Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/864cdd22-92af-36bf-9b72-1c5adf079a80.roa
File: 864cdd22-92af-36bf-9b72-1c5adf079a80.roa (raw, json)
Hash identifier: Y5dTchAu7EABAK0zYIMQWgZXRPrx1rh2u7YfVeuxm2U=
Subject key identifier: E9:08:5E:C2:A1:57:F7:91:69:19:35:D3:76:FD:4F:E5:EC:D6:9F:58
Certificate issuer: /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial: 010D0C9F432858486C2B0D46D2004568A6C24F80
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/864cdd22-92af-36bf-9b72-1c5adf079a80.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 7018
IP address blocks: 104.160.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0d:46:d2:00:45:68:a6:c2:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=10d17f7c-18ef-4076-bbad-cbbae8d63aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:a2:62:00:97:fb:d5:3b:13:97:f8:cc:48:
99:67:03:62:45:c5:34:b7:49:e8:4c:fc:65:f0:48:
f6:da:12:53:f1:ab:b4:88:2e:1e:71:56:d1:2e:f9:
8c:48:d0:e6:cd:09:5f:fa:7d:c8:f8:d3:32:e7:5e:
ea:cb:3b:4f:8f:a4:78:ac:9b:44:82:50:69:1f:db:
3d:1f:34:c6:da:a6:69:90:06:64:69:36:eb:24:e5:
10:8f:0a:98:22:3d:6c:3f:d4:4a:d1:88:1a:dd:28:
65:98:2e:c1:9b:b9:f8:31:7d:95:86:9a:90:31:dc:
f1:bc:23:5a:6c:c0:66:3a:93:1a:e3:5f:77:a5:51:
76:b0:d9:b5:a3:d0:d7:f3:d9:ca:77:f0:a3:25:13:
61:ff:6a:f8:69:90:e1:32:9e:a2:d7:6b:28:fb:bb:
c4:99:d2:7c:31:2d:39:68:0c:6e:e9:d1:3d:d9:25:
36:09:9c:f1:98:a3:bf:e8:cf:cf:c7:16:4a:79:22:
24:b6:8b:96:d5:e6:86:28:d2:d2:6b:b9:64:22:ac:
e2:36:1d:39:73:27:25:23:d4:ce:93:95:14:3f:23:
a2:a4:51:be:fc:9f:73:28:16:a8:32:00:83:cc:9b:
19:bd:e0:b1:b3:c1:ec:9e:8a:69:bc:ce:cf:59:4d:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:5E:C2:A1:57:F7:91:69:19:35:D3:76:FD:4F:E5:EC:D6:9F:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/864cdd22-92af-36bf-9b72-1c5adf079a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
X509v3 Authority Key Identifier:
keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
sbgp-ipAddrBlock: critical
IPv4:
104.160.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:dd:39:fb:17:5b:14:fc:0c:b9:1a:25:ef:30:a4:a3:a0:c2:
c1:c8:00:47:06:ae:5b:8f:5c:48:f8:8c:6f:db:1f:3b:2b:06:
36:65:db:1a:4e:ac:cb:69:54:56:31:93:06:16:e9:b2:bf:96:
47:7e:d6:b4:00:42:4c:83:f8:94:38:d2:dc:d1:e4:03:0f:69:
69:30:18:5d:a8:95:66:51:d7:fc:b6:b5:b4:ca:c0:39:41:6f:
3b:52:5b:09:c0:12:4b:5d:24:76:62:0c:38:90:d2:b9:27:ce:
1d:46:f0:55:36:dc:08:5a:34:7d:1e:4b:4f:42:72:42:91:ae:
1d:bf:d9:46:9a:2f:30:11:a9:85:17:82:0a:4f:26:c6:a9:14:
3c:0c:12:db:88:c4:33:9f:03:84:f0:02:16:1d:c8:36:f2:53:
73:63:28:96:2b:f4:5f:10:59:97:e5:17:93:59:f8:7e:ac:b5:
bb:e0:37:da:33:42:37:45:0e:68:cb:f9:6d:46:29:01:fe:7f:
87:cf:f3:e6:04:1e:c6:f5:27:34:54:be:67:3b:8a:8d:2b:02:
b1:5b:47:da:ff:99:ad:21:32:9b:42:c1:d8:07:44:39:b4:ba:
72:32:e4:76:52:fb:c0:99:70:ea:08:75:63:52:a3:1d:7a:f8:
f8:bb:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:06 2025 by rpki-client