Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa
File: 3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa (raw, json)
Hash identifier: 1APYGYHb1NxeLpwSymoGCkSDNddjWA5ufv4JTn48wks=
Subject key identifier: 1E:A4:47:E5:9C:C7:99:84:5C:D7:0E:77:F8:62:60:26:5B:63:3F:AB
Certificate issuer: /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial: 010D0C9F432858486D9050BF5D8E16D51E114000
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 40772
IP address blocks: 104.36.104.0/24 maxlen: 24
104.36.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:50:bf:5d:8e:16:d5:1e:11:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=453d9193-c349-4955-a2a7-234efa236a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:9f:a0:19:64:bc:c2:ee:c6:19:9a:ef:e5:
98:11:85:97:da:d5:fa:88:34:68:1d:65:87:5e:81:
73:53:ac:20:80:4a:30:2f:3f:b1:14:ca:f7:38:c3:
88:88:6b:d3:4a:27:19:67:89:22:f5:e9:5b:50:62:
c2:4c:1d:59:74:e9:b3:43:15:65:62:77:9f:cf:e0:
e2:3a:5f:b8:8b:1d:6d:d5:de:82:a1:74:80:a4:11:
1f:34:44:b1:8a:3b:bc:96:b1:e8:6a:9c:99:bb:22:
57:c4:ff:76:7f:8c:5f:52:fc:70:c6:ab:57:eb:1f:
f3:36:be:a7:eb:64:96:8b:7b:0c:38:b9:aa:0b:c1:
01:d4:73:93:73:f4:b6:cb:81:c5:9d:63:3f:e6:b6:
20:7e:bf:36:67:ef:21:8f:4e:06:47:44:d1:42:28:
bb:d3:2a:c5:eb:56:0f:22:62:17:84:5d:52:6c:44:
86:b4:18:c4:2b:01:2b:7c:d0:15:09:d6:a4:5b:11:
6e:db:d3:0b:1c:f6:3e:9a:75:0e:23:ff:81:c4:c9:
13:11:bc:e4:7f:00:bc:24:a1:a5:f4:b5:27:40:40:
ad:aa:8a:d9:f6:2e:d8:94:5b:11:19:8f:59:3f:3a:
a1:e3:36:31:35:86:85:fa:14:a2:4e:9d:3f:48:21:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:47:E5:9C:C7:99:84:5C:D7:0E:77:F8:62:60:26:5B:63:3F:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/3e7d0114-a080-3fa9-ad31-8c198137b1d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
X509v3 Authority Key Identifier:
keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:00:a6:34:19:8b:dd:9f:82:98:a3:34:ec:9e:26:56:62:5e:
c1:a3:32:55:de:c8:91:84:5d:6b:35:4a:98:95:a1:33:ee:7e:
2a:3c:6a:36:46:8d:0d:db:4f:76:3d:1f:be:af:25:f5:63:72:
a1:de:4b:b2:d0:45:61:cf:f0:49:00:53:bf:cd:e4:9e:92:24:
f5:3f:c7:6b:86:66:73:a4:f6:90:5b:58:51:54:20:a5:9e:d2:
66:0d:98:4f:30:f0:1d:65:cc:6f:40:ee:41:c0:49:71:01:1d:
77:1a:ef:1d:86:cb:d5:6f:af:be:ce:59:97:6e:ff:0f:02:ff:
ea:93:e8:97:bf:ae:c5:46:76:be:81:9c:6f:44:8e:b7:a2:65:
8b:03:c5:24:55:9f:7f:de:58:22:a4:74:2e:87:18:fb:b9:53:
9c:73:f0:bf:43:ca:cc:c6:7e:bb:3c:d9:ea:30:b0:47:98:ff:
f6:c9:65:13:ec:f0:7f:ac:f4:45:b4:d4:9f:17:1b:98:d7:58:
5a:10:52:5a:b2:5f:ff:a6:74:6d:24:3d:fc:58:84:01:a7:f6:
3a:d3:d7:89:83:0b:f1:af:7b:c5:91:fa:df:d1:66:55:f0:f9:
be:0c:dc:8d:72:54:55:2c:39:f5:51:7f:22:37:ba:03:b8:85:
09:dc:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:59 2025 by rpki-client