Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
File: dd1a3125-5c2f-32ec-a661-69fe5e642535.roa (raw, json)
Hash identifier: dpF/r46V5shdNkIt8WM2uKv2VbwODe/q/bf0XNajHak=
Subject key identifier: F0:CE:D3:F5:08:C3:16:D5:11:F6:F7:41:B0:5D:4D:B1:44:D9:49:AA
Certificate issuer: /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial: 010D0C9F432858486D90505A8C2BD835823B5480
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 40772
IP address blocks: 104.36.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:50:5a:8c:2b:d8:35:82:3b:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=1f176aa1-6628-4ebb-84a4-374a60dbd7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:8c:44:ca:2a:79:0b:55:1d:9b:44:e1:ea:
df:37:fe:e1:d1:6d:72:da:d2:6a:25:de:17:1a:f3:
f0:2f:89:48:45:2b:a3:14:72:ec:d9:91:81:39:c8:
95:01:57:a3:69:00:f3:a5:78:e5:22:57:c1:f2:4c:
78:93:27:f2:e7:a1:f9:60:e4:ba:c0:f6:d8:44:32:
a1:19:6f:94:19:d9:86:31:49:e9:49:1f:24:a6:08:
68:fe:8b:bd:89:6e:12:ed:7e:51:b9:34:1f:65:d0:
ac:aa:90:e3:08:be:d9:fb:1a:be:4c:2f:18:ca:9a:
a6:4c:79:1b:d2:19:df:4e:e9:7a:72:91:52:b1:30:
09:a2:a6:bf:99:d9:ef:e5:82:50:17:15:d5:19:a3:
d6:7e:8d:cc:11:22:9b:14:72:14:17:6b:53:9d:10:
78:b1:ec:df:5a:28:a9:9a:b2:c8:be:ba:dc:d6:6c:
de:ae:82:36:2b:e6:41:3f:6a:0b:11:6a:be:6a:b3:
5b:26:13:29:ff:0b:e8:aa:10:7d:c4:e1:80:6e:ef:
f1:92:33:a2:96:7b:a0:9c:ca:bb:7d:78:2f:48:3e:
80:7c:d9:cb:1e:fe:6d:62:12:7d:12:d1:4e:78:c0:
ce:a5:f6:8b:ed:26:07:40:ab:c5:5a:93:ae:2b:7f:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CE:D3:F5:08:C3:16:D5:11:F6:F7:41:B0:5D:4D:B1:44:D9:49:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/dd1a3125-5c2f-32ec-a661-69fe5e642535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
X509v3 Authority Key Identifier:
keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5c:72:bf:2d:ed:38:5f:43:ac:e2:cc:d1:c5:d1:b7:3d:71:
95:83:e0:3a:58:c5:ca:e1:69:08:a4:bd:ba:8d:95:e6:d3:09:
87:ca:3e:cf:ec:28:89:9d:47:1b:4c:a9:ec:28:30:f2:2e:04:
d4:7c:29:8a:5c:c9:6f:c8:f0:ee:80:aa:fd:a6:cf:21:9d:f1:
cf:37:7c:f4:13:82:b6:6c:8a:fe:9e:c3:38:e1:f6:ba:4f:ce:
65:df:20:53:6d:c8:40:6a:2f:26:93:25:21:21:8d:ec:23:1a:
76:4c:78:ac:91:e3:a5:33:4d:62:f2:1a:51:b1:e9:fd:be:34:
e6:4e:29:06:97:1e:73:6e:1f:e9:d6:7a:36:8a:d6:b8:85:9d:
4d:43:4d:6e:3a:15:e2:06:c4:c9:a5:c9:b3:5b:1d:8b:fc:d5:
6b:ba:8a:b4:c7:40:a7:02:24:8a:c1:7c:a8:b6:74:83:50:a2:
10:75:c5:24:eb:1c:4e:22:04:85:bc:aa:98:9d:3e:0d:ef:6a:
19:2d:05:07:5b:a0:c8:3f:b0:88:d2:70:6c:74:c1:e0:53:5b:
53:11:24:98:c7:61:57:f2:17:3c:24:a6:4e:b0:6f:01:11:d6:
4f:b8:e0:43:33:0f:ae:81:29:f6:ea:6e:43:26:60:d3:11:eb:
e4:a3:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:53 2025 by rpki-client