Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa
File: 9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json)
Hash identifier: KXhKe2Fur6Q86ynqaCXWd4eDVBC1y0goqmHfYUZg0NI=
Subject key identifier: 07:14:BE:7E:21:E3:B5:27:76:D5:B3:AB:92:4A:B6:F5:CF:A7:E8:7A
Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial: 010D0C9F43285848090FBEC692EA52315E4AF500
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 14603
IP address blocks: 104.237.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:be:c6:92:ea:52:31:5e:4a:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=a47c8e7c-5fa2-4b70-9bdd-a07e59a78a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:de:ee:a9:3b:3d:5b:87:50:a9:57:7a:09:
cb:04:36:00:ea:c0:ce:5d:7f:91:86:d1:39:34:a3:
b0:a6:44:53:b9:5c:be:e7:58:a7:56:1c:b9:72:c2:
6c:4a:99:28:79:10:9b:f6:bf:22:b1:53:ae:2b:d7:
21:fb:99:75:ae:14:95:9b:9f:b6:6e:fd:de:55:6a:
83:63:af:30:ab:7c:90:2b:9f:53:35:c2:51:d7:b0:
1a:a5:69:d9:91:07:38:67:b9:46:bd:53:ba:36:33:
53:62:49:50:ac:b9:e8:e9:95:64:12:c9:4f:73:d2:
dd:d7:9f:55:6c:67:d1:9e:f7:44:8e:36:e9:92:9a:
c5:90:92:05:39:e3:13:28:3e:79:de:98:32:65:91:
49:6f:ff:14:fd:07:e8:39:d3:a1:14:2f:af:6c:d0:
d0:dd:34:d1:c3:7f:65:14:dd:04:18:5b:7d:bf:e1:
ed:71:4b:f8:79:38:60:83:a0:bd:b7:4f:46:c0:1f:
9b:86:2c:f9:6c:d9:46:65:04:01:3e:bc:4b:87:50:
59:e1:e0:ac:84:fb:63:a6:49:2c:69:78:e8:6b:da:
d5:b5:5d:01:50:fc:e8:49:a6:61:08:5d:4b:4c:9b:
b2:d0:37:81:41:5e:0c:1d:61:2d:78:75:e9:aa:8a:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:BE:7E:21:E3:B5:27:76:D5:B3:AB:92:4A:B6:F5:CF:A7:E8:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
X509v3 Authority Key Identifier:
keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:26:57:2f:6d:15:98:f7:49:bd:55:8b:e1:44:3c:ea:cc:45:
2c:8a:6e:ee:e0:d7:82:4e:67:1b:3b:f8:dd:44:f7:d3:cb:58:
02:3f:82:01:3d:bb:5e:8d:e2:12:9e:24:25:cd:ed:cd:88:61:
4e:c5:f5:a8:0b:b8:68:d2:dd:78:3c:78:e5:10:55:c6:59:94:
b3:a8:06:2b:23:dd:09:1d:b2:76:85:e1:ae:75:3f:14:d5:87:
dc:fe:fd:f4:ef:52:c7:f5:06:9c:5a:a3:44:d8:d8:b0:2d:c6:
06:d9:53:55:3a:cb:5f:4d:bf:ba:18:2c:24:9a:ec:f7:17:7b:
7c:14:5e:c2:a7:8d:34:69:66:a8:09:0a:c7:c2:6f:13:e6:f3:
72:be:e0:f5:a0:28:61:7e:94:d4:4b:7c:91:da:7c:09:79:67:
0b:3d:88:18:3b:5d:72:1b:46:f5:9b:37:e2:49:06:95:d3:de:
bf:74:11:c2:fa:2f:fd:59:dc:4e:fc:7d:94:bb:69:e0:b5:ca:
93:c8:c9:84:cd:4d:fa:54:b4:52:b3:0c:23:a9:07:d1:49:f3:
07:ea:3c:15:4a:ff:89:07:85:d4:60:98:93:d0:ae:2a:03:e3:
b9:93:10:d8:49:e2:fd:4b:55:62:0d:90:5f:b4:f8:ab:92:e1:
9d:df:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:13 2025 by rpki-client