Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
File: 9a8d255d-f1df-38c9-9a43-23ba403e4905.roa (raw, json)
Hash identifier: vR2YyvlHFtSJ05B8lqnSLHoWRkYl8yibLMrZQEbvM7A=
Subject key identifier: 44:BB:F5:D4:B8:EE:3E:48:1D:3A:07:F4:5E:30:80:0E:02:CD:6C:CB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858487755E1C346E6CDAB5BCC3BC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 3223
IP address blocks: 104.250.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e1:c3:46:e6:cd:ab:5b:cc:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=e0b1193f-7dff-4700-a2b5-55590cec31b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:d0:68:80:e7:d1:92:51:37:8b:26:2a:a5:
df:33:75:c2:03:a1:95:02:37:bc:3a:fa:c0:d7:4f:
a5:89:ab:77:87:cd:31:50:7c:ef:ac:7e:25:9a:ac:
cd:6d:bc:02:cb:19:1b:ce:fb:5a:52:f3:31:39:73:
c1:1b:e0:8d:83:b3:b4:20:a1:f1:da:ea:ff:f4:26:
2a:70:0e:c5:4b:77:ad:ef:24:9a:4f:41:ae:1d:28:
88:80:93:d1:0c:1f:ac:90:9f:b5:d6:30:1a:a5:bb:
0e:0c:90:69:d4:16:7e:49:0b:ba:24:78:27:f2:91:
1f:a1:b2:88:48:5c:32:31:c6:5e:bb:37:0c:07:d2:
58:1e:fd:b9:80:81:db:16:a2:de:82:00:f2:a7:70:
1a:67:f8:14:d3:67:8b:11:99:60:36:ad:d4:5e:9d:
63:ae:99:8e:28:aa:ac:69:bb:a3:17:cc:04:44:80:
f5:30:8a:a8:62:d3:20:2b:94:8e:76:97:f2:89:30:
f6:42:3d:32:63:1f:a8:9c:29:7a:80:23:8f:23:19:
09:5b:89:64:13:e1:7e:c7:b6:9c:67:c4:ff:5d:d5:
fd:3f:ac:f7:18:ba:1b:ff:73:cd:fa:fa:8b:e7:5a:
86:99:d9:e1:4a:45:24:64:e8:5e:8f:98:73:3d:6f:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:F5:D4:B8:EE:3E:48:1D:3A:07:F4:5E:30:80:0E:02:CD:6C:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9a8d255d-f1df-38c9-9a43-23ba403e4905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:dd:e1:92:d8:8b:79:03:54:44:c5:44:58:c9:f5:0b:78:c4:
e7:55:8d:5c:44:00:d3:1f:bb:0a:43:a0:42:f9:72:05:b5:8a:
60:b3:2f:8f:92:b5:6f:98:36:7b:cf:32:0a:c3:f5:0e:6b:64:
8e:84:d2:7d:92:fa:69:a6:ef:27:67:0c:f4:45:52:fd:04:2f:
24:c7:d5:97:45:92:53:1e:49:f8:4f:a7:b4:52:ac:6a:12:fe:
b1:56:b5:c6:f7:54:67:da:12:52:1b:77:3e:1a:50:3d:5b:ee:
2b:5e:b6:35:6c:1a:06:da:11:f7:18:1d:fc:4b:ee:8a:4d:65:
ac:d7:f1:14:ec:47:fb:63:4f:cc:e4:76:28:c9:12:0b:f1:19:
5b:3a:6d:d9:cc:18:15:c7:c4:1e:ed:50:42:c3:a0:55:34:54:
5a:f1:11:99:2e:7f:68:5a:c9:2d:05:0d:73:ff:80:49:06:7d:
95:96:29:fb:cd:02:0a:29:1f:d8:43:3c:62:54:b5:02:4f:53:
ed:e5:1c:8a:ab:17:98:f3:98:35:17:55:b1:1f:c6:5f:00:89:
3a:aa:79:e5:09:6d:9d:09:c5:02:97:09:57:7c:e0:03:56:69:
18:52:e8:65:48:94:42:c8:ba:91:df:dd:5f:20:02:99:db:d3:
14:5e:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:14:10 2025 by rpki-client