Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa
File: 04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa (raw, json)
Hash identifier: +3442tLYyPIWSjhlwiZ+m+HDWrFsOL3KYDyR2oYnSp4=
Subject key identifier: 14:F5:89:6E:F0:35:D4:D3:55:18:6B:70:20:C0:7D:73:AE:BE:85:C4
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F432858489B909B1B25F75BEA1AD41300
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa
Signing time: Mon 20 Jan 2025 13:28:33 +0000
ROA not before: Mon 20 Jan 2025 13:28:33 +0000
ROA not after: Sun 20 Apr 2025 12:28:33 +0000
asID: 174
IP address blocks: 104.251.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:90:9b:1b:25:f7:5b:ea:1a:d4:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Jan 20 13:28:33 2025 GMT
Not After : Apr 20 12:28:33 2025 GMT
Subject: CN=2d3e8b23-6906-4976-a1ce-4e2c03553bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:23:66:7e:19:ea:1b:b0:44:5b:72:79:ed:
4a:66:3b:04:ee:dc:61:17:90:3b:db:ae:49:9a:70:
fe:f1:3d:1b:2d:76:a3:6b:1b:c5:94:c7:3d:74:86:
84:8b:6a:ec:ed:65:7f:73:46:9d:b3:5b:a8:16:ba:
e8:d6:6e:a5:60:0e:3c:e4:a7:c9:70:df:eb:87:49:
3e:7c:48:46:ab:1b:d2:f7:6e:89:4e:4d:0e:26:6b:
e6:9c:cd:0b:d6:54:92:ee:e0:c2:7a:8a:9a:2b:8b:
36:8f:b0:4f:24:4b:84:b2:59:4b:d2:4f:19:62:37:
3b:6d:b2:41:97:a6:c4:be:ef:f2:90:04:5f:1b:91:
45:c8:62:76:57:86:ee:54:e4:3f:97:fb:cf:e5:f0:
ca:a9:3e:ee:cb:25:a0:e3:65:c1:ae:00:79:eb:91:
b3:50:13:d3:f1:61:81:ac:01:ab:08:bc:f6:76:fb:
3d:15:7e:14:8f:71:fd:e6:b7:54:d9:22:b5:ad:80:
af:78:cd:8f:1d:07:86:44:d3:ab:08:b9:31:a1:29:
f7:cf:21:f9:5b:4c:0f:fc:0b:21:a5:83:27:c4:13:
56:5d:86:f6:0a:65:7e:a6:52:a8:b4:89:42:59:c9:
38:a0:f4:70:f9:fa:3f:e8:57:b6:a6:d6:b8:c0:66:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:89:6E:F0:35:D4:D3:55:18:6B:70:20:C0:7D:73:AE:BE:85:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/04aa20c1-cb46-3c08-8bc1-2728eb1d768f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:ef:44:31:64:96:8d:61:4a:90:79:ed:23:be:b6:a4:4a:00:
c8:7f:87:ce:a5:fa:76:53:cf:11:f6:34:1b:9c:c3:9f:31:9d:
7b:b6:19:65:12:d3:94:76:d8:cc:69:95:b5:11:c4:75:19:4a:
e1:63:b6:f6:06:dd:4b:3f:48:28:77:22:c3:2c:e7:11:83:47:
75:b3:45:95:10:b0:6f:79:c2:e9:f4:1a:44:d3:73:bb:71:27:
6a:c0:8f:14:c8:50:72:e9:ef:7f:7d:51:50:e0:67:2d:6b:6b:
42:a8:0f:75:16:d6:9a:bd:92:92:6d:a3:c6:95:11:41:50:17:
94:ba:51:cd:e3:40:62:86:af:72:d3:c9:44:70:3a:d5:b8:4d:
24:d1:9a:63:58:5a:6f:28:6a:5c:0c:a0:fb:b4:56:46:6f:3f:
13:86:74:66:1c:62:13:06:74:57:14:93:8d:8f:b0:1e:c4:12:
a4:e7:8b:af:93:a7:31:e9:33:1b:2c:95:c1:6d:36:27:8f:e4:
90:4e:a5:5f:9d:18:2e:c2:d0:64:d1:7a:2d:32:a7:70:be:1b:
09:b3:ad:51:6e:5d:f5:1d:68:21:0f:bf:46:35:15:54:56:0b:
8d:ee:c5:57:7b:df:14:ed:39:d4:8d:04:4f:e0:d3:90:ee:97:
91:14:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:25:08 2025 by rpki-client