Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
File: 6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa (raw, json)
Hash identifier: PedfVWxy8x8idgOZsY+yfcht6nqWMcsH7G9qcJtdleA=
Subject key identifier: DA:E9:F5:2D:68:5A:38:11:0C:E3:CB:2C:64:F4:C0:20:25:CE:36:B8
Certificate issuer: /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial: 010D0C9F4328584834557D6D5BF1EF899194AB80
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 59362
IP address blocks: 104.193.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7d:6d:5b:f1:ef:89:91:94:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=4956efa0-a2b9-4b06-96d1-1e66a2d36ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:ef:de:72:b7:ad:8b:d4:c4:6a:85:e4:89:
f6:c8:c7:5d:28:e9:26:de:6d:1e:21:5b:e9:70:f4:
b6:cb:07:ec:6c:4c:ed:e1:80:a6:37:f4:ce:09:d2:
79:95:66:f1:a3:fd:eb:ca:0c:eb:b7:41:50:4c:92:
17:e6:02:a3:48:a2:4a:e3:d5:5c:d4:ef:a1:65:00:
68:8e:99:4f:83:63:91:87:8d:36:5e:66:80:32:64:
ce:6b:e7:de:d6:53:34:56:5b:6c:0d:11:7c:ab:0d:
15:7a:0a:cf:ec:1c:9b:61:4c:82:27:bc:ba:38:17:
55:04:ff:37:aa:bb:9e:ba:3c:31:d9:82:e2:90:3c:
3a:4f:ec:1f:0f:29:42:30:6f:a1:b4:93:b5:f9:69:
eb:88:61:53:04:86:ff:a4:47:e9:81:79:21:28:e1:
25:63:84:20:4c:fa:f1:7c:dd:f5:16:b5:e3:ef:ef:
8d:b1:db:a5:db:7d:bb:11:7e:96:04:43:fe:3f:23:
80:d0:61:2d:b1:5c:63:8d:7a:6f:f8:09:f1:3d:d4:
8b:ba:1a:6d:25:86:aa:34:87:0a:ef:f7:78:f0:52:
7a:8a:f6:74:18:b3:c1:54:5b:c0:77:57:62:01:af:
53:fe:24:0c:9b:c6:cb:cb:0b:8c:9b:22:df:25:ff:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E9:F5:2D:68:5A:38:11:0C:E3:CB:2C:64:F4:C0:20:25:CE:36:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
X509v3 Authority Key Identifier:
keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:ef:bb:25:06:cb:d4:12:9b:86:4c:a8:2d:7b:a1:b0:25:97:
93:d4:6f:01:12:11:99:1b:2e:0e:69:ef:33:22:61:ce:77:6a:
bf:70:dc:47:46:07:d5:7f:d1:fb:59:b5:25:df:7c:57:18:6f:
fa:2f:b3:5a:13:9f:76:86:33:d6:4c:2c:7c:ee:1e:e7:00:af:
6c:af:e4:09:23:8b:4c:7a:ea:93:38:c1:b7:38:61:a7:5c:35:
bf:24:aa:3e:9e:28:98:1f:c2:cd:cc:71:ea:99:af:6f:b0:9a:
f0:19:42:d4:f7:b6:e0:7f:4e:eb:5d:d1:2a:01:42:04:02:58:
bf:4d:ef:a6:86:b6:d2:41:b6:cd:5b:51:25:7e:8b:2b:62:f8:
b6:0c:27:1d:12:ba:0d:ca:db:4a:5c:70:92:e9:9d:ff:f2:5e:
f6:fe:fd:95:4e:15:38:54:cf:5a:e0:6d:4a:e0:24:a8:37:d6:
1f:ed:cc:22:02:53:63:31:50:19:65:83:1c:d2:75:94:87:05:
d3:0d:f0:d8:c4:29:d5:e5:6d:59:85:06:1d:c7:df:92:d4:73:
a1:e6:cf:11:90:49:85:63:17:1f:69:15:51:aa:f4:8c:1f:eb:
63:d6:a1:66:dd:bc:2f:27:c8:70:88:0e:fd:d2:dc:9f:08:c2:
62:b4:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:52 2025 by rpki-client