Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa
File: 77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa (raw, json)
Hash identifier: 0oQiwcdzA0C/fspS/QV4OBp21+0vI7ZbHvqc9UQtnMQ=
Subject key identifier: C1:C9:55:FC:A3:8C:7B:BF:00:46:5B:25:83:00:2C:FC:E5:B0:95:94
Certificate issuer: /CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8
Certificate serial: 010D0C9F43285847DEBFE384726EC76E2876EE00
Authority key identifier: B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa
Signing time: Wed 13 Nov 2024 22:16:02 +0000
ROA not before: Wed 13 Nov 2024 22:16:02 +0000
ROA not after: Tue 11 Feb 2025 22:16:02 +0000
asID: 3128
IP address blocks: 137.104.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:de:bf:e3:84:72:6e:c7:6e:28:76:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8
Validity
Not Before: Nov 13 22:16:02 2024 GMT
Not After : Feb 11 22:16:02 2025 GMT
Subject: CN=a2ef9f24-88c6-41b9-a07d-9f211ede6e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:e3:4a:d2:a7:b1:7b:df:5e:b5:1c:70:2d:
43:85:e2:79:80:8a:3f:08:cc:e8:25:33:b6:3f:31:
87:02:f4:3d:c8:06:db:8f:04:22:4a:ec:e0:c7:ab:
cb:96:a5:c6:ce:33:1b:6a:5c:d9:ff:e4:6c:d2:c0:
c1:4d:80:33:f1:84:f4:8c:5d:dc:88:1e:2a:3d:d2:
cc:77:05:8b:5c:bb:0d:5b:b0:05:d9:31:70:4b:e8:
77:bc:74:cf:3b:71:30:47:b3:92:b0:34:40:7c:dc:
57:ff:2b:e4:ba:1a:46:9d:a1:e3:6a:9a:5c:00:22:
89:6f:49:78:68:3e:8c:6b:d5:e4:84:cd:77:5c:cd:
69:af:12:0f:de:3a:b9:c0:d1:57:11:78:57:b5:59:
2e:94:0d:a2:a1:0f:2e:59:d1:96:e6:a3:db:ac:d6:
66:8b:07:e6:e1:ce:db:39:0f:07:3b:59:64:71:64:
ec:32:66:9a:cf:a2:10:ea:ae:ba:37:77:13:cf:89:
f3:2d:e0:a8:ba:0c:3e:e0:bf:52:3d:e4:98:2b:5b:
c1:81:2c:08:ef:8e:3e:2c:21:0a:21:03:47:3d:5f:
fe:ac:39:69:93:25:dd:ec:37:3c:9b:f7:77:a1:52:
b1:38:7f:28:d8:79:b9:44:b6:d8:73:d2:3f:0d:34:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:55:FC:A3:8C:7B:BF:00:46:5B:25:83:00:2C:FC:E5:B0:95:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl
X509v3 Authority Key Identifier:
keyid:B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer
sbgp-ipAddrBlock: critical
IPv4:
137.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6f:24:8d:51:6b:f4:1e:22:9d:2c:90:3e:9a:ab:58:38:7c:
c4:28:0f:00:5e:14:13:75:f2:ef:1c:7b:9b:1d:ce:77:76:9c:
b6:ac:30:4f:df:87:eb:72:47:4d:d3:26:37:76:c3:ab:0e:cc:
63:a9:c6:d8:56:bc:19:b3:1c:4c:a5:9e:a3:6d:de:30:5b:af:
62:09:29:76:74:ba:91:82:db:cd:93:18:80:96:cc:f8:a9:c7:
57:76:17:35:0b:09:d3:9a:87:bb:0c:91:8b:03:8e:b2:59:31:
2a:1f:f3:4c:77:65:67:e0:38:29:a6:c2:80:bf:03:b8:7e:f1:
7e:df:7f:6f:16:cb:e5:2a:83:71:d1:78:02:3a:3d:a8:5a:93:
90:e4:ab:76:ef:de:02:cd:59:30:b0:d1:76:1f:c0:a1:b0:62:
d3:46:70:4c:13:db:35:b8:a9:8f:1b:0d:9d:9a:7d:ef:be:62:
45:02:3c:7c:ee:49:60:66:1b:5d:e1:ae:3b:22:10:df:2a:3f:
aa:74:a2:f8:1e:bf:36:fb:0f:9c:9f:3a:89:d9:10:8e:29:76:
44:30:1c:25:a3:13:3f:78:fe:ce:78:bc:a6:4c:2b:66:a9:1a:
07:cf:a3:55:8a:16:09:e5:1c:b3:35:58:dd:84:22:bd:78:56:
6f:52:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:02 2025 by rpki-client