Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
File: 86157283-dfb4-320d-a963-3877e2d61db2.roa (raw, json)
Hash identifier: yS/Ht/B8uzNLbfOYhqzrFUnF/qoomKpr6HCFzpccDI8=
Subject key identifier: 5F:A0:74:49:01:27:B3:BC:E3:42:85:68:E9:0D:3E:45:09:38:99:CD
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584824FA9144ABEE75FF75860080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 5650
IP address blocks: 104.253.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:91:44:ab:ee:75:ff:75:86:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=2089e4b3-95db-4ded-8a8d-da3e59bb02b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:b8:0a:e4:d4:a9:79:3e:ed:fb:67:49:d6:
ba:e6:43:71:1a:31:bd:0f:71:c3:c0:3e:92:36:b5:
f6:3e:08:80:f7:2f:c5:a2:a6:62:48:cb:09:f1:b2:
b1:82:09:e7:65:67:8a:b7:42:c4:6e:53:93:b5:d1:
9c:16:87:15:2b:1b:36:e2:d3:92:00:17:ef:4b:48:
65:a7:25:e5:c0:c9:d2:24:19:a7:90:46:fd:ae:87:
f8:52:03:69:9a:b8:04:6e:b7:29:2b:15:03:d8:57:
f0:d3:a0:58:10:7d:86:b5:7e:cd:03:d2:05:1f:25:
f0:a4:e7:78:49:4e:bd:8e:32:41:c2:d5:74:74:af:
84:00:e1:b4:d7:65:c5:9c:b7:23:85:14:0b:aa:7d:
a1:56:0c:99:14:3f:79:1e:fc:c9:12:f8:2d:a3:fb:
fc:38:61:cf:24:24:93:be:64:60:f3:f0:40:e2:66:
3e:ce:05:30:ab:48:98:d2:10:ac:6e:3e:c5:90:13:
83:79:69:92:1c:ec:7b:18:0a:33:d4:ee:bc:4f:76:
93:ae:ca:cb:67:46:69:bf:0b:be:e9:88:0f:81:70:
7e:e2:d9:17:54:ae:21:7a:ce:c2:98:0e:95:74:79:
95:25:fa:13:83:32:e0:af:0f:24:6f:ef:da:34:1d:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:74:49:01:27:B3:BC:E3:42:85:68:E9:0D:3E:45:09:38:99:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f4:92:53:eb:4d:37:91:85:cf:e8:09:3c:bb:f0:eb:7a:5c:
7e:86:a1:bb:2b:51:8c:09:41:ef:bd:8a:81:9f:ad:80:85:cc:
32:55:4a:2c:f3:a2:43:42:6d:de:4d:21:8e:5f:20:b1:a9:95:
01:9f:b4:7c:0f:8d:71:9a:da:1a:b6:ff:c5:46:f6:9f:d2:9b:
74:81:5e:1e:b3:0c:9b:b0:a5:75:3e:e3:d0:fa:60:b6:91:69:
f1:e2:ea:6f:21:0b:71:63:6d:2b:21:80:89:8c:3e:48:78:d0:
03:76:83:81:a6:55:cd:77:0d:ed:f7:cf:7f:21:8f:08:dc:55:
47:cf:e8:92:06:be:15:79:5b:ed:bd:a1:d9:3b:16:a7:46:9c:
bc:f4:0b:a5:b3:c3:3a:ff:bd:1d:30:e0:bf:80:21:4c:cc:d5:
fb:af:a4:71:78:68:68:12:91:f4:5a:33:66:e2:58:6c:c1:30:
98:c4:06:e2:53:db:d9:9f:4c:0e:3b:dd:e0:31:64:06:9e:50:
0a:1f:96:ba:09:21:bc:35:86:c0:94:0d:1e:13:3e:5b:2f:27:
00:f7:97:9c:82:a9:f8:c9:f6:f2:08:ca:99:4e:9b:65:1a:b0:
75:88:fd:e6:7e:d4:e3:15:27:55:d7:01:cd:4d:f9:c3:4a:13:
b3:94:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:38 2025 by rpki-client