Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa
File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json)
Hash identifier: IVvk/rr4W5Z8E1gfG7jcDWYueIbtNZ5Y7VqY/SOVO2w=
Subject key identifier: 96:61:CE:C4:6F:9E:5A:7F:5C:4D:2B:C3:71:56:1E:32:52:FC:03:44
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858485470350302C91ED6672F1880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 212238
IP address blocks: 104.243.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:35:03:02:c9:1e:d6:67:2f:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=75a2a220-4b2a-42c9-b701-7b590db644f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:e2:d7:d9:15:26:46:20:ce:13:8a:b4:95:
ed:38:de:cc:50:0b:60:fa:5b:e4:70:95:32:93:55:
33:3f:bc:9e:d0:ea:5e:c6:0c:42:c2:54:25:5d:32:
19:9d:2e:f1:52:5a:a7:c6:20:e3:a7:2b:df:2d:fb:
6f:97:9b:06:99:0a:6b:26:3b:91:53:d1:96:8d:a3:
47:e5:28:15:4f:fc:44:d7:a7:d6:e1:39:83:06:ac:
0c:16:a0:d1:6c:9a:84:dd:32:39:67:bc:10:97:f5:
c6:53:cb:9e:56:6f:fa:5f:28:e2:56:c2:4a:d2:b5:
1c:02:51:b3:40:f2:50:78:68:62:cb:6f:0b:cf:72:
62:c6:94:0f:9a:0e:21:88:a1:22:d3:00:49:87:b5:
a2:41:69:68:51:78:98:f9:e6:39:61:b2:18:26:77:
e8:48:ca:12:fd:28:5e:67:0c:2c:ea:8b:15:eb:4f:
0c:2e:99:7f:f0:92:a9:fc:13:ce:d0:99:25:c2:e6:
7d:70:35:b0:e2:54:0e:4f:b0:be:bc:36:43:29:96:
d8:93:3b:bf:60:75:f3:f8:fa:56:66:0c:5c:e1:8b:
03:ae:ea:1a:55:7e:5d:e7:7d:16:50:ec:b0:1b:fa:
1d:b8:41:28:f9:fc:63:38:fe:b9:52:0a:6f:b6:1f:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:CE:C4:6F:9E:5A:7F:5C:4D:2B:C3:71:56:1E:32:52:FC:03:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ad:43:43:39:80:5a:f7:20:aa:14:a1:33:70:15:46:49:40:
0a:48:53:61:0b:80:09:92:d8:a7:1d:2e:fb:2c:57:0f:35:6f:
3e:b1:56:59:7d:96:21:42:f9:97:4e:76:51:e0:aa:08:bf:c5:
e4:f6:dd:d7:0c:2f:e0:6e:ea:41:7c:3d:a5:ea:32:0a:f0:ea:
22:e5:dd:5d:89:a4:0f:3b:92:a5:6a:09:67:99:99:38:a7:6b:
41:3e:77:6e:08:d1:84:99:e1:70:eb:43:67:7f:c7:92:50:9c:
1a:a1:38:f5:62:1d:6b:bb:0c:d2:f3:78:40:91:03:72:2b:7e:
47:d6:2d:ef:e9:33:6a:7d:dc:84:37:a3:bd:8a:80:0c:67:c8:
18:3d:54:a9:6a:59:7d:98:cb:57:1b:7b:7d:3e:fd:4a:2b:85:
0a:77:6f:27:76:3e:63:f8:6d:02:b3:d8:c5:95:26:4a:6b:b3:
ca:8f:8d:40:9b:da:55:2a:81:29:d9:54:d4:9d:ca:ab:55:df:
1d:7c:9d:c8:69:23:63:6b:09:a8:8b:41:34:32:2d:49:8a:60:
7e:2c:d5:69:b3:40:ea:6f:be:15:ee:54:f6:c1:da:ac:52:9e:
72:ca:90:eb:88:9f:d0:6b:74:ed:de:1b:9a:48:9e:bb:ea:6f:
f7:f4:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:47:58 2025 by rpki-client