Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa
File: 32cdd595-39b5-33f1-b3d3-81573d4f0634.roa (raw, json)
Hash identifier: X5LUYQGopV04wz+6Y4U6zk6cYUr25Pn3p+hhIyH10Oo=
Subject key identifier: 24:3E:8F:31:FC:42:D5:4E:57:FF:BB:96:45:A1:88:83:ED:04:B7:9C
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285848653041E09B49560F30BF5200
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 104.244.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:41:e0:9b:49:56:0f:30:bf:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=e82d0484-b0eb-4da0-8316-9aa603d53ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:55:7b:0d:61:66:e3:cd:bc:56:78:d1:26:
9e:fb:a5:04:3f:6c:3e:16:0f:aa:25:ea:a2:47:0a:
36:78:23:5e:8f:0f:43:e1:b6:9d:0d:fb:d2:64:cb:
6f:7e:67:39:d0:df:a4:a5:30:29:22:e2:d0:32:1b:
c6:0f:31:7c:3f:33:07:ef:b0:1c:fd:7b:a1:dd:f4:
dc:cb:e7:ed:a1:8a:6e:db:3c:3a:4d:96:cb:27:dd:
7e:4f:66:72:b4:32:92:de:55:f3:a8:6b:9d:84:54:
87:bd:42:39:e3:da:c6:b6:8d:4c:10:ba:95:e6:a8:
8d:a4:d6:b6:64:52:dd:68:a3:90:36:49:e3:1e:d2:
d8:ee:38:c5:b7:be:c9:16:31:1b:91:2c:59:79:5b:
39:e3:9a:13:fa:73:04:95:a3:26:d2:95:0b:8d:32:
c9:63:9f:7b:48:7d:25:39:92:7c:6a:8d:ea:92:ab:
8b:8b:ee:ab:8c:d0:ea:ce:2e:9c:53:e9:3e:b3:54:
6a:d2:c3:9f:03:e6:b5:dc:57:7f:2f:9f:5b:29:c6:
55:5f:ed:bb:79:ef:07:7c:28:f6:2e:70:56:9c:c5:
1a:0c:92:9c:57:c3:bc:01:be:22:b8:13:dc:c9:5c:
a8:e9:66:70:01:f8:53:99:16:9d:51:0e:62:87:1c:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:8F:31:FC:42:D5:4E:57:FF:BB:96:45:A1:88:83:ED:04:B7:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/32cdd595-39b5-33f1-b3d3-81573d4f0634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c9:4c:eb:04:26:d7:62:76:f6:6b:46:89:29:a8:cb:1d:e6:
03:72:b9:22:41:9b:30:5d:50:df:ac:0c:1e:25:57:11:a9:ab:
15:6f:fa:fe:25:11:07:e7:1f:9b:27:22:b5:f0:f7:30:4a:af:
0d:63:12:46:97:3d:0f:ef:42:cb:05:8b:aa:8a:5d:66:de:01:
3a:6d:9e:d6:cc:9d:45:17:37:cc:cf:b7:8e:7a:4a:8b:f2:88:
bc:39:ba:6f:d5:c6:78:f0:17:c4:41:d7:81:ea:4a:6d:d6:1e:
4c:81:50:cd:1c:39:d2:8c:7a:60:3e:e5:81:ba:5d:7a:ff:a0:
a7:db:8d:2b:20:06:80:b7:fb:23:ab:52:e9:55:2f:b9:c2:1b:
a8:23:75:05:6c:5a:ae:6c:77:09:62:76:13:f1:07:aa:b3:48:
0e:47:22:75:85:3c:74:34:94:2a:6c:29:8e:06:ae:40:3e:fe:
f0:40:1e:1b:36:57:68:c6:74:9c:8a:00:0f:83:c8:16:16:76:
a0:9c:f3:0b:eb:a0:b3:f2:67:2c:de:a2:a9:71:1f:bd:a3:e5:
85:9e:77:17:d7:ef:b1:1d:b0:f3:ae:0b:f9:06:52:a3:33:cf:
e5:aa:1a:cd:ca:a8:cf:55:d8:ea:fd:32:15:17:fa:d9:34:dc:
c6:fa:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:13 2025 by rpki-client