Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa
File: bb7e42ee-468b-3653-9334-615b6977fa9b.roa (raw, json)
Hash identifier: hwQkK/SKZGbJQ+oeZ77LaToMKwnGrn1h5jceECNLYTw=
Subject key identifier: D8:4B:68:7C:66:3B:C6:2A:87:6D:A1:DD:B2:6B:BA:8A:D6:75:ED:93
Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial: 010D0C9F432858484C1033091A096EBE6140AC80
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 401104
IP address blocks: 104.167.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:33:09:1a:09:6e:be:61:40:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6c97533b-aa8b-4e66-b99c-f45f45424506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:24:e4:17:a0:3a:1a:c3:be:de:16:2c:d8:
39:b9:27:8c:ec:0f:48:be:20:59:f1:b8:8d:54:30:
55:57:c3:1d:88:5f:f4:85:8b:84:35:54:bd:df:bf:
1c:8a:13:da:9a:86:12:b9:88:85:7b:ad:51:50:b6:
e9:83:c4:69:e1:44:e8:31:6d:7b:38:47:7f:09:ed:
76:e6:bf:a9:b7:06:e4:8d:54:d1:5c:50:9e:ac:79:
2d:50:11:e0:d4:1f:87:b4:fc:60:92:ba:a8:d8:b4:
ba:b4:2f:ad:1d:5d:83:ad:8b:5f:78:48:25:e7:bb:
4c:75:e9:be:e0:40:f9:aa:f3:78:d3:58:5e:02:84:
69:c6:8f:21:ef:ca:f7:c2:94:2a:1c:46:ce:71:89:
66:5f:89:79:dd:d3:0d:e9:4e:8f:58:c0:b1:ac:a6:
65:94:4a:3f:f4:f8:f2:1e:c9:34:07:8a:b4:7b:3b:
5b:0c:c1:e1:8c:8d:8f:e9:a5:2c:08:b5:73:cc:49:
2b:50:60:3c:93:66:65:0f:ee:2d:79:f3:3b:69:72:
37:f0:df:da:ff:c3:41:e7:ae:e6:57:a0:d8:d6:f8:
34:f7:4e:8c:58:f8:38:40:c6:89:b0:08:f2:4c:e5:
8e:fe:f4:5d:54:83:07:91:a8:43:6e:e5:13:3a:f0:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:68:7C:66:3B:C6:2A:87:6D:A1:DD:B2:6B:BA:8A:D6:75:ED:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/bb7e42ee-468b-3653-9334-615b6977fa9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
X509v3 Authority Key Identifier:
keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:73:3c:b9:99:63:c0:80:d5:87:e4:2d:4e:93:c4:f4:03:71:
01:c4:c8:5c:cf:6b:1b:1d:08:c1:01:e6:2b:b6:30:5e:65:ab:
73:e5:8d:5d:8a:52:86:72:f3:78:64:b0:4f:f2:83:70:a6:a2:
7e:b9:cf:a5:16:15:da:94:26:b4:e2:75:2a:51:a0:e6:e8:c5:
57:be:fa:90:11:85:56:8a:51:77:28:ba:f7:70:f7:2f:8b:8f:
7b:db:3a:5b:87:f3:9e:c3:90:84:95:df:e9:6a:ea:15:7c:01:
a1:c2:cc:4a:77:9a:54:12:a8:5d:45:16:83:c0:c2:17:86:77:
80:bc:71:a2:e8:bb:59:81:fc:f8:f0:46:47:d2:27:29:c9:14:
75:6f:8d:98:fe:d2:7d:26:ce:57:f5:38:6b:51:f2:67:db:90:
ec:d3:f4:7e:40:82:ff:58:2e:e1:80:73:f7:03:0d:0f:8f:b3:
34:43:21:42:44:77:f0:ae:b6:50:d4:2c:65:19:b5:40:86:06:
f3:02:9a:7f:a1:c2:ac:c0:52:c7:a2:46:31:67:ca:d4:c0:d1:
a4:74:74:aa:7d:f6:df:d2:50:a9:14:0f:91:3e:98:97:13:3c:
91:50:9c:c5:c9:a3:39:86:4d:20:4a:7e:ae:3b:67:ed:0b:8e:
36:ac:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:07 2025 by rpki-client