Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/c669c3c4-c0ec-33d0-98ab-d9826d671638.roa
File: c669c3c4-c0ec-33d0-98ab-d9826d671638.roa (raw, json)
Hash identifier: kaGC0Wssg/0b93upSO18yNU2zn+e6W5DvyaDmwQsurI=
Subject key identifier: AF:BE:F2:2B:16:2C:34:B9:E3:B8:9C:29:CC:53:02:C2:72:8C:92:7A
Certificate issuer: /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial: 010D0C9F4328584802BD1C3CDD01AEC054801B80
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/c669c3c4-c0ec-33d0-98ab-d9826d671638.roa
Signing time: Tue 26 Nov 2024 19:39:32 +0000
ROA not before: Tue 26 Nov 2024 19:39:32 +0000
ROA not after: Mon 24 Feb 2025 19:39:32 +0000
asID: 32613
IP address blocks: 104.193.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:bd:1c:3c:dd:01:ae:c0:54:80:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Validity
Not Before: Nov 26 19:39:32 2024 GMT
Not After : Feb 24 19:39:32 2025 GMT
Subject: CN=be727fe9-ad21-495d-a24c-607d968a57f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:3e:44:6f:95:75:c9:dc:fa:a5:fc:d0:2d:
52:82:4b:45:72:ef:80:33:fb:6e:5d:83:bb:f5:4b:
d1:6f:02:47:c5:cd:ff:06:40:92:0f:f1:28:27:d9:
08:0a:37:6a:5b:f6:a7:31:ea:75:7c:3d:92:f7:23:
24:48:ac:42:1f:6c:e2:03:6c:c7:9b:93:4f:02:7b:
97:8e:46:f5:93:87:34:95:65:7e:3b:f6:94:35:16:
15:c7:c4:a5:6d:60:6e:f7:bf:ad:24:72:30:45:51:
e0:eb:88:60:e0:37:68:9a:a0:d3:0b:35:db:d6:15:
93:07:ff:39:80:fb:a9:a0:09:fb:1b:86:af:e9:7a:
07:2e:30:4f:ad:c8:ab:ff:2d:78:69:40:ad:ee:67:
c8:c3:44:21:f6:03:7c:c6:e0:0e:b8:1f:dd:4b:0c:
ce:1d:91:7c:9b:bf:aa:99:ac:b5:51:30:10:44:21:
d5:b5:1d:b4:7d:a1:2a:91:e7:b4:bc:c8:d4:ad:88:
b5:82:b4:53:82:2b:63:65:b8:52:3d:85:04:ca:0a:
32:37:f6:38:8e:06:0b:d5:bf:7f:b6:22:ee:06:d8:
9d:a4:66:de:db:47:cc:f6:25:02:b1:d1:91:2a:cc:
5c:19:73:b1:4c:e3:c9:60:d1:84:03:1b:a9:66:b7:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:F2:2B:16:2C:34:B9:E3:B8:9C:29:CC:53:02:C2:72:8C:92:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/c669c3c4-c0ec-33d0-98ab-d9826d671638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
X509v3 Authority Key Identifier:
keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ae:cd:fb:8d:0c:f0:b7:b0:6d:66:2f:e9:20:1e:5a:e3:75:
a4:ca:2e:53:bd:cc:cd:25:3f:e5:6f:0c:11:10:c4:e9:62:9c:
40:1d:8a:64:dd:81:44:d6:15:e6:6b:66:a8:ff:7c:9d:39:c6:
38:5d:82:a4:49:49:0d:df:77:22:8a:b9:3e:2b:0f:f3:77:9f:
a0:a0:5b:12:c4:64:83:3e:30:98:79:80:3e:30:f3:b2:f1:bb:
8f:71:6d:5f:70:34:31:d1:b1:d4:17:72:3f:2e:5e:74:58:07:
68:5d:95:64:b6:d9:93:4c:7f:97:24:ad:5c:20:b2:34:49:73:
fd:43:2b:d1:6b:92:78:83:71:10:69:5b:2f:6c:90:29:11:b0:
df:dc:a0:61:ef:96:cb:6c:6d:2a:ee:1b:7a:07:28:e9:59:77:
e0:56:04:7d:f4:41:b1:ff:41:b5:a8:1d:cb:08:be:a0:49:15:
a2:31:42:9b:a3:e7:a7:ae:ed:7d:76:a3:35:2c:5f:9e:2f:c5:
11:16:e7:27:4d:1e:3e:0b:26:b3:22:5e:c8:0e:75:57:cb:b8:
47:86:8b:bd:99:97:f8:98:da:5c:6d:28:ff:13:2a:0d:bd:26:
0c:09:35:2f:83:66:eb:1b:48:0f:6d:22:d1:d2:f0:b0:b7:1d:
2e:9b:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:15 2025 by rpki-client