Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
File: 1fb97d52-90b2-3f47-b40b-69c650bf9738.roa (raw, json)
Hash identifier: XU7Kr8/5Drn0v6kC1CDqrmQbtD4vX9+PBGsfhuRuNfA=
Subject key identifier: BA:9E:9C:B0:63:D5:DF:EB:89:C4:CB:41:25:2B:CA:87:76:F2:C9:2D
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F432858485E35B29B4EF83FFB0466D820
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 9009
IP address blocks: 104.128.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b2:9b:4e:f8:3f:fb:04:66:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=e0ec607f-76fb-47c7-ad94-04d920ef10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:e1:cf:4b:9b:d5:0a:0c:21:6e:b7:6d:12:
00:88:d7:f6:e5:00:2f:df:8a:f2:67:14:75:d9:24:
55:d4:b4:09:c5:e5:02:a2:eb:c3:d3:be:7c:5b:de:
62:8b:1a:ca:09:13:c5:da:50:7d:b4:83:d3:ef:69:
e7:7d:c6:da:23:a6:56:1c:1e:3b:51:d6:eb:a1:98:
a4:fc:48:19:6e:4d:6a:4e:07:ff:06:be:08:4f:00:
2a:a3:dc:20:0b:93:bc:c8:a1:08:2a:0a:48:d2:d3:
35:99:dd:3b:04:35:93:7e:45:e9:49:ba:d4:87:ee:
61:fb:18:05:f1:96:da:98:35:1e:c2:bd:df:52:2c:
cc:30:32:58:37:2d:fa:03:20:16:c7:71:73:91:99:
67:30:f9:b1:f9:23:ff:6e:eb:03:37:1e:dc:95:21:
b0:ee:0f:c7:f3:ca:97:ad:7c:a3:e7:9a:96:47:63:
6f:3f:be:aa:b0:bd:41:cc:9e:93:32:d2:47:1f:22:
87:04:36:22:2b:75:62:64:9b:88:60:96:2c:89:77:
50:1a:a0:87:96:e0:b5:d5:89:2c:b6:78:7c:e0:b9:
e1:62:d6:0b:8d:07:ac:a6:d4:40:b3:4e:56:b9:53:
f3:1b:22:c1:fc:88:1a:71:73:35:70:70:08:7f:72:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:9C:B0:63:D5:DF:EB:89:C4:CB:41:25:2B:CA:87:76:F2:C9:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6c:16:33:b8:d6:5d:a6:51:74:da:39:cf:79:13:54:0a:10:
3b:98:60:b9:76:0a:7e:dc:ce:3a:b6:66:02:c6:3a:17:82:42:
09:aa:50:56:0d:6b:77:cb:e8:b8:17:71:49:83:d7:0a:63:b2:
e5:64:2d:19:18:0f:3c:f3:09:e9:4f:bc:ec:80:62:d2:bd:6b:
94:09:6c:34:5c:19:16:8b:33:71:97:db:98:19:b8:36:5e:e9:
fe:35:bf:5b:c8:27:4f:8e:cb:19:50:60:2c:3c:42:9b:50:99:
56:33:8b:6a:19:81:9c:a1:78:31:e9:7a:83:c6:09:d3:30:90:
c7:39:28:b4:0f:0f:4c:ee:c6:16:5a:7f:46:c4:18:97:42:7e:
50:78:94:43:3c:fc:a4:5c:a0:bf:29:d2:11:f2:af:42:eb:7b:
10:3e:5c:8e:62:9e:05:0b:d7:f2:a7:b6:d0:c1:0e:c8:dc:3b:
40:67:9c:40:44:3a:04:58:10:66:2a:85:27:a9:04:c6:d7:f0:
eb:a5:5a:a9:59:75:c8:b9:c4:62:46:98:a9:92:0a:60:5d:8f:
66:a5:2c:b5:6d:7b:6f:34:91:a7:60:54:7c:4c:bb:a3:f8:63:
11:14:02:ec:79:6b:ec:08:55:55:12:f8:0d:f3:fb:22:8b:28:
c5:c2:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:26 2025 by rpki-client