Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
File: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (raw, json)
Hash identifier: bZWCRFJyhI5vBpB20g47KwDxsykDOvC96m49s4D7hFQ=
Subject key identifier: 01:16:AB:7F:D1:92:03:7C:D3:85:17:20:7D:95:F7:6C:39:14:29:32
Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead
Certificate serial: 010D0C9F43285848E59BC733460574A227594500
Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 63447
IP address blocks: 104.245.200.0/22 maxlen: 22
204.107.204.0/24 maxlen: 24
2602:ff98::/36 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c7:33:46:05:74:a2:27:59:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=16b3af0e-be4f-469f-a935-3fffa9ff2baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:c2:1e:cf:55:14:58:d2:ed:b8:9d:87:62:
00:e0:28:f5:85:20:19:b6:92:67:3a:31:9d:42:b3:
26:af:62:df:e2:fd:2f:b9:a0:53:e7:ac:a5:9c:82:
56:d8:64:f2:91:f2:ca:e3:bb:fb:e7:6a:37:55:18:
8d:3f:e7:0e:db:a2:ef:70:5c:d8:73:f3:ce:f9:2a:
52:0f:cb:85:c6:57:ca:66:af:af:07:dd:91:2e:4c:
be:8e:4c:e3:b9:81:58:f0:49:db:d8:94:4d:d6:ba:
62:9c:e0:e8:ce:d5:27:f6:3c:04:ae:d6:39:45:92:
e2:87:a3:07:5b:42:e1:47:1d:82:0a:20:9b:92:67:
58:0c:31:78:bd:d6:e3:5f:62:83:0d:6a:c9:e6:69:
40:eb:61:96:49:70:7d:ae:30:24:dc:5a:a6:58:13:
72:b9:62:4c:ab:9c:19:8f:ff:7f:f7:7c:9b:86:8b:
62:e8:88:8d:51:2e:f9:76:98:bb:48:54:a1:55:cd:
83:1a:79:65:04:19:ce:04:e5:1a:4b:95:dd:93:1b:
3a:9e:ea:ac:f6:1d:17:9d:44:bd:2e:47:9c:ca:3e:
2a:5c:42:2c:33:99:84:60:7b:fa:3b:9a:6e:7c:5f:
68:aa:8c:9e:17:74:02:45:48:92:ac:d5:64:0d:e8:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:AB:7F:D1:92:03:7C:D3:85:17:20:7D:95:F7:6C:39:14:29:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl
X509v3 Authority Key Identifier:
keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.200.0/22
204.107.204.0/24
IPv6:
2602:ff98::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9d:f2:6e:01:cc:f1:7b:0c:56:61:83:b9:72:a1:c9:dd:11:
c2:7c:2f:7c:33:78:b1:ea:29:df:ee:a6:95:4b:81:a8:23:ef:
d4:41:28:1d:e9:74:67:0f:99:a5:85:76:07:ce:70:c6:f5:df:
6c:18:59:1a:63:e9:d8:c5:12:8a:79:ed:1c:5f:f0:b8:01:8f:
ca:a8:cf:d8:43:af:9e:6c:ea:f5:a8:41:f9:e9:65:b1:0f:e1:
8d:e9:20:f8:db:b0:0a:55:f5:f7:13:a9:ce:19:a9:a4:2b:83:
f3:3c:72:da:35:84:96:c7:88:dd:57:53:ba:b2:4d:60:96:ed:
f0:73:76:81:43:3d:d5:f7:83:3c:79:46:20:e7:67:f0:e5:1c:
55:7f:0a:05:2b:43:34:55:3f:fa:0f:12:d4:34:e5:43:4d:ac:
bb:ae:79:2a:05:00:26:90:fd:f6:18:b5:8b:63:9b:0e:71:8a:
75:dd:aa:5e:ec:c6:6f:a0:fb:aa:56:94:7f:6a:d2:35:b1:e0:
ed:a4:60:9c:15:f6:6b:a8:9c:bf:dc:a2:78:1d:7e:9c:90:aa:
33:32:b1:d4:9b:f1:13:bd:72:86:91:47:cf:b2:79:9f:57:a6:
0f:7e:ec:e5:46:ae:70:d0:82:22:8e:a2:86:5d:ef:fc:7f:a1:
f6:f1:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:08 2025 by rpki-client