Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/f4e2e9bf-8d3f-33b0-bcd9-8bb514cbb7e1.roa
File: f4e2e9bf-8d3f-33b0-bcd9-8bb514cbb7e1.roa (raw, json)
Hash identifier: Tpx0WylJg4u0bqzmLGs5diqjOXXQnvBmKz7mVnSQudw=
Subject key identifier: 4F:73:8A:7D:28:93:BE:19:60:B9:0D:97:78:33:F5:1A:9F:EA:D3:93
Certificate issuer: /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial: 010D0C9F43285848DEA36E85DC3367A439926F80
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/f4e2e9bf-8d3f-33b0-bcd9-8bb514cbb7e1.roa
Signing time: Thu 13 Feb 2025 14:05:38 +0000
ROA not before: Thu 13 Feb 2025 14:05:38 +0000
ROA not after: Wed 14 May 2025 13:05:38 +0000
asID: 214943
IP address blocks: 104.245.240.0/24 maxlen: 24
104.245.241.0/24 maxlen: 24
104.245.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a3:6e:85:dc:33:67:a4:39:92:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
Validity
Not Before: Feb 13 14:05:38 2025 GMT
Not After : May 14 13:05:38 2025 GMT
Subject: CN=a9ea4dda-e59e-4b92-9ae5-a68a7dbf101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:d5:ad:f7:1c:8b:0d:2b:fd:2f:90:2c:59:
a3:24:58:21:68:ff:71:07:12:d6:a3:5a:09:38:5a:
4a:23:a8:ae:ee:cf:46:34:8b:ce:bb:e4:74:05:6e:
b4:03:97:fa:fa:d0:73:51:44:2d:2a:a5:a2:5f:28:
be:81:d7:b6:35:e2:61:aa:84:41:b8:e9:40:72:1d:
53:d6:51:fb:a0:55:15:4b:ff:c3:a2:05:d2:e2:da:
13:21:7f:26:a5:0c:cf:ea:0d:19:94:42:72:e5:88:
08:5c:2c:e7:a1:b0:0b:f5:2b:94:94:10:44:d3:7d:
d5:2e:07:53:f6:ff:79:3e:79:be:ff:03:8f:6e:46:
0b:d5:c1:7d:ca:c1:f2:d3:3e:d0:62:cd:22:29:aa:
4e:4b:77:38:33:8b:b1:88:3c:d2:ae:a2:5c:b4:d4:
2f:a8:27:63:d5:c1:0f:28:1d:83:d6:51:cb:02:f4:
b9:6b:b4:79:cb:6a:d0:34:6c:46:ee:d9:53:6b:67:
d9:d9:0a:c6:b2:58:64:7b:17:1c:c7:7b:2b:f4:7a:
4a:75:c1:1e:7d:48:48:4d:c2:ed:9e:b4:c7:ab:58:
bf:c4:29:ad:f2:36:d6:f9:c9:d2:5d:a7:b7:dc:bf:
e8:d7:b0:6c:18:e9:96:7e:73:e7:ad:d6:ca:da:1a:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:73:8A:7D:28:93:BE:19:60:B9:0D:97:78:33:F5:1A:9F:EA:D3:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/f4e2e9bf-8d3f-33b0-bcd9-8bb514cbb7e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
X509v3 Authority Key Identifier:
keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.240.0-104.245.242.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:26:10:34:57:73:ee:56:ee:8b:99:95:f5:54:3c:f4:78:7c:
15:82:75:e5:d2:50:0f:bb:b7:32:3b:ac:5f:af:e1:44:eb:35:
06:bf:3f:80:61:52:44:d4:59:9b:e8:5c:8f:1a:78:12:dd:b7:
df:61:66:61:88:1d:2f:d3:a1:89:6f:a5:89:ab:62:9e:3f:25:
27:ed:d1:e0:b6:08:0b:ef:1b:fd:d0:08:ec:0e:ba:de:0f:4e:
19:57:c8:22:e3:a0:33:96:02:49:3b:ae:14:e7:28:35:ca:04:
0f:39:aa:fb:8d:7d:96:10:f0:ed:0a:0e:87:9d:70:c7:c0:55:
de:e7:d7:c4:37:0d:19:0a:52:ac:89:71:f1:ea:5f:96:4e:26:
9a:08:99:be:ae:9e:44:3e:32:c9:72:d6:e8:ed:66:04:84:ef:
85:52:9b:da:c2:32:98:91:ad:e9:fe:cb:09:ac:3b:16:00:25:
fe:71:d2:78:ef:5c:0b:a7:53:bd:d2:a1:13:a4:7b:60:d0:1c:
ae:a4:71:04:a5:d9:95:db:c2:c0:53:19:b2:37:af:1c:db:1c:
49:0d:67:d9:7d:52:dc:37:a5:a9:0c:70:6a:46:c4:31:ad:ef:
73:b1:54:aa:b3:79:b6:da:89:59:29:61:f8:06:63:c3:e9:ad:
28:95:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:01 2025 by rpki-client