Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
File: 4387142e-4988-3933-b813-eafd0736b9a3.roa (raw, json)
Hash identifier: XIjfCtWWGcU4btmeJebS951K9Io8nCc3Hf0mXNZopVg=
Subject key identifier: 0E:81:EC:1D:52:94:9F:79:61:C0:7E:66:59:EA:33:AF:84:3C:12:19
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858487DF4C0E2687AA1B949416C00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
Signing time: Thu 09 Jan 2025 22:56:05 +0000
ROA not before: Thu 09 Jan 2025 22:56:05 +0000
ROA not after: Wed 09 Apr 2025 21:56:05 +0000
asID: 22652
IP address blocks: 104.156.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:f4:c0:e2:68:7a:a1:b9:49:41:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 9 22:56:05 2025 GMT
Not After : Apr 9 21:56:05 2025 GMT
Subject: CN=0a8766a1-5843-4199-a82c-c846277ae948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ec:bc:6a:87:35:84:3c:00:b4:5b:dd:bc:b3:
fc:af:d7:d9:6f:15:4a:ba:44:8b:bf:1a:99:26:bf:
dd:90:26:2c:0b:a2:2d:13:29:11:64:a1:04:89:2b:
65:d6:0f:26:b0:b2:70:ca:cb:bf:ae:14:5b:fd:d4:
7f:68:60:d8:03:0d:c3:9c:d3:16:c1:e4:3b:a8:2c:
a0:3d:74:35:20:c4:ae:2f:79:63:53:5e:8e:d3:f7:
41:5a:f8:fa:ae:2b:45:be:d8:8a:0f:37:02:b2:4d:
86:1f:f7:eb:29:e9:b1:56:20:da:ae:48:b2:f1:ee:
73:2c:5e:46:2f:00:83:b9:be:fa:00:aa:87:65:fe:
57:04:3c:0d:36:17:62:0b:a6:32:1b:c1:88:bc:d8:
ad:ba:4a:03:2f:8f:7e:f8:25:23:32:0c:f6:44:1a:
de:21:cb:2a:84:f3:b8:b9:a9:dd:43:ad:ce:60:fb:
49:f9:a5:6b:55:f7:5c:75:4b:2d:3e:43:41:18:c2:
df:fd:c4:e4:52:f2:b6:20:6f:72:e2:23:0c:38:8f:
ec:88:bf:84:e1:05:39:ae:af:64:50:bf:c8:b7:25:
02:c5:31:f9:28:14:89:d1:1d:50:b0:c9:da:f8:23:
cb:e1:86:b0:bb:91:21:d5:a8:a1:f2:14:14:3a:17:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:EC:1D:52:94:9F:79:61:C0:7E:66:59:EA:33:AF:84:3C:12:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:11:0c:15:38:6b:70:51:87:21:a6:2b:3e:ae:4a:b4:9d:88:
6f:e1:87:98:1d:2e:65:71:96:de:eb:f2:34:86:11:d6:7f:71:
7d:9f:85:fc:85:15:05:2d:c3:48:ed:c2:0a:ef:48:a9:5e:ce:
c6:16:2b:90:80:d6:d1:fe:a8:06:10:8a:5b:53:ee:c7:0b:5b:
6c:de:41:4f:60:36:95:d9:7d:f2:bf:1f:3b:39:8c:17:ca:c8:
f6:57:05:1b:40:cf:5e:35:f7:fe:6b:e8:28:ab:dd:28:94:f1:
52:66:e5:3e:be:23:f9:8c:78:e6:b8:45:c2:09:3e:f1:2c:95:
94:a4:3f:34:69:d9:3c:ed:51:e9:26:8c:63:70:a8:0d:03:a9:
31:56:1b:33:47:52:d4:57:ef:2e:8f:13:ad:3b:5d:48:44:9f:
15:37:5c:e8:b8:fc:11:10:90:c2:9a:e1:17:60:aa:f0:05:63:
26:82:e2:00:c2:0c:70:7f:f8:5b:c6:73:37:7e:f4:2b:79:7f:
bf:51:f8:54:8b:3b:a3:6d:54:15:bb:8f:35:b5:ab:f6:3d:02:
3c:18:eb:1e:de:44:1d:67:61:a0:4b:df:c8:df:4b:c1:6f:f7:
19:20:81:05:d4:b0:e4:18:b3:70:30:24:4a:a6:02:71:64:a2:
49:0b:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:26 2025 by rpki-client