B:91:2E:DE:40:3F:F3:C0
Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial: 010D0C9F43285849350E94612290F6DF71B5AC00
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 215016
IP address blocks: 104.193.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:94:61:22:90:f6:df:71:b5:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=7c11b058-746d-4cb3-9cc6-ddcb1061373e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:ef:a0:24:a9:e7:48:73:38:30:cd:9c:5b:
5f:a7:c2:5e:f9:8a:d2:56:03:d4:6b:e1:fa:b7:f0:
0a:52:32:e1:05:48:1f:4a:46:d1:bd:6c:0d:c3:18:
84:f1:ba:0c:28:0b:1a:06:ef:ac:33:d7:2f:fa:8d:
b4:b9:31:d3:55:fa:27:9b:fa:ea:0b:df:a9:c9:da:
7d:36:0a:12:74:9d:7a:54:a8:42:ef:28:75:de:e7:
30:c3:80:46:e0:b7:9d:24:77:6c:ba:51:63:25:02:
53:4c:93:3a:35:9c:b5:31:a9:75:12:0a:48:be:4a:
d9:a4:bf:59:fe:9e:1e:d3:ac:fd:93:73:0a:b8:63:
28:60:c3:3d:08:22:6a:5a:07:b6:ad:c5:3c:3b:d5:
5f:07:95:73:83:8a:be:aa:41:bd:b7:64:f6:b1:e5:
6d:5a:df:84:a1:75:10:51:44:cc:7b:c0:b7:85:ea:
ee:51:0f:9a:e5:f3:9b:21:e7:ad:75:bc:93:3f:38:
4d:56:1e:e9:26:64:91:ce:84:91:46:3e:f6:f8:be:
cd:34:c0:24:eb:e7:94:99:a6:e1:4d:5b:3d:e6:b3:
a1:f0:ec:0f:ff:33:bd:90:ba:f3:f2:67:5a:a6:df:
3b:02:7e:26:62:d8:d6:7b:64:ca:33:54:b3:03:73:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:09:65:5C:ED:4A:47:8C:5F:4E:9A:6B:91:2E:DE:40:3F:F3:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl
X509v3 Authority Key Identifier:
keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:17:6a:cb:68:34:ae:f6:72:d7:44:3d:23:f0:42:22:2b:07:
a8:44:48:14:13:75:2d:d7:c8:5c:b4:51:8b:40:07:86:c2:40:
1e:a2:ac:15:af:e0:b8:01:45:2a:6e:f3:22:5c:7f:c9:1e:58:
fa:a4:d5:92:d7:a6:b1:e0:f0:4c:84:39:5d:96:bd:a3:08:38:
c1:3c:61:27:e0:3a:00:d9:e8:06:79:6a:02:56:e5:2a:c8:50:
02:b0:0d:c5:90:d2:24:63:fb:8a:73:d0:58:c2:eb:fc:43:f9:
a5:a3:71:b7:df:d4:4e:1b:45:79:42:3e:64:4e:8d:9a:94:08:
a8:13:90:5d:6d:8d:88:08:6a:2d:29:66:d5:15:b5:2e:cf:80:
ea:57:81:9d:d4:bc:d6:34:f7:f3:77:dc:c0:33:51:e6:a6:47:
fa:5c:90:56:a7:e3:19:81:9f:77:03:00:03:7c:6e:d2:54:fb:
a3:d8:a7:1c:90:e7:89:09:91:fb:e0:bb:26:e0:ec:a9:c1:30:
9b:8a:0b:51:bb:f5:af:82:6b:29:6f:79:b5:90:f5:c8:f2:ac:
ba:2e:3c:90:d0:c4:6f:b3:19:63:28:d2:c7:de:bf:74:d5:8c:
c1:76:f8:d1:99:71:7c:f9:ee:6f:52:f2:46:dd:96:f2:c5:01:
5a:96:5b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:21:04 2025 by rpki-client