Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa
File: ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa (raw, json)
Hash identifier: x7MnpfgNC/5wY99hCm25imG93EqqM/BrckJ81RZOu5s=
Subject key identifier: B0:3D:27:B5:BE:D2:E6:4E:5D:45:F1:6E:11:54:33:B5:E1:90:9B:40
Certificate issuer: /CN=40b182ba-ba4e-4386-b8b1-4724485bfc5c
Certificate serial: 010D0C9F432858484C10244A6E5B123BDC3B19E0
Authority key identifier: AB:63:4D:D3:43:AD:D4:80:79:CB:62:E1:C5:B1:4A:E4:46:E0:96:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 14296
IP address blocks: 104.36.227.0/24 maxlen: 24
2602:80e:8000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:24:4a:6e:5b:12:3b:dc:3b:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b182ba-ba4e-4386-b8b1-4724485bfc5c
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=17143b65-99d7-42d3-beed-dedbd0c06052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:34:70:4f:3e:aa:e2:c8:b9:85:90:b0:6c:
51:c9:61:23:d1:69:49:07:9c:ce:fd:7d:9f:48:b1:
63:ce:52:13:9b:a3:75:9d:83:1d:2d:bf:cb:ca:3b:
de:3f:16:b2:1a:8a:6c:29:46:0b:3f:7f:29:96:50:
ec:30:79:cc:1f:18:17:05:be:44:42:e5:7d:63:ab:
6b:ef:cf:88:80:2c:bb:4e:af:78:3c:1c:64:43:47:
a1:e9:c7:5b:b5:7d:e5:89:9a:df:9b:c1:5a:d1:80:
30:20:b4:4f:f5:1b:4c:45:38:ad:01:f6:f6:8b:3d:
b7:2c:9b:ea:1f:6c:e4:c2:77:f5:bd:7c:70:21:7a:
8f:cd:b4:66:be:1f:c0:92:41:a1:c5:bf:33:d9:08:
c8:5e:90:ad:f6:76:0c:c3:f9:d2:df:7b:79:7b:29:
b2:0e:66:51:4c:b6:ca:91:fc:e1:a2:bd:1b:f4:47:
09:89:97:4c:28:a1:8c:68:89:10:6f:09:64:d8:4c:
40:40:5f:b2:53:02:cc:23:46:a6:82:32:e9:f2:8b:
b9:e0:d8:56:4a:29:a1:81:a5:55:e5:5f:c5:d4:06:
a5:ef:92:87:b1:64:32:12:42:b9:44:ed:95:8a:88:
6e:36:68:a5:a6:84:6e:96:e9:bc:92:c7:6b:0e:d1:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3D:27:B5:BE:D2:E6:4E:5D:45:F1:6E:11:54:33:B5:E1:90:9B:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/40b182ba-ba4e-4386-b8b1-4724485bfc5c.crl
X509v3 Authority Key Identifier:
keyid:AB:63:4D:D3:43:AD:D4:80:79:CB:62:E1:C5:B1:4A:E4:46:E0:96:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.227.0/24
IPv6:
2602:80e:8000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:84:d0:40:23:5a:52:34:19:a9:2c:9b:62:7b:12:07:36:90:
24:79:3e:bb:70:7d:79:0f:50:62:20:ff:3d:2d:ec:40:89:9d:
1b:2b:6f:23:d6:8a:1c:5a:2b:8d:bc:9f:e2:8c:76:c6:14:de:
fb:aa:94:4d:45:e7:20:4d:69:c7:79:9e:f5:7c:3f:69:8d:57:
81:a9:0b:12:82:d4:16:fd:4a:c0:53:0d:c4:d4:32:0a:38:4d:
ff:6c:d6:67:9d:6a:61:ec:9c:76:17:2e:1e:a6:6e:dd:55:88:
66:53:4f:6b:22:89:fd:8d:2b:c5:ae:f0:91:7a:91:99:f9:47:
5c:45:54:09:25:66:9f:d2:52:98:40:d8:17:f9:54:15:2d:30:
57:48:e2:24:bb:03:20:5a:2b:98:a5:87:6c:31:da:4d:cf:98:
f7:1b:0e:7e:04:79:16:bd:fe:ba:f6:38:a0:18:b2:23:9f:41:
bb:30:b8:94:02:f0:ae:d3:97:75:a1:fa:df:cd:a0:61:80:76:
ff:d4:b4:68:ea:8c:75:e5:b1:e8:bf:00:81:86:08:76:67:c0:
8f:60:de:cf:54:40:a3:bd:a9:44:2e:20:0f:7c:f0:77:0b:3c:
b9:d1:87:a6:06:04:fd:8a:bb:91:4f:de:66:17:a9:15:1c:d1:
5b:cd:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:19:59 2025 by rpki-client