Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa
File: aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json)
Hash identifier: MvAG7E7G6b6RPyKsQBJtSEhEXsCx9eFVDXeWpwts380=
Subject key identifier: 41:9E:95:F9:FE:62:93:BE:D1:7B:BB:12:44:C0:1E:18:84:05:5A:6E
Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial: 010D0C9F43285847EE8A3CFA74DA0D9524AE2B00
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 16509
IP address blocks: 104.237.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:3c:fa:74:da:0d:95:24:ae:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=1560e569-a95d-4ae3-b252-2a0c15b908f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:05:c1:41:32:e7:b9:0b:8d:23:d9:84:11:
ed:1d:37:37:1c:48:d5:5a:f7:d2:7b:5c:02:01:47:
74:95:93:8a:a5:98:de:1f:d9:7f:bd:a6:b3:ab:6f:
ff:f4:c0:d4:51:c8:27:10:77:53:d9:09:c4:3e:3d:
a6:97:61:66:52:82:17:f1:f0:cb:5a:7f:8a:26:16:
9d:ca:18:4a:4d:bb:81:7c:41:3e:b2:33:0f:17:7a:
ec:5c:63:92:d5:75:75:54:86:cd:84:63:40:77:ed:
3a:8e:87:7a:cf:e1:97:5d:dd:6d:0f:0a:2a:74:68:
37:e2:1b:88:ff:85:25:f9:99:3d:d6:72:39:5b:7b:
e6:79:d2:0f:ab:cc:1d:30:7d:86:d5:68:74:f8:3e:
42:f4:24:5a:2b:2d:15:a2:07:40:2e:fc:d7:56:21:
48:95:5d:99:c4:8f:d1:fe:ca:94:81:c2:11:1c:51:
87:9a:02:29:6f:75:5e:a1:de:ca:69:cd:20:8f:e8:
a1:9e:72:0e:e6:a3:d2:e5:9e:d6:54:79:6a:04:6d:
ab:1e:d5:5e:ae:b7:91:c9:76:87:38:95:ec:41:81:
80:4e:69:66:c5:87:72:90:e1:c9:0f:f0:21:54:ae:
57:54:5a:98:66:09:53:24:8f:e5:23:c0:49:e1:99:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:95:F9:FE:62:93:BE:D1:7B:BB:12:44:C0:1E:18:84:05:5A:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
X509v3 Authority Key Identifier:
keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:fb:d9:fa:6e:8a:8a:1a:32:eb:88:5d:a1:a0:38:d0:94:fa:
39:2d:e5:85:c1:e7:3b:53:7e:22:e8:8e:76:58:b9:77:59:e2:
38:5a:28:cc:db:dc:d9:f7:fc:b5:00:e8:de:13:31:e1:ae:8f:
1b:1c:2e:1f:a8:f9:d8:8e:d5:6d:24:96:4c:89:1c:2a:c9:80:
42:98:ad:0f:b3:ec:d4:18:86:f0:ce:d4:13:b8:8d:74:2b:ba:
46:18:f1:9f:75:50:ea:21:aa:c9:9e:ec:14:d7:9b:a3:64:d4:
f0:ce:4b:88:e2:3a:66:64:6d:32:c8:9c:48:88:c2:0e:0e:a0:
47:3b:26:4b:1d:ca:db:dd:3e:5f:51:a0:e0:6a:59:20:50:1a:
6e:61:d6:9f:e9:23:03:f3:99:88:f7:5d:ed:08:ac:e6:d7:6d:
d6:44:d2:2c:51:dc:78:95:d1:68:c5:c6:09:86:97:77:94:2d:
5d:47:2d:16:b0:d7:83:58:71:2e:12:e7:56:8d:fe:c0:88:7b:
97:9c:ae:b4:69:f2:4d:1f:8e:b4:cb:fe:15:26:bf:60:5c:a0:
1d:aa:72:6e:d8:cc:75:b2:1c:d1:d2:fc:8e:94:8a:32:49:e2:
ff:34:b7:d8:ec:26:fb:f7:ee:e7:b7:2f:88:ba:87:2d:d5:b7:
83:b9:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:48 2025 by rpki-client