Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
File: ace08759-ae56-37f9-b6d2-429a1b0989b7.roa (raw, json)
Hash identifier: r997KZ6tAg2CSA69spVCmsINrkicno0/GM7ynjcCYjQ=
Subject key identifier: 8D:40:2D:FB:3D:ED:98:B5:38:54:78:55:6D:4E:CA:D5:14:4A:75:23
Certificate issuer: /CN=cb29a492-e225-4723-973a-07560c140eea
Certificate serial: 010D0C9F432858482BF55A58BCD435C52F29E400
Authority key identifier: A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 398538
IP address blocks: 104.247.127.0/24 maxlen: 24
170.39.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5a:58:bc:d4:35:c5:2f:29:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a492-e225-4723-973a-07560c140eea
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=7596c766-5636-4b2e-a922-a94be2fddd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:ed:af:66:a9:55:28:f7:3a:c8:59:26:ef:
60:38:66:ad:70:04:c6:4e:76:c8:5b:04:01:ba:ae:
52:98:56:b4:b9:71:03:42:cd:8b:6a:7a:dd:03:e9:
2a:4e:93:22:96:8d:8c:92:4e:42:fc:2f:75:fd:66:
63:2b:99:88:6d:77:e9:86:05:0c:eb:76:a3:00:00:
90:56:32:1c:a8:84:a0:dd:d6:dc:4d:93:89:b4:1a:
89:84:f2:ef:4b:b1:8f:9c:8f:ef:03:a9:0a:ca:ae:
db:bd:a4:34:76:ea:5b:62:a4:dd:6c:cd:29:85:66:
32:a0:7c:be:c7:01:49:47:6a:3a:29:60:6b:0d:13:
b7:68:9d:bb:39:b4:53:27:65:e5:0d:3e:10:4f:26:
4c:0b:28:c1:ae:d4:35:e2:30:10:4e:30:58:63:da:
06:70:2d:54:e6:eb:b2:ab:3b:65:1d:74:a7:82:59:
10:8e:41:97:d2:59:dc:40:77:c7:49:ea:c1:4c:fc:
2c:0b:4b:af:06:e7:b0:cd:95:7f:c9:fe:c4:b4:79:
2a:f0:1c:7a:86:3f:11:25:a6:56:b9:88:6a:d1:ca:
3d:3a:23:ed:a8:3d:c3:6b:41:4a:bf:4a:88:0b:36:
4b:5a:75:73:d7:c9:41:be:21:cf:5c:79:79:6a:63:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:2D:FB:3D:ED:98:B5:38:54:78:55:6D:4E:CA:D5:14:4A:75:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.crl
X509v3 Authority Key Identifier:
keyid:A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.127.0/24
170.39.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:3b:4a:49:22:7d:b9:a9:11:63:3c:bf:76:8b:23:2d:ff:bd:
a5:c5:a3:50:bd:c8:80:40:f4:42:30:7a:ed:e7:d4:85:79:cb:
d6:73:d3:5b:a9:9b:40:b1:f0:c2:ec:39:b9:af:48:84:d5:d5:
88:88:58:ba:40:eb:9f:44:37:e5:e2:b8:de:a1:6f:98:9d:6a:
2f:ae:e1:7e:79:34:87:7c:13:70:d6:a6:f9:f0:1f:31:74:ba:
f8:52:02:43:d3:48:ba:cc:69:67:a4:27:0f:b2:31:c4:ef:3f:
77:d2:09:40:9b:8d:ae:f2:ce:c5:4d:17:a8:b2:fd:5d:95:fb:
d5:d3:0d:21:5a:99:83:2e:4f:da:d7:d3:6b:01:a4:f8:b5:0c:
b2:25:b9:2b:c8:6f:37:46:08:3b:64:db:5e:fc:c9:49:23:f9:
8f:af:16:e0:f4:e6:22:a5:b4:d2:3d:87:90:08:07:90:f0:17:
19:05:c9:37:4a:5b:0f:2e:1b:ae:f3:e2:ab:21:c4:23:20:e8:
5f:f9:e3:f8:2a:cb:9d:36:55:98:6e:24:17:b6:c7:8c:2d:0b:
6e:b4:ae:48:6b:de:51:9e:83:e1:4e:9d:c2:74:3b:98:70:33:
f6:14:ac:b2:c4:17:e9:02:e0:c9:c3:cd:20:e5:61:67:66:ca:
f6:27:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:32 2025 by rpki-client