Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
File: 859da646-a794-3807-8ec6-c22432171131.roa (raw, json)
Hash identifier: zDTKFUh1CfM5A6aSv2KLr1w6/xw3cjyaapXXmyCeDaI=
Subject key identifier: 52:75:EC:2B:73:12:62:62:5F:2D:4B:94:32:6A:DB:9E:63:85:57:44
Certificate issuer: /CN=9bd19c73-b597-446a-af11-1f8e6c172831
Certificate serial: 010D0C9F43285848811B14571337FE0E77CDA4D0
Authority key identifier: 1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 395508
IP address blocks: 104.255.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:14:57:13:37:fe:0e:77:cd:a4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd19c73-b597-446a-af11-1f8e6c172831
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=60417cc1-406a-47b3-9f5a-6a72f0cb1b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:3e:05:e8:a5:24:30:41:25:a8:03:4e:ae:
29:89:c3:c2:3c:57:40:b2:83:4a:3b:49:2c:fa:b3:
06:ad:89:e0:b7:94:7f:6d:86:a8:5b:4d:ac:c3:65:
01:67:27:e4:8f:67:f9:1b:cb:fa:e9:ee:5d:29:4c:
77:98:2a:3e:4d:75:6f:fb:d9:e8:d2:a1:2b:63:de:
98:96:7b:62:d2:d3:8c:62:b2:75:7a:09:4e:1e:f9:
67:51:75:97:1a:51:ba:05:b5:40:a2:f0:33:b0:d7:
a5:8b:23:a6:b1:48:f5:e3:1e:3b:f8:48:a9:03:71:
29:f2:49:d3:95:3f:ce:d4:c2:6c:dd:4e:74:f2:d3:
9c:d8:c5:e8:b6:39:65:4d:ad:24:c4:3c:e8:9a:75:
19:44:74:e5:45:fc:a6:ae:48:11:d2:05:9c:f4:09:
7e:c6:6a:c7:3b:b7:08:5d:24:44:2b:ba:00:34:5f:
89:8e:58:fd:74:29:ae:c6:28:42:6c:91:4f:e0:9d:
02:49:25:1d:a1:82:84:7f:7f:6e:d5:5c:62:00:ea:
bc:9a:b6:a0:75:06:ee:3e:8a:99:6f:2b:1d:45:0c:
f8:52:33:a6:2e:54:66:f7:3d:a1:ed:e8:0d:a8:b7:
b0:df:9a:f8:45:39:8e:4a:ae:72:a6:ab:49:bb:ff:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:EC:2B:73:12:62:62:5F:2D:4B:94:32:6A:DB:9E:63:85:57:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl
X509v3 Authority Key Identifier:
keyid:1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:43:a1:44:5d:f9:42:12:fe:fc:3d:b0:bb:15:65:93:e0:c6:
5c:e8:52:55:73:eb:62:95:40:00:68:73:b2:72:6e:c4:a2:c5:
48:c1:07:1c:c5:87:c5:0f:79:80:54:9d:0d:95:6c:6b:2d:2c:
94:14:4b:99:db:ad:65:fa:35:38:b1:7c:78:74:65:7b:a4:77:
cd:69:04:d6:64:56:be:f3:d8:ac:0a:c9:87:74:a4:02:07:91:
a0:5b:83:55:55:fb:56:65:ec:a7:ec:3c:de:fb:91:e3:94:48:
83:50:28:f4:a8:f9:93:f0:09:1f:25:01:31:be:23:f8:5f:7a:
e2:bd:3e:ab:50:40:94:66:6c:df:86:9b:8f:2e:98:3f:28:40:
b7:33:dd:ad:86:1d:c9:8e:66:ce:04:3a:f5:e7:39:a4:0d:94:
d0:63:c8:65:0e:c7:d8:bd:56:e5:c2:09:e1:ba:15:b3:2b:94:
d5:e5:d5:54:85:94:31:5a:ca:10:6f:3f:09:ed:68:5d:3f:fc:
97:50:eb:95:82:a1:b6:7e:b2:f6:e6:8f:26:aa:5a:87:70:e2:
58:e6:ef:8c:cc:d7:b0:64:0c:2b:2b:f6:1a:cf:66:e8:68:3b:
a6:70:bf:e5:55:01:48:66:9d:28:b7:56:fb:48:7b:8b:ce:75:
4f:3a:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:52 2025 by rpki-client