Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa
File: aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa (raw, json)
Hash identifier: 3EAUH4oUKzyx2GluHq5sJzG36+0/WHm9BVABGnbcKSM=
Subject key identifier: 30:CF:FD:71:0E:51:46:C4:31:B7:E3:FE:9F:0C:DA:7D:29:A1:17:E5
Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial: 010D0C9F43285848A400C09D58DD584A8760D574
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 33548
IP address blocks: 104.247.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c0:9d:58:dd:58:4a:87:60:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=2df9f421-43fc-4dfb-8edc-ce24c1dac93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:ce:49:e4:fe:3d:0b:8b:6c:b3:b0:00:9d:
90:f8:2e:2c:8d:c3:e0:f8:88:0e:45:d1:1f:8a:38:
15:75:39:f3:d8:5b:c4:99:d3:23:c4:30:ec:c2:c0:
d8:10:ec:ba:b7:5a:a2:e0:8e:b5:98:67:d1:55:7b:
45:25:d1:06:89:17:fd:ba:80:3a:a7:fc:96:0e:e8:
4a:ad:71:df:30:57:4b:76:f5:c3:f9:77:9f:0e:fa:
a5:8c:b8:bd:ee:31:f0:7c:c3:da:aa:d3:fa:55:84:
53:f7:82:06:8d:ba:57:46:48:d8:4e:0f:be:0c:c7:
8f:13:30:b7:71:49:ef:bd:48:40:19:d5:cc:5b:f8:
85:39:b2:55:64:b4:09:e3:0b:ad:d0:a3:94:c9:b7:
85:2b:86:08:b6:6a:23:9b:eb:89:99:e0:85:b6:49:
59:32:8d:4c:ac:33:ad:0b:12:c4:3b:02:05:1c:88:
60:24:ec:92:71:dc:e9:84:56:66:1b:37:eb:ce:b8:
49:90:46:ff:a7:7e:85:e3:7e:be:32:18:c1:3b:fe:
70:a3:1e:73:5b:5a:5b:f0:a2:f0:d1:b9:f4:22:12:
05:d2:d2:04:57:2f:27:60:3d:71:13:1f:a4:5d:e4:
55:9b:25:32:14:a2:bc:ce:56:40:2d:c1:49:e3:13:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:FD:71:0E:51:46:C4:31:B7:E3:FE:9F:0C:DA:7D:29:A1:17:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/aaa0f512-6693-3968-9f7e-8a63d5f8b92d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
X509v3 Authority Key Identifier:
keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:32:78:8c:37:cf:30:3a:df:a5:27:5c:35:d8:3c:fa:e1:6b:
fa:82:03:b7:9d:b9:36:51:39:34:dd:51:c1:4d:7b:b5:fa:e6:
51:18:40:43:66:f7:82:b2:7f:17:56:ae:5e:b0:a6:9a:32:5e:
ad:3e:d2:bb:bf:70:fa:9b:48:da:30:5f:c8:fd:72:65:98:f1:
2f:99:d4:c1:fe:df:3f:37:f5:23:98:c0:5e:5e:47:28:50:92:
b4:78:bb:13:ab:ef:62:6f:68:ad:08:2c:9c:76:c9:c5:76:64:
ae:d4:7b:5e:df:8d:ef:41:f0:55:f4:46:aa:de:12:a2:5f:fc:
e3:5b:ba:6b:85:86:94:60:bf:c5:e0:20:d8:82:76:03:c8:59:
6f:6d:59:ea:98:09:3b:04:e2:39:de:f6:1a:db:43:7e:5a:10:
29:f1:25:2e:60:24:25:ba:56:02:44:9e:b6:80:29:c0:46:2d:
0c:3b:f7:d4:85:63:68:94:7c:9d:43:94:f0:6f:38:b4:b8:e0:
16:33:a7:6e:38:66:0c:24:44:4a:71:d7:1a:0f:27:46:07:f3:
e2:e8:71:d6:73:0c:10:94:f0:f3:f2:9e:e9:8e:31:61:cf:48:
9f:3b:71:fe:c4:31:50:2f:43:5f:c7:01:c5:df:29:ff:03:99:
f7:b9:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:44 2025 by rpki-client