Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa
File: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (raw, json)
Hash identifier: CPLTQMIf8Mfafet6z9pJA7zkjjPoiKvhzY74tqTNHDU=
Subject key identifier: 1E:8E:C9:78:21:53:3D:2E:AC:11:57:F6:9E:31:CB:D3:90:19:5E:8F
Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1
Certificate serial: 010D0C9F4328584845158CBC7EB345B45EFA9600
Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 400287
IP address blocks: 104.255.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8c:bc:7e:b3:45:b4:5e:fa:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=90bc11e8-9e10-4401-b82a-6028fe05c5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:35:f7:69:7f:c8:2a:81:4a:96:75:a7:fa:
85:7d:1c:b1:62:48:6c:28:de:d0:19:2d:36:8e:2c:
d8:92:1b:77:70:bb:03:8a:2c:9a:ed:dc:87:49:ba:
da:d7:3b:b4:71:a0:2f:f0:f0:65:43:d3:0f:2a:8b:
86:54:e8:86:5a:fc:ca:5b:a6:c6:2d:26:aa:d5:c0:
af:05:04:84:52:ae:ee:99:1c:38:0d:c1:df:d9:ab:
c3:71:3f:d0:1a:02:8b:0b:ae:78:55:9a:1d:93:4b:
60:85:ca:38:94:ec:4f:b3:a1:6e:3b:33:71:7b:95:
85:3f:11:83:22:c6:01:e2:80:c6:20:3f:61:88:5f:
e4:d5:d9:2b:93:80:a2:4d:32:a2:3f:7d:18:25:5f:
d4:e6:62:57:ee:c4:2c:7a:33:b7:1a:d4:e6:10:fe:
6f:fc:33:f5:32:30:65:db:80:05:7f:3e:ab:03:cd:
46:4a:45:19:ce:35:f3:51:78:2d:4f:7e:ed:a0:c0:
95:44:3f:92:24:8c:b7:3a:ba:b5:8a:4e:7f:a7:03:
b6:25:a6:9b:dd:24:28:74:18:0d:0a:ad:0f:c5:06:
ed:0f:50:37:39:0b:d8:96:b6:07:84:81:c1:77:dd:
a8:20:36:3a:75:95:55:39:f6:b1:d4:e5:c2:66:ae:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:C9:78:21:53:3D:2E:AC:11:57:F6:9E:31:CB:D3:90:19:5E:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl
X509v3 Authority Key Identifier:
keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:03:a9:50:ce:9b:21:2c:08:79:1f:e8:29:3a:db:60:db:cd:
43:7a:21:f4:c5:0c:8f:23:00:8b:7c:cd:e5:0f:5d:9b:5a:77:
1c:51:85:9a:e4:a3:34:f2:c8:0d:64:74:dd:6b:08:07:cf:a2:
07:8d:c6:e6:af:98:89:c3:b6:39:f8:59:4d:e3:e6:1d:ca:9e:
60:7d:4a:56:05:6f:bc:13:d6:dd:28:51:3a:bd:9e:db:43:68:
a7:b3:2f:80:c5:68:3a:15:99:7a:7d:90:6b:81:b7:a3:ba:db:
bf:78:d6:16:c6:2b:53:6a:7b:0b:d1:cb:17:ea:4c:c3:18:c5:
5f:c2:92:e5:51:48:b6:0e:f8:b0:2b:f4:f7:c6:54:7b:ec:c9:
56:12:8e:5a:39:7f:0f:a7:71:73:c1:2e:fd:e7:70:cb:33:0a:
34:b1:f0:9e:09:4d:3f:62:64:2a:3a:4b:60:a4:2b:33:d7:1d:
37:20:bd:81:72:c9:8a:7d:1d:2a:b4:f4:b1:32:dd:24:17:eb:
92:8a:f7:e4:b3:dc:3b:50:00:84:d8:65:b0:99:fa:c9:9d:c3:
9f:ce:5f:c1:f3:e7:c1:dc:04:ed:39:da:1a:34:73:6b:a5:66:
a8:d1:07:72:1e:85:51:9f:81:29:58:19:52:65:a5:65:99:83:
53:a6:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:58:54 2025 by rpki-client