Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
File: 6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json)
Hash identifier: qb3kQCWmnP3u3HarQ2Jt5Ceg6bgwauZ84p/PdS9RH8g=
Subject key identifier: 2E:58:BB:52:8E:99:23:18:50:CE:B9:C5:35:F0:75:1E:4F:81:DB:96
Certificate issuer: /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Certificate serial: 010D0C9F43285848090FBBC0F95510625EAE9040
Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 46886
IP address blocks: 104.36.252.0/22 maxlen: 32
104.193.128.0/22 maxlen: 32
158.51.192.0/22 maxlen: 32
165.140.16.0/22 maxlen: 32
170.178.140.0/22 maxlen: 32
2602:ffa4::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:bb:c0:f9:55:10:62:5e:ae:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=123511b0-e225-4f1d-ba30-c631238fcae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:b8:13:e4:fd:db:89:03:70:63:a1:df:54:
28:20:08:34:d9:d4:bf:1d:cb:26:d7:51:25:01:c0:
ec:84:8d:0b:d3:62:9f:1a:98:7e:3a:a4:7b:b0:09:
ba:f6:56:7f:77:dd:5c:57:87:2e:03:a4:0c:b4:f5:
87:e2:49:26:88:45:e5:b6:1a:36:4f:fe:00:f1:74:
bd:ad:09:90:84:ae:c2:bb:4e:77:90:e5:7f:47:13:
a9:1f:6c:dd:6f:32:a6:54:ae:1b:1a:27:c6:64:b6:
09:d8:fe:df:5b:3c:4a:3e:5b:d3:97:4c:b2:f8:2c:
c0:9f:a3:c3:94:6d:cf:ef:ae:1c:19:42:f2:63:21:
a6:0f:04:d2:10:f6:b0:d3:73:10:0b:23:b2:4a:83:
66:0f:b5:7a:cc:b2:d0:d4:04:e3:25:c8:6b:58:fa:
25:69:11:ee:71:d4:af:15:5b:d1:1b:e4:e0:ce:90:
0d:7e:64:83:89:d7:64:3d:a7:aa:95:de:d7:8d:ea:
dc:da:f5:82:8c:a6:ca:44:b9:cc:18:9a:35:5c:2a:
18:b4:fc:d2:6f:48:a1:07:9b:d2:bb:99:b4:93:57:
f2:51:5d:69:0f:0d:3b:ea:29:42:52:7c:29:a4:71:
4f:44:f3:91:38:47:b3:18:d9:bd:bf:75:47:7b:f2:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:BB:52:8E:99:23:18:50:CE:B9:C5:35:F0:75:1E:4F:81:DB:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl
X509v3 Authority Key Identifier:
keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.252.0/22
104.193.128.0/22
158.51.192.0/22
165.140.16.0/22
170.178.140.0/22
IPv6:
2602:ffa4::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ec:61:9e:36:d0:83:20:d8:e7:e1:89:ef:56:1d:39:80:ed:
4b:29:bc:f0:a0:4d:4f:e1:eb:a6:01:5d:a6:30:d5:87:22:01:
83:f8:ec:30:b7:4e:5b:9d:de:49:bd:aa:ce:76:f3:8e:1e:8c:
37:69:69:cf:f3:51:21:0a:85:f4:bd:fc:df:94:40:a1:62:42:
47:c8:9e:2b:fe:49:01:b7:43:ee:e4:95:0b:7e:6b:d8:b5:23:
f1:ce:d8:21:b9:71:f8:fd:d3:88:c2:e6:80:73:da:46:c6:5d:
f6:5e:0d:30:c4:05:ad:ac:5d:24:b4:78:58:59:ef:04:0f:75:
1c:86:cc:f5:4b:41:42:8d:41:bc:6e:e5:e2:da:a1:f8:76:58:
c1:06:45:a7:5e:0b:9f:1f:25:3b:29:3c:49:b7:c4:0f:e6:e4:
9f:f9:24:19:54:60:99:4c:a9:9b:3b:f6:60:5e:8b:e0:bf:70:
5d:41:76:7c:1e:f4:09:d6:38:d3:45:8e:50:b7:5f:43:de:1d:
f3:b4:db:d6:0f:13:4d:f5:ec:38:cb:88:c8:b7:5c:d8:f8:f3:
e2:7b:01:79:7f:3b:e4:36:02:03:90:4e:4b:e1:a0:3c:9c:8a:
de:5c:5a:9d:42:3e:83:86:69:7b:24:42:b1:ce:76:c5:2f:63:
1e:18:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:16 2025 by rpki-client