Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
File: 77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa (raw, json)
Hash identifier: HW9xmk3uGn2xOi8Z8RF3JSL2CMoFbUO/Rp7z5e4zxAw=
Subject key identifier: B2:A8:92:78:22:66:FD:91:EF:25:EB:A4:AC:8A:B4:DD:29:32:AB:CC
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F432858485E35B269773AD05D3E6BFC00
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 20278
IP address blocks: 104.128.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b2:69:77:3a:d0:5d:3e:6b:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=ffdc4d5a-91fa-4766-a590-215e93469a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:d3:07:fb:88:91:d2:ad:9a:2f:3b:54:0c:
de:47:35:fe:94:5f:dd:f6:31:cd:de:4d:13:4d:f4:
6a:4b:bf:29:d3:17:3c:f0:fb:3b:32:f8:78:0e:be:
49:4a:39:1c:df:e9:d0:46:73:72:b5:98:0f:e5:95:
e4:cb:0f:5e:07:9e:de:dc:61:85:2c:7b:c4:be:a6:
5f:fd:86:c9:cc:40:fe:ab:9b:41:28:d6:fc:15:bc:
91:f7:4b:e5:1f:d3:50:2e:20:17:e9:60:fb:2d:9c:
9b:94:27:bf:f8:2f:7f:14:fe:17:a6:5a:77:a0:7e:
00:a9:ba:fa:ce:b2:4a:6e:c0:c8:10:b5:44:6e:24:
c3:1b:71:03:1f:23:f9:6b:22:19:10:31:dc:84:10:
02:a0:26:3d:af:45:34:2b:81:58:bc:15:91:2f:90:
b2:2e:bc:03:fe:52:d6:6c:18:89:59:cb:83:18:f8:
dd:ad:a6:40:d3:fc:f1:e7:a6:d2:d7:85:f0:f3:95:
a7:2b:f3:89:c0:a0:61:01:2b:2f:0f:b7:c7:36:9a:
b0:3b:27:46:a9:a8:52:ed:b1:b7:1f:84:e2:0d:52:
fc:17:84:f8:a5:d3:25:50:e8:9c:62:10:53:e9:b0:
b9:f0:57:df:d4:6e:c7:13:7e:07:3c:c9:4e:96:e7:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:92:78:22:66:FD:91:EF:25:EB:A4:AC:8A:B4:DD:29:32:AB:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:46:e8:c5:52:d0:c3:44:3d:44:e9:8a:ee:ae:9e:8e:87:66:
19:cd:9f:67:05:a2:2c:25:6b:e6:87:b9:1d:ec:45:84:0c:97:
57:d1:f4:66:71:4b:38:ec:86:d1:1a:ee:58:54:5a:8e:da:9d:
58:a2:a0:8a:69:b8:1e:00:d9:82:78:64:ec:a9:43:7d:c2:e7:
2e:77:dc:7a:82:b8:54:1e:bf:d5:18:45:44:e0:40:9c:f7:74:
aa:c3:02:24:78:86:b3:4c:40:ae:be:be:ce:4f:cb:b6:58:57:
78:7e:04:0f:26:ab:5f:b8:39:c4:e9:ab:8d:d3:30:25:79:21:
e1:c1:e7:07:f8:6f:b6:7e:f7:31:9e:af:0f:55:30:4e:08:ec:
3d:5c:fd:6b:70:3e:3c:08:28:cf:09:a7:e6:1d:21:40:0a:e6:
da:7a:b8:36:13:52:f8:b2:49:1f:cf:57:b0:c4:64:13:49:38:
85:da:31:75:9b:b6:cd:e0:19:57:d5:11:f5:04:a8:13:3d:6f:
06:28:28:cf:e0:31:22:e4:16:d4:3f:77:f2:df:fe:70:4c:86:
c8:1a:8e:6e:38:43:14:e3:dd:d2:65:13:43:96:ff:d9:7b:4d:
f0:67:d4:5a:a2:1d:d7:67:19:28:fa:23:3c:76:e1:9f:8f:95:
dd:47:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:29 2025 by rpki-client