Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa
File: 7454f8ef-50a0-3be6-ad8a-80f181155e30.roa (raw, json)
Hash identifier: sl5+O746bpW0KTnq0I4Iz+DZ/xirag+8UALh1Qqiqus=
Subject key identifier: 41:5E:E3:6D:1D:B3:9C:71:FB:97:00:CE:D7:E6:A3:A4:3F:F3:44:30
Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial: 010D0C9F432858483E1AB7C50761866F79F7E800
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 62533
IP address blocks: 104.219.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b7:c5:07:61:86:6f:79:f7:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=e185ac0a-1898-475d-8e89-8afff29c4ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:a8:c0:80:dc:97:4d:09:41:44:20:1e:a2:
f0:39:83:63:2e:0b:0e:b2:f3:eb:ae:33:27:2a:75:
3d:cb:0f:ab:08:ae:10:7a:ac:75:d5:f0:df:77:39:
63:60:1f:be:b1:05:bc:24:71:65:86:d1:32:b8:5d:
36:4e:7c:e0:b7:ca:0e:40:3b:27:e2:e4:27:84:6e:
7d:57:8f:9b:a0:9a:85:4d:c2:2d:87:3a:c3:1c:a1:
d5:07:45:23:47:53:63:1c:04:de:96:34:d6:82:34:
27:df:22:28:85:74:04:ce:60:2e:ae:0a:ab:28:e5:
15:dd:3a:70:dc:40:f5:87:d4:89:9b:d0:21:4f:dc:
29:22:4b:cb:c9:5c:55:6d:6f:b8:5a:91:ce:cc:07:
31:6e:3f:99:1b:e2:5e:ef:fe:5d:7b:6d:32:86:20:
f8:39:5c:1c:d9:be:b6:20:02:f1:37:4e:57:c4:0b:
c2:55:a9:f9:5e:f1:28:41:21:12:53:f8:dd:f6:57:
4d:3d:cb:77:28:86:32:17:86:24:8b:80:48:13:95:
3e:1c:41:bc:4e:1f:2f:3d:2d:51:6d:6d:9a:59:88:
3e:56:90:0d:56:3d:8d:52:88:df:53:96:3b:2e:2d:
fc:16:a5:24:99:7a:9b:9e:8f:17:e3:76:f8:cf:02:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5E:E3:6D:1D:B3:9C:71:FB:97:00:CE:D7:E6:A3:A4:3F:F3:44:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl
X509v3 Authority Key Identifier:
keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b6:04:b3:28:2c:e2:16:bf:41:18:8a:8d:44:5a:c1:a0:00:
85:37:88:a7:66:29:07:ca:e9:eb:a2:84:4f:9d:84:5d:05:9b:
fd:11:64:83:d0:0b:8c:bd:e8:26:7f:fd:5e:b6:90:a2:ee:3e:
5d:d3:3b:9d:55:d0:67:b4:28:4c:27:c6:ce:62:52:28:54:38:
4e:79:5e:ef:5b:6f:c6:1d:ec:45:fa:4f:8a:3d:2a:9b:44:7d:
f1:5c:a5:5e:ff:da:e9:4b:64:a8:bd:9a:bb:b1:c8:e9:27:88:
7d:d0:c6:46:92:92:5b:69:d2:3b:bd:7e:87:23:d7:38:82:4a:
25:a5:e9:f8:9f:38:5c:a8:1b:c5:9e:e1:2a:54:d2:64:f4:25:
ab:73:20:c6:aa:aa:86:8a:03:e1:1e:82:ed:36:68:a7:ea:81:
d3:fc:3b:20:3c:50:22:32:0b:da:6a:61:ed:b0:2a:b1:99:5b:
77:37:93:4a:82:a2:b8:2b:ed:61:0c:61:30:f4:78:ce:26:a9:
8f:f0:73:c1:24:ee:92:22:6e:ad:cb:b2:4a:e6:0c:12:72:86:
90:a1:1a:0e:2f:2f:a4:90:c1:d8:c4:ed:97:36:ee:cf:af:76:
11:e8:18:34:de:e2:79:6f:3c:d0:ca:0b:5d:98:64:b3:35:42:
63:a4:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:21 2025 by rpki-client