Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa
File: 407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json)
Hash identifier: AcQDgGlddUofy0Jx8XME9z3lv6jdcvx61mN9GXmbnBk=
Subject key identifier: D7:D6:27:D2:86:4B:4B:E0:92:60:74:98:77:B4:C5:1F:B8:4E:41:B9
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848C6E6341E6EDCD52CFB815ED0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 16433
IP address blocks: 104.243.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:34:1e:6e:dc:d5:2c:fb:81:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=41aa0f78-8891-48ac-a828-7ca6dd3f4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:77:0d:57:e3:92:53:86:92:ee:03:b3:f7:c5:
02:48:e7:31:8d:b7:26:99:1f:fc:09:3d:93:d0:b4:
0d:ad:96:50:76:10:ed:ab:39:13:09:c6:b7:43:e9:
a1:91:a4:b2:59:cd:17:10:00:31:3a:5c:2a:8a:54:
ed:84:c6:e3:2f:5d:2d:54:27:e1:aa:15:88:fe:83:
97:d7:b2:81:2b:b2:b7:c3:66:a9:3e:6c:6d:2d:62:
53:66:e4:cd:6e:19:b5:3b:03:d4:89:3d:f5:38:80:
35:2f:b2:10:2f:48:f3:cd:a2:ba:ff:01:3a:7d:ac:
cd:ec:76:b6:a7:1a:91:5b:84:74:52:18:7a:41:b6:
31:5c:cf:c7:8b:35:37:89:8e:7b:eb:0d:0d:45:aa:
db:50:aa:4c:95:12:7a:08:8e:46:f2:f9:13:62:77:
e2:bc:e7:43:dc:43:32:41:28:ff:52:f7:56:16:04:
55:aa:a3:f1:40:0d:fb:00:05:c0:b2:8e:d0:8b:05:
27:89:aa:22:fc:7f:bf:6f:97:03:e0:92:7d:7c:99:
90:28:9b:b5:37:ad:7c:85:7f:a8:27:81:b2:e3:6a:
6e:a4:01:0e:47:a2:38:08:19:96:f7:88:28:7d:a2:
0d:25:72:b0:05:a3:e2:7c:86:49:f8:a2:b1:24:97:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:27:D2:86:4B:4B:E0:92:60:74:98:77:B4:C5:1F:B8:4E:41:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:90:6f:f2:bd:0a:29:4b:aa:29:f6:a1:cd:e6:f0:1f:bf:d3:
77:17:b7:cb:52:40:be:10:9a:66:7f:59:82:61:fc:87:90:ca:
5d:8d:95:33:59:9c:03:0b:5b:ca:2e:3c:6b:4d:23:45:0b:0c:
28:b4:9f:0a:c3:b7:c1:e5:e8:f2:18:b1:1d:f1:c1:3f:12:13:
ee:00:b0:e6:c4:34:fd:26:f4:a1:45:35:24:07:90:eb:74:62:
08:be:97:84:e5:a3:6d:b1:fb:80:d5:e7:aa:2c:3a:c1:5e:14:
68:9f:0b:0e:57:88:dd:fe:c3:3f:33:41:1a:e7:c5:0f:c5:dd:
5e:f0:f2:cd:f0:8f:b3:18:a3:76:a5:69:66:c6:60:4f:6c:92:
46:15:76:fa:a8:8a:13:08:8c:45:ae:c2:9a:71:8c:be:ef:2b:
12:c6:cc:ab:f1:7d:b8:60:2b:07:85:f0:de:1c:e8:61:80:ac:
c1:62:37:15:d5:e4:ee:ba:33:87:99:3c:ff:c7:36:10:bf:d6:
0b:db:a6:79:c4:a4:18:c6:70:16:a8:59:9b:5e:0c:7e:1c:c5:
50:fe:dd:6d:73:95:c7:54:d1:94:76:30:14:7d:de:4c:c6:1c:
e5:93:74:97:14:71:af:c8:8a:95:6e:24:91:ea:45:df:27:5b:
51:49:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:44 2025 by rpki-client