Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
File: d0d5c255-62d5-3841-a89f-c97638122db1.roa (raw, json)
Hash identifier: 4NGA9WI9/EpBmQPPgZR2xVwvuq4IfdVwitnTuF3rLkg=
Subject key identifier: 27:89:13:B5:E0:48:91:DF:B3:D6:4E:72:72:FF:C8:81:7E:49:2B:19
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F43285849244E7E47FAB8D9ED572AECE0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 397373
IP address blocks: 104.152.222.0/23 maxlen: 24
104.255.168.0/21 maxlen: 24
155.254.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7e:47:fa:b8:d9:ed:57:2a:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=20cdc9d3-ef3c-441f-9c18-4cfb759a4259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:c5:9b:a1:aa:78:4c:50:27:99:f8:6f:ee:
83:b3:21:fc:83:44:b4:d0:4e:1d:c7:10:01:cb:45:
49:98:16:6e:15:fd:97:03:b4:36:8d:21:95:44:e7:
3e:3d:b3:9c:5e:9f:a2:c5:c4:32:52:fa:b6:98:46:
4f:69:c0:5e:18:21:6d:25:e0:80:d0:1a:f7:38:bd:
0f:76:3e:d5:65:a5:ef:6f:f6:19:7d:27:af:ae:e7:
c4:8b:1e:04:7c:14:11:68:d5:7b:7e:58:cb:6d:1b:
2c:d7:ae:b8:0e:54:1c:eb:cb:ce:fd:de:b9:be:a7:
7e:3e:84:ee:5a:df:08:c7:e2:83:de:f8:02:b5:01:
8d:cb:b5:61:5b:4a:2d:55:eb:9c:56:9b:e9:bb:19:
a2:5c:1f:01:86:80:5b:e6:b8:5b:de:8b:1a:85:35:
22:11:55:a9:31:36:c1:00:d2:37:f2:30:b4:b4:70:
fe:a2:89:b8:2d:3c:cb:dd:c1:01:9e:3c:96:96:20:
63:02:4f:d8:38:d2:b5:00:bd:71:20:37:1b:9b:22:
57:60:1a:92:88:d7:dc:ad:93:2b:85:d8:40:ca:47:
8b:6b:c0:dc:62:13:de:e1:fc:33:3f:3b:d9:e2:5c:
53:bd:47:ab:bb:fe:b3:ad:f1:b7:2c:9d:63:8d:61:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:13:B5:E0:48:91:DF:B3:D6:4E:72:72:FF:C8:81:7E:49:2B:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.222.0/23
104.255.168.0/21
155.254.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:83:03:f8:68:19:83:8b:5b:89:19:6e:ca:0d:20:3c:55:a5:
98:fe:36:4c:03:79:62:70:00:80:e3:a0:d3:62:dc:ee:c9:c3:
d1:ad:24:5a:07:17:d6:99:81:19:bf:8b:a8:4e:f8:d2:80:9e:
53:1c:19:89:1b:7f:5f:2b:95:b4:44:c4:4f:40:dd:8d:6a:59:
4f:ab:85:55:09:8c:ac:7a:95:9d:35:0c:d0:50:a7:e2:47:48:
b5:52:07:b0:cb:30:11:d3:26:3f:80:e4:94:4a:c7:fa:67:fe:
c1:2a:40:a9:04:3c:fd:aa:b5:30:2d:50:75:75:9a:69:f1:7b:
9e:37:df:e2:e1:3b:01:9f:4e:e8:dc:e1:33:3a:c4:38:61:36:
cf:72:db:c6:53:39:5c:94:7d:c8:69:03:14:2e:82:5a:6b:0e:
49:18:07:4b:04:22:a3:39:57:ab:a8:61:e2:91:d8:4c:58:2c:
72:28:26:41:0c:bb:d6:23:76:a0:d4:d7:65:34:9f:49:61:b9:
cf:10:df:fc:8f:39:44:16:b0:b2:9c:9b:ff:3e:b8:5b:21:17:
32:1b:a0:c8:12:94:33:9c:91:d6:24:cc:2c:38:bf:6f:13:1d:
d6:24:6a:36:b5:c7:da:80:08:f8:63:33:34:aa:c3:86:3a:c8:
fe:83:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:25 2025 by rpki-client