Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa
File: d237ff63-e29a-334e-8728-d9c0b2284c14.roa (raw, json)
Hash identifier: 9XuvemVKEQVl/jrojw2eGyHl0fB/lzjCvCfPr4zjSJU=
Subject key identifier: A7:3F:2D:78:2E:19:6C:4D:71:B0:01:7C:23:1C:2D:75:BD:48:4B:B4
Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial: 010D0C9F4328584886B0800C2D0E3C4E0FE01B00
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 26512
IP address blocks: 104.244.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:80:0c:2d:0e:3c:4e:0f:e0:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=725dd3d3-52fe-4b7c-b6cd-aaa45cee001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:c7:52:97:81:19:44:0b:84:2a:1e:29:aa:
a2:10:98:80:8c:d9:ec:ec:83:71:fc:a8:7f:3b:3b:
7e:bf:a6:bb:59:fb:2f:86:82:49:b4:89:b2:66:fa:
1e:ec:f5:25:c7:b0:9b:09:b3:6f:ea:9f:cd:0d:11:
57:ba:ea:4d:d9:b3:c4:79:08:8f:9a:c5:6f:61:f3:
55:75:07:81:1e:cd:ec:98:09:58:b6:54:77:01:ea:
01:1a:8c:14:fd:53:2d:ab:53:85:3f:cc:45:46:25:
ba:bf:46:dd:64:26:2a:80:e6:ca:06:e6:62:51:d6:
9c:71:89:e1:23:9b:7e:e6:a6:c5:8a:9b:b6:f3:2b:
07:5d:d4:fb:5f:de:a0:47:7e:87:38:95:12:8f:8c:
5e:32:80:bf:62:64:57:4f:51:7b:e2:b8:0b:75:e9:
9e:ee:aa:09:a6:33:be:11:dd:21:4c:0f:24:78:f4:
27:66:24:e0:a8:c6:8c:43:9e:5d:bd:20:c1:8a:5c:
6a:1a:cd:3c:f1:6f:5d:b3:1e:36:5c:63:ea:10:6b:
2b:32:5f:6d:b6:07:a6:ba:5a:95:74:8b:88:bc:83:
58:39:09:9d:00:ed:1e:cd:47:29:d1:9d:a3:99:66:
d6:3f:48:54:a0:33:bf:d0:f2:fc:40:6a:a7:fe:3c:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:2D:78:2E:19:6C:4D:71:B0:01:7C:23:1C:2D:75:BD:48:4B:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/d237ff63-e29a-334e-8728-d9c0b2284c14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
X509v3 Authority Key Identifier:
keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:9c:3d:7c:b4:c6:3c:05:03:89:4c:5e:77:f9:8d:a1:9c:38:
e2:7e:68:90:fd:6d:f8:6d:ab:f2:ba:fe:6b:c1:0e:96:3b:da:
fc:3a:06:ad:3d:e6:f5:e6:31:a0:23:45:18:06:56:14:fb:95:
68:3e:bf:3c:17:27:71:5e:ff:da:26:db:cb:03:d3:4e:0a:ec:
8d:36:4b:79:69:2d:e9:db:db:b6:d5:d1:03:e3:18:47:30:03:
fe:62:ab:b3:52:0f:51:6d:b7:39:be:1f:3f:12:8b:97:87:a3:
4a:37:cd:c5:86:e7:96:ea:fd:71:21:60:20:3e:5b:47:1b:cc:
52:b9:48:a5:f3:f6:9d:ac:79:d7:43:7a:d7:d8:28:63:81:de:
54:63:38:a5:7d:e9:9e:2a:38:08:10:dd:f2:13:81:e2:41:49:
e6:af:fa:2b:6a:9f:54:34:de:02:a3:4c:50:60:26:e0:95:39:
c6:2d:ad:89:93:2e:d7:86:79:03:ec:1b:5c:0f:62:a7:2e:97:
c8:c2:0d:38:0b:33:e9:6b:19:5a:d2:50:f2:74:33:9b:14:8a:
3f:38:fd:54:96:cf:fb:06:82:ed:73:ac:58:d3:e5:8e:e2:b8:
90:6d:9e:99:be:85:6c:02:5f:87:a0:ed:28:2e:5e:c0:e6:6c:
50:77:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:43 2025 by rpki-client