Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa
File: 87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa (raw, json)
Hash identifier: 9d7i/SpAOp917M3lHfO5kzKfztmyNNSIa943JFuuvYw=
Subject key identifier: 3A:15:23:B3:C7:C0:0F:9D:60:B8:0F:D3:53:B4:13:A6:E2:A8:E1:F9
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F432858485F9AE3EA460F5CC509981EC0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 174
IP address blocks: 104.167.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e3:ea:46:0f:5c:c5:09:98:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=9f1a0285-d4a9-459c-aaed-a51f04d919f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:d6:f7:b2:e4:f1:a3:54:54:33:6c:cd:1b:
7c:ae:45:9a:6b:88:ce:aa:e9:f1:08:35:29:3c:c6:
87:ee:46:4a:96:5b:91:b0:3d:55:0f:49:36:8c:37:
2c:16:b8:c7:7d:2d:ed:6b:12:d3:d9:01:7e:ba:c3:
85:08:fa:07:3b:49:72:09:12:1e:ff:4f:01:e3:29:
c5:90:e9:dd:36:b6:13:56:bf:0b:0d:9e:9c:3c:6f:
0d:b0:d2:e5:5b:f8:3b:c1:16:11:53:55:6f:e4:e6:
40:46:f0:31:da:75:6f:d8:c8:b0:8a:cd:48:7f:8d:
8d:b8:ac:4e:b2:56:25:ac:70:a3:12:34:f5:d3:0b:
f5:83:4a:af:b8:38:ee:e3:3f:9f:db:e4:29:f2:2e:
76:e2:0f:ae:3e:3b:52:76:00:a9:d9:cc:b7:1b:bb:
7a:4d:d2:d6:d6:50:ba:86:b4:99:59:61:30:5c:20:
4a:ef:39:2d:fa:5e:3d:ee:38:ad:4c:76:f9:38:90:
30:0b:ee:3c:8b:9e:c4:eb:f0:f0:3e:b3:d4:23:27:
87:0a:25:0b:17:0b:88:7b:64:a7:aa:01:ac:01:9a:
e0:47:89:75:62:b3:ef:b4:4c:fc:c2:a8:67:60:06:
b1:56:dc:0c:55:68:e7:70:d3:4a:87:f8:a3:c4:8b:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:15:23:B3:C7:C0:0F:9D:60:B8:0F:D3:53:B4:13:A6:E2:A8:E1:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:39:dc:56:54:28:c6:8a:bf:12:ce:46:b8:b6:20:4a:2c:4f:
86:6b:87:63:de:aa:20:71:c0:08:0a:37:8a:97:a2:d5:93:26:
4c:3c:7b:ff:21:19:aa:19:5f:d9:c5:21:43:6f:05:bb:52:db:
20:31:3f:4f:68:4e:67:52:27:34:8d:1c:0f:44:2d:e6:a8:27:
bb:fc:20:fc:1b:86:2a:75:c7:a6:b1:3d:16:df:5c:d8:d2:24:
13:d3:44:df:11:2c:19:bc:78:56:79:9d:be:a6:04:fb:d1:2d:
dc:84:fd:da:fe:7c:cf:40:1e:ce:a8:ff:4f:ca:84:b1:4e:87:
e4:dc:26:fa:8d:81:bb:f1:8a:47:3b:6f:b7:41:b7:ac:d8:2c:
de:be:fe:29:a9:3f:bd:98:9d:71:f1:ac:70:a4:81:98:bc:e5:
a5:ed:b8:24:fa:ae:6e:b1:0a:f6:28:34:7d:b0:ae:3c:81:83:
86:7e:9b:49:64:30:7d:6b:ae:6b:56:d6:db:24:0f:47:8d:87:
87:a9:5b:a9:ab:89:c7:8f:28:22:a4:6e:15:94:94:05:a8:88:
7f:60:5c:8f:7d:3f:cb:b0:4d:a3:39:fb:7a:55:fc:33:66:51:
66:36:b3:ad:bf:ef:dc:1b:13:12:65:da:af:db:bf:75:aa:cf:
6e:8b:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:54:05 2025 by rpki-client