Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa
File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json)
Hash identifier: 8RUlhwno1b6ApWdEcF5k/zwpDLqJWZo6zF3D3XFZJGA=
Subject key identifier: B7:06:35:63:40:C6:DD:E8:8B:F8:D8:95:AF:4D:79:8D:35:D1:34:F7
Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Certificate serial: 010D0C9F43285848ADC61544AA39AEB5897A98E0
Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 49585
IP address blocks: 104.156.136.0/24 maxlen: 24
104.156.137.0/24 maxlen: 24
104.156.138.0/24 maxlen: 24
104.156.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:15:44:aa:39:ae:b5:89:7a:98:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=16d9c2e3-b303-412d-8670-8cd04389e71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:86:e9:19:11:a4:00:a1:5e:33:62:2f:13:
e0:c2:7d:10:70:5e:0f:fe:5d:68:c6:d2:0b:96:65:
96:7c:f2:f0:1c:76:2e:9b:1e:23:56:bd:e9:5f:97:
4c:a5:b7:3c:f0:dd:1f:c7:42:d5:20:a8:97:54:64:
78:2b:e4:d3:9b:7c:df:c6:52:11:0c:66:27:0d:b6:
a6:0f:c8:6b:8b:f9:e6:24:2a:fe:87:61:13:4c:bc:
ab:b7:35:c5:69:1d:67:c8:36:d0:60:07:2d:df:69:
f2:46:bd:8a:33:82:2b:e5:b8:89:8c:dc:b4:6c:7f:
e0:06:73:77:8c:9f:3f:aa:65:89:1c:1c:b9:39:2d:
f7:32:0f:9d:95:f5:6f:6e:1d:10:de:9c:1a:d3:63:
37:ea:52:94:1d:77:69:ff:77:89:34:64:f1:93:29:
4c:cc:e3:ae:89:db:1f:4c:4d:5a:d6:81:b6:a9:c4:
0f:76:c1:06:e9:d9:28:5f:10:30:6a:19:a7:c1:11:
79:2c:bb:4a:3e:83:97:77:ba:51:a2:83:af:7e:94:
06:b6:6b:58:35:e9:93:19:45:11:cd:b0:1a:2d:08:
42:8e:fe:5e:3e:0e:80:15:d1:86:0d:0c:82:b6:76:
7f:69:72:f3:c9:92:14:12:06:02:73:79:37:d4:ef:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:35:63:40:C6:DD:E8:8B:F8:D8:95:AF:4D:79:8D:35:D1:34:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl
X509v3 Authority Key Identifier:
keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:0d:73:2e:c0:35:4f:c0:bb:4d:55:f7:82:46:77:93:4f:4e:
43:94:d3:cb:3e:06:b8:0b:e2:f5:fc:34:03:cc:5d:a4:d8:ca:
dc:87:a2:57:1a:7c:a1:7a:0d:fa:2f:cd:cf:db:22:18:7b:d8:
88:82:5c:7b:00:79:99:2c:93:6a:2d:6c:a8:f7:ad:a0:c5:43:
24:19:7c:37:40:55:7b:56:7b:96:98:29:b8:31:b7:ba:d6:0e:
ca:f8:8b:46:11:7b:4e:5b:6a:cb:56:c7:11:00:dd:3b:57:37:
bf:60:4c:91:f1:d6:b3:0f:80:15:bb:a8:95:1d:62:7e:6f:4b:
b6:a5:71:e5:d1:cf:e9:a2:ef:29:7e:77:ce:55:42:1b:fc:2d:
9f:d0:db:90:ff:c8:c5:1e:c4:7b:48:36:54:18:37:d0:63:79:
24:e7:7c:09:9b:0a:51:4a:f8:5f:f7:14:24:9c:7d:27:c5:0e:
5f:d3:cd:09:83:40:0f:00:d9:29:29:3d:60:90:6a:f0:e0:3d:
06:7c:61:c4:43:b7:ee:1a:4f:ba:40:d1:53:a2:42:dd:fe:dc:
e3:c5:c9:c9:03:e9:d4:96:0d:dc:f0:33:08:45:b7:21:54:3c:
57:cc:cd:14:8c:20:1d:2a:85:1a:89:69:4a:a3:b6:3f:86:dc:
a3:d1:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:58 2025 by rpki-client