Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa
File: 4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa (raw, json)
Hash identifier: Szv1khKppG9ce5WceoJtmd90KY/1/q5H7xqYJtKMFx0=
Subject key identifier: 8C:2E:8D:AC:07:49:42:45:E5:3E:AA:B7:B1:9D:E3:35:33:15:BC:9F
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F43285849244E7808C7351BA5F839F390
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 13768
IP address blocks: 104.255.171.0/24 maxlen: 24
104.255.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:78:08:c7:35:1b:a5:f8:39:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=54e7b8db-a840-4d69-a607-e1914d21800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:3e:14:3f:7d:a4:4f:8d:5f:c0:5c:00:d5:
8e:9c:2c:c3:5b:0c:22:08:24:db:36:92:23:91:5d:
9f:50:ea:59:ae:cf:71:68:42:16:1b:6f:23:04:6f:
15:73:1e:78:63:d4:88:ae:27:cb:63:6d:c7:ff:57:
fe:1f:91:48:58:c2:a9:91:83:66:25:3e:96:fd:52:
f6:30:cb:23:ac:e0:19:9c:b0:64:2f:87:cf:cc:1c:
20:4b:ff:73:00:a0:9c:44:93:02:fa:eb:8f:a4:7d:
d4:09:1b:be:e7:d9:e2:06:b3:87:92:e9:49:91:02:
6e:4c:59:df:40:eb:0b:82:df:7e:de:5b:74:23:10:
70:ef:ba:b1:d4:b2:62:71:4c:ca:ad:2b:06:6e:35:
4b:e8:3e:a1:62:60:8e:17:11:9f:89:08:1a:56:9b:
78:eb:05:49:4b:b8:d1:3f:06:f6:07:c9:48:f4:7c:
41:6d:84:37:66:88:7c:d6:3e:a7:96:11:55:92:1c:
2d:41:38:a0:b3:ba:d6:45:eb:6c:b4:02:76:96:56:
8a:5f:23:94:1a:56:84:ac:44:09:2a:0e:61:de:b8:
46:52:2b:fc:ee:2d:da:db:11:e1:6e:b2:27:60:a2:
7d:a6:ca:68:8c:98:32:17:31:e2:bc:79:99:13:c2:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2E:8D:AC:07:49:42:45:E5:3E:AA:B7:B1:9D:E3:35:33:15:BC:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4cc018a1-0336-3af4-ba79-2cbfc3a783ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.171.0-104.255.172.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:76:b2:3c:f2:95:c9:fe:80:22:1a:64:2f:38:84:07:02:91:
a9:b3:3e:ba:60:f8:72:75:e3:79:ea:0c:1f:0a:99:7b:3a:bf:
5b:bb:4e:47:d6:1c:7c:54:c3:c2:7a:07:dd:b8:c8:5d:c6:eb:
88:a0:77:38:56:27:0e:ba:2a:5f:b0:f9:6f:ce:36:00:1f:e4:
eb:cd:3c:28:ef:f1:37:c6:a3:0d:70:7a:0c:eb:af:43:36:eb:
fa:da:f0:83:44:59:1f:29:e0:c4:2b:1a:92:1c:25:d6:1f:e4:
e7:58:90:01:0a:c6:97:69:39:74:79:73:9e:b7:71:91:88:4a:
7e:55:bb:c6:61:50:c1:37:21:0b:0b:87:13:e3:ce:93:fa:5d:
48:e2:38:20:a8:79:ee:8c:50:dd:ca:11:87:d3:13:42:d3:53:
2c:de:c5:90:fc:67:3d:59:eb:f7:a8:81:33:6c:af:56:9f:28:
9d:db:92:e0:5b:57:3b:94:4a:fe:30:79:ac:e9:32:9a:e7:a7:
28:88:49:03:bc:5a:43:94:35:10:3b:37:5e:7d:28:88:04:b5:
75:7b:af:ec:3a:ef:ed:c3:b9:3d:7b:76:30:d5:b7:3a:f0:4f:
1e:3d:df:69:c6:78:b3:e2:5f:03:45:4a:13:66:a3:b6:bb:e6:
22:b1:ad:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:12:40 2025 by rpki-client