Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa
File: d0a39b3b-d235-3903-8484-31fed3ad5af7.roa (raw, json)
Hash identifier: E9hjo2jEIshXENcqGZeAIOkHGtE/iBBJouNORnXnoRQ=
Subject key identifier: 03:BF:42:8E:00:11:13:D7:DE:80:3B:62:AB:30:22:EF:B2:D7:7D:4C
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F43285849194183AF9F797B1190515DC0
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 400544
IP address blocks: 104.156.129.0/24 maxlen: 24
104.156.130.0/24 maxlen: 24
104.156.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:83:af:9f:79:7b:11:90:51:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=55a65166-93fa-486f-b9a7-a5e0831a8190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:d9:01:23:0c:5a:33:0d:1d:2b:57:2d:78:
39:44:1d:61:f3:d0:19:79:57:8e:b4:85:56:85:98:
2d:df:18:ec:2c:ce:f9:79:18:3d:92:4e:fd:d0:b6:
79:12:e3:7a:98:c2:40:bb:49:1a:56:e3:da:43:88:
e7:0d:25:c0:48:f4:06:fd:2f:90:0a:f5:bf:b1:07:
ba:e9:99:87:d1:93:28:f0:f5:0d:4a:07:9c:35:48:
b8:93:bc:0d:7c:1a:26:07:41:10:48:92:05:bf:5a:
2c:e9:c6:d5:9f:25:fa:cd:9a:4b:0c:12:50:eb:50:
30:ab:f9:e9:73:ee:17:c4:b6:8f:52:6f:85:83:5e:
5b:8e:98:e5:5e:e5:45:3b:62:34:24:07:77:48:da:
5e:5c:7e:ea:58:c4:ed:64:24:93:bf:6f:ef:3a:00:
ba:af:08:96:44:84:42:74:fd:84:9a:18:46:94:12:
98:96:aa:45:8e:d1:68:2f:f2:e8:66:5e:b2:36:6b:
bb:88:83:d2:61:14:bd:77:bb:d3:80:82:8f:77:73:
45:b6:01:35:90:9f:1d:b6:ce:0b:cd:7f:7e:9a:4a:
69:62:9b:e3:78:50:b6:e4:8e:f6:52:7d:01:c4:90:
45:89:32:2f:9e:bf:b8:91:24:4b:67:7c:41:f8:29:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:42:8E:00:11:13:D7:DE:80:3B:62:AB:30:22:EF:B2:D7:7D:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.129.0-104.156.131.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:c8:e8:fe:db:dc:90:22:48:d9:66:43:53:9e:f9:27:2f:a7:
5e:e5:b1:49:db:c7:e0:a9:d8:21:01:97:98:8e:98:7f:2c:d3:
c7:50:17:97:90:b8:c8:81:92:88:44:d2:3c:7e:76:37:c0:2d:
cb:7a:99:be:e1:4c:be:89:31:8f:57:62:97:52:6c:08:bf:c9:
56:4c:a1:1e:f8:9b:db:12:d2:df:3c:ef:af:aa:73:91:17:5d:
b9:d7:79:47:80:d6:4e:7b:39:70:99:14:0e:02:16:8c:14:23:
3d:1b:9c:75:69:ef:fd:ae:29:6b:32:a4:a9:6a:73:58:d0:14:
d1:55:75:2b:a8:7a:a3:59:30:56:de:a6:ea:6f:53:a8:20:54:
f9:10:b6:48:16:ae:d3:70:1b:2b:30:05:39:bc:be:12:7a:82:
69:19:9c:15:fe:10:62:b5:c9:f4:76:14:3b:13:c1:7b:03:87:
6c:06:c0:d0:f2:0e:f3:04:b3:f4:77:8b:c7:0c:bd:7d:10:89:
d4:e3:47:e2:62:26:4d:ed:2d:75:c7:c9:c5:90:1d:f7:1c:e9:
44:02:0e:fc:bc:67:4e:3c:e9:b9:b8:b5:75:cc:74:9a:d2:0a:
15:bf:41:26:ca:c0:c2:ac:23:bd:ee:c0:10:b4:d9:1a:52:02:
17:7d:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:33 2025 by rpki-client