Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/a1df9eb3-9223-341f-b628-80c3d070480b.roa
File: a1df9eb3-9223-341f-b628-80c3d070480b.roa (raw, json)
Hash identifier: hoSJplxYWfROXevPZOZ4egEMe+4zbYMMcETLiV1r+nY=
Subject key identifier: AD:68:CB:8F:27:68:9C:5D:E4:18:14:24:53:27:09:D9:E5:8A:A8:AB
Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial: 010D0C9F432858480EA515B0C15EDC0712A19000
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/a1df9eb3-9223-341f-b628-80c3d070480b.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 398355
IP address blocks: 104.167.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:15:b0:c1:5e:dc:07:12:a1:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=a9be54fc-5087-4fcc-af31-17dce640333e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:62:33:7b:2f:76:e3:c2:72:93:91:f6:a1:
d1:03:dc:d7:d0:64:18:16:7d:36:38:22:00:d3:28:
04:66:5f:2d:36:0b:c7:02:b8:ec:f7:84:09:1c:05:
5a:70:1d:a0:ac:7f:88:c7:be:c3:de:3a:5e:04:ed:
0e:ee:04:00:d6:4c:27:20:cb:1e:ae:b6:75:55:83:
d2:cb:27:cf:24:d2:2e:78:4d:d2:ec:cc:68:09:e2:
20:6a:b1:da:3c:a2:31:5a:c4:e8:50:f1:35:91:6e:
53:84:57:e3:58:ff:d0:d9:c8:a1:4a:58:f4:4b:b8:
40:72:c8:7b:a1:8c:c2:d0:d3:65:70:e9:a2:e0:a1:
cc:a0:55:f2:81:47:22:be:5d:0a:f7:e5:d9:9b:ec:
bc:b4:64:35:a8:80:fa:99:71:7a:5a:35:49:37:bd:
60:c0:74:89:0c:b6:61:05:2a:cc:41:e2:06:55:88:
2e:b5:2a:44:53:b5:3c:01:7f:ba:9b:d0:ac:16:fb:
e5:2a:ae:55:b4:94:11:72:2c:01:e5:aa:9a:82:4c:
6a:aa:24:64:be:46:8b:ff:71:dc:1d:28:22:25:65:
99:3c:2b:84:43:96:d5:d8:86:d8:44:8d:1a:72:ef:
e3:78:be:f0:17:0b:51:0f:27:79:2a:04:75:2c:57:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:CB:8F:27:68:9C:5D:E4:18:14:24:53:27:09:D9:E5:8A:A8:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/a1df9eb3-9223-341f-b628-80c3d070480b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
X509v3 Authority Key Identifier:
keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f9:d2:dc:14:17:22:ed:26:b9:e5:3b:6c:be:9e:fb:4c:f4:
88:f7:80:43:da:d1:e0:f0:c7:35:27:43:ff:d8:a1:a8:ae:07:
13:0a:ae:49:b1:54:82:57:2d:d3:6a:e5:c9:02:42:ff:d7:e2:
b8:30:29:1a:8a:5d:2f:c7:14:11:bf:18:04:db:dd:27:0b:b9:
0f:16:b2:ef:03:02:37:df:02:35:af:cc:45:bc:9f:da:91:0c:
6b:24:22:15:18:71:b4:86:9a:7e:a1:b7:6f:fe:ee:4f:f4:0a:
c1:73:77:03:c8:55:b4:fa:65:00:61:7b:ae:a1:4f:4f:43:c2:
9e:7c:d6:ba:73:54:dd:bb:21:59:0c:2c:52:8a:13:2f:68:82:
ca:29:e2:c1:dc:74:47:0e:9a:91:6b:46:75:d2:b3:23:f6:c4:
d6:5a:7c:68:18:36:5d:e7:4f:fd:11:c5:6b:38:5c:4b:94:be:
de:70:f2:bd:3d:aa:e9:98:c5:cb:7e:59:7f:3e:a7:70:b7:a9:
7d:ca:f4:6d:88:52:bb:bc:58:61:ed:4c:a5:4d:58:09:c8:30:
a9:1b:92:e8:f7:43:77:a2:5a:87:f0:92:a4:0c:9e:9c:98:09:
7b:cd:80:b8:e0:79:56:0a:a8:03:5c:5a:51:31:6c:d6:86:ff:
bd:b4:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:15 2025 by rpki-client