Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa
File: 272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa (raw, json)
Hash identifier: HV4U5rRZxjAZGGgn7NHnI+OcqV/aLS6MJGjDYeqQZaQ=
Subject key identifier: 18:7C:FA:03:12:D4:EF:9E:1F:19:D1:1B:4A:55:4D:FE:98:53:D4:1C
Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4
Certificate serial: 010D0C9F43285849393E6DC3F9B388D8769BFEC0
Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 13657
IP address blocks: 104.242.128.0/19 maxlen: 24
104.242.160.0/19 maxlen: 24
104.242.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:6d:c3:f9:b3:88:d8:76:9b:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=a1d4e4d0-ed4f-4578-b33d-e0df2710b7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:90:09:92:c4:9a:ac:d7:83:9c:11:d1:bc:
9f:b1:66:f4:8c:25:eb:67:60:44:71:cd:94:d4:02:
14:30:07:5f:ef:42:7c:1f:46:cb:5c:d5:f0:86:56:
89:a4:9a:41:64:60:c8:e5:bf:89:01:c0:66:25:c9:
6d:e4:d5:10:05:de:f0:49:79:1b:c2:a6:b5:5e:63:
d2:73:e6:79:4b:33:cc:e9:a5:08:b5:84:2c:65:32:
d5:ff:28:c9:c1:0f:87:7e:68:36:34:ed:e0:2c:c8:
6a:29:63:51:40:f8:7d:33:3a:8d:a6:e0:ce:d5:ea:
aa:0d:86:a4:8c:e6:3c:28:54:11:c2:5e:cf:75:d0:
a1:44:cf:cb:2f:e9:9f:a3:f0:4e:4b:12:32:45:69:
cb:f6:dc:72:92:bd:fe:94:92:32:3d:6d:58:6e:4c:
87:aa:02:b1:df:a8:28:0d:ad:23:44:78:61:ad:80:
52:87:d6:4e:64:91:ff:ed:bb:b8:36:24:ea:a9:95:
e1:ea:a1:ff:5b:36:8c:1c:a4:b6:77:c2:b2:f9:bc:
66:cf:2f:10:65:86:40:11:8c:49:b5:08:38:e7:82:
8f:5c:d0:9d:2c:a2:e4:2b:f9:4b:67:0b:fd:d0:fb:
a5:aa:71:2a:2e:a6:e4:a0:59:a2:8b:e7:8b:0c:11:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7C:FA:03:12:D4:EF:9E:1F:19:D1:1B:4A:55:4D:FE:98:53:D4:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl
X509v3 Authority Key Identifier:
keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
sbgp-ipAddrBlock: critical
IPv4:
104.242.128.0-104.242.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bd:9e:85:98:0d:d0:69:19:e3:81:8e:c1:71:44:85:83:79:
86:2b:dd:d8:b3:6f:e3:27:2c:dd:ce:4c:b6:2f:d5:8e:16:3f:
f7:f6:3d:22:c9:d7:de:c8:f9:bb:ce:52:c8:e1:1d:d6:fe:0d:
9b:87:c6:af:ba:5e:f1:79:00:5b:54:a1:40:49:57:3b:b7:3a:
e9:77:ea:31:e9:e4:3b:fe:b9:6f:e6:19:ea:52:ce:38:40:2b:
68:90:10:f0:ba:00:28:26:ce:26:a4:0b:65:c4:74:78:70:a9:
b2:1c:2d:a2:c1:c9:b5:54:d5:cb:c9:70:e0:7e:ee:37:9c:d6:
98:87:2e:19:db:5e:51:c5:98:ec:24:52:3e:f6:5c:26:13:9a:
88:5c:96:e8:44:8f:2e:47:5c:43:73:93:32:66:e5:c8:3f:92:
40:65:04:74:7a:e3:af:7c:33:41:ee:03:68:9a:bc:7f:fe:7a:
bf:eb:39:9d:1d:df:bd:28:bc:26:fe:5e:53:4b:7a:b3:70:6f:
4e:5b:f0:95:7c:e3:ba:58:f3:61:09:94:54:fb:b6:fc:79:99:
25:9a:1e:20:69:ef:e9:6e:61:b3:b0:b0:ee:eb:53:e4:58:1f:
1f:45:a2:dc:c6:c1:49:f9:0a:7e:e9:63:0d:bc:72:46:4a:7b:
67:35:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:59 2025 by rpki-client