Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
File: 6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa (raw, json)
Hash identifier: LniEFxU1dO9YJJ0jeyug1zr5gO8l73z8eXgOmHtZLLI=
Subject key identifier: 49:32:E7:E8:E3:27:54:65:E5:30:57:B5:A7:B7:6F:EC:02:A1:38:54
Certificate issuer: /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial: 010D0C9F43285847FDE4D4E39BA482176E1B7CC0
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 393950
IP address blocks: 104.167.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d4:e3:9b:a4:82:17:6e:1b:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=967bb76e-8e9b-483f-97e9-1a16b765dae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:e4:42:bc:ee:76:7a:94:27:c7:f9:3e:da:
8f:bb:48:ee:f5:02:48:43:20:b6:c9:7b:c8:5f:42:
f1:9f:6d:4d:06:e7:6f:bc:38:96:66:77:98:dd:4b:
89:3f:ae:e2:43:f7:7b:fa:95:a5:95:c8:b8:07:40:
9e:96:cb:b2:31:ae:fa:a7:f9:52:a9:28:97:ab:89:
a7:67:bb:e1:cb:0d:77:8b:32:a2:c5:4b:b2:11:2d:
77:3a:34:73:4f:48:cd:65:4d:ba:4f:66:20:a8:55:
e0:f8:cc:5f:32:12:96:5e:4a:43:5c:f8:ad:dd:0e:
72:30:9f:09:16:23:f8:23:1f:c6:b6:22:ca:70:b4:
3d:29:91:49:a4:9e:c0:6c:81:72:db:b4:ff:7d:b4:
ac:e6:76:57:d4:e1:c9:4b:04:c4:17:25:ad:0b:c8:
dd:0b:d4:5e:81:91:c8:6c:40:11:b6:48:19:e0:de:
42:65:df:15:70:99:f5:8f:f1:f8:93:14:98:76:94:
c7:02:55:62:02:7d:9d:16:9b:0e:a3:77:5d:82:5b:
04:b8:9e:62:50:fa:81:c0:3f:cb:19:ef:6e:b0:96:
db:cb:b3:66:90:87:a9:cc:7c:77:b1:5f:8c:f0:dc:
15:10:e1:67:0c:e3:60:c1:59:71:25:04:04:d3:1a:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:E7:E8:E3:27:54:65:E5:30:57:B5:A7:B7:6F:EC:02:A1:38:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
X509v3 Authority Key Identifier:
keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:c0:4b:0e:db:6d:74:6d:f8:20:a7:08:ee:fe:95:b1:97:6b:
3f:bb:0f:fc:7b:cc:c2:34:f4:ef:40:d5:d1:bc:d7:e8:78:3c:
a0:e3:05:9c:c5:29:7f:c4:e5:27:44:49:ab:8e:48:70:f6:5f:
90:b4:2a:a3:51:f0:3a:b5:7e:26:e3:ae:c0:89:bb:7f:a0:17:
13:41:a8:c6:6d:79:7d:93:fd:ef:93:b3:5d:9c:91:80:87:c8:
41:18:1e:c6:6d:a0:92:a4:2d:0d:64:5d:31:7d:97:f1:e9:20:
f4:c3:f7:12:3b:8a:9f:92:35:24:14:33:16:0f:72:6b:92:1c:
2f:6c:85:a3:25:df:67:43:97:01:80:32:a3:8b:25:90:7c:1e:
2e:d8:9d:bb:20:b9:a7:66:23:df:a0:4a:2b:0d:cf:78:aa:e5:
b6:ec:c9:a7:7a:98:76:7b:3a:ca:37:50:a4:f5:5e:e4:a5:b8:
84:70:67:ab:53:6e:bc:77:41:b0:68:62:83:ab:39:29:d0:89:
40:e2:38:74:41:6d:44:eb:0b:7c:d0:60:63:cc:86:f0:93:0f:
b1:10:67:67:fc:d3:86:19:23:89:8e:4d:8f:66:3e:db:12:d4:
f3:8b:a9:18:db:37:ec:c7:06:ce:9c:da:01:93:8d:67:1e:cb:
f6:b3:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:50:19 2025 by rpki-client