Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa
File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json)
Hash identifier: mdgOxi3SKm5zVFEGEkYswX7FZgTzccdG3yB+4ibDgb4=
Subject key identifier: 12:F8:90:28:2D:80:76:E3:B0:E9:4A:39:81:DF:F2:08:FF:4C:86:4D
Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Certificate serial: 010D0C9F432858483E1AB7B88D2B9A1AAEB3F710
Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 62533
IP address blocks: 104.219.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b7:b8:8d:2b:9a:1a:ae:b3:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=d84a00cf-e1bc-4e1f-bc03-41a69f982f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:a3:c9:f9:3f:99:6d:52:1f:0a:15:39:a5:
09:1b:27:fd:ba:13:a3:31:c4:12:4f:3e:de:2f:d2:
c1:c7:4d:c1:96:d1:39:02:2e:af:f2:9f:60:4b:fd:
03:b1:3b:e5:63:c3:d0:30:05:e6:8c:7e:55:e8:a0:
44:52:b4:85:71:05:ea:49:7a:30:df:3f:29:a8:1b:
b0:d1:8d:bd:e7:ef:b6:0a:e3:d3:ac:56:44:c1:9a:
46:09:c2:c1:67:22:f0:b4:44:e6:8f:ae:29:89:2a:
b0:58:9b:07:00:f3:90:1e:4e:4c:f2:89:65:8c:b0:
1a:cc:26:9d:e4:3a:75:81:07:5e:ab:9a:5c:92:4f:
36:e5:f6:9a:02:68:90:e6:55:e1:3f:2f:e0:fa:42:
5c:d9:6e:48:4a:19:21:bf:fb:e6:9b:4b:03:bc:bd:
77:8d:b9:b7:ee:8b:55:6d:38:0f:e4:fa:57:b5:05:
1e:16:86:ff:15:0b:7c:1e:fe:14:3f:84:ea:cc:0a:
fd:bf:6d:3e:67:9e:f4:14:b3:37:73:3c:64:4e:8d:
8f:27:9c:e1:11:3e:dc:10:3e:9a:85:27:69:ac:7e:
37:78:24:7d:72:ca:8f:36:3d:06:60:c1:1f:a8:c8:
68:cd:43:d7:02:be:43:27:51:05:b2:fd:d7:5e:07:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:90:28:2D:80:76:E3:B0:E9:4A:39:81:DF:F2:08:FF:4C:86:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl
X509v3 Authority Key Identifier:
keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f0:b1:ed:f6:07:21:59:9f:25:1c:ec:f8:eb:20:e9:32:df:
3f:b1:13:58:ab:ef:cd:ae:5e:4f:f5:dc:fe:b0:3d:b0:98:0e:
9b:d1:ce:9d:09:15:c2:a2:dd:24:1f:30:cc:f6:b2:93:ed:03:
28:59:9f:db:70:55:d4:ec:66:dc:88:46:b5:ad:8b:cf:8d:40:
51:94:97:3d:2d:4f:98:47:b1:aa:cc:37:2f:a0:1f:87:f5:d2:
39:dc:44:32:b1:57:38:c3:c5:50:10:36:92:62:3a:72:5f:83:
63:bb:e3:86:49:4e:76:13:ef:3d:bb:f1:46:fd:c6:f3:ba:e7:
aa:9b:fa:b4:38:fe:97:da:2b:00:0f:b3:ec:4f:2b:e3:de:97:
37:bb:27:f3:3f:d5:9d:8d:b6:e7:07:ec:e7:ad:6f:7b:d9:5b:
eb:43:36:6b:ec:27:e9:fb:fe:fb:e8:47:51:f8:ea:2c:ed:95:
1c:2a:a0:2f:9a:ea:15:b6:3e:69:83:67:03:41:90:dc:10:b9:
42:4b:7f:fd:4d:6b:7b:48:34:c3:90:1e:76:77:0a:c5:81:56:
91:57:1f:bc:a2:06:02:6c:cd:d1:97:a3:09:08:0b:94:08:fb:
28:50:1d:18:e0:6a:67:90:9a:d1:6b:6e:28:4c:d7:3f:21:ec:
bd:ee:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:15 2025 by rpki-client