Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa
File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json)
Hash identifier: aPS8sYIdYTfArG4Z0oGy0okb4J8SUNZgRrD59pKY20I=
Subject key identifier: 97:FF:03:02:80:CC:24:33:FD:06:4E:B4:CE:9B:CF:71:D3:64:2F:F5
Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial: 010D0C9F432858482395491708BDE96AE8BBF780
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 41378
IP address blocks: 104.249.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:49:17:08:bd:e9:6a:e8:bb:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=441a8e90-1c67-44e1-a64d-322b6c6ea24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:23:0a:03:e8:39:da:4d:32:7f:ee:3a:a2:
2e:ed:a8:3f:97:12:df:69:1a:93:52:06:90:b6:c6:
6d:21:05:98:7f:02:7a:80:f3:13:19:54:55:11:f4:
aa:09:48:b9:96:d4:f4:09:29:67:7a:db:dc:2f:90:
b0:0c:c3:b2:ae:ea:f0:0e:b1:62:a6:f4:5c:5c:2c:
22:8b:60:c5:cf:f5:b3:06:c4:4e:31:64:8f:c4:37:
f9:82:9d:c3:37:58:7b:64:5e:62:e1:b4:20:55:79:
29:da:c5:90:50:3b:12:8f:92:d6:ae:d1:65:8f:30:
27:f9:f6:91:36:72:50:41:4d:41:da:37:95:c5:9d:
e4:29:ff:81:94:fe:1a:ac:36:58:08:f0:3e:19:11:
02:9d:01:10:67:ff:72:3b:03:ab:68:fd:1f:a6:8d:
b0:73:e7:de:30:42:6f:49:d0:44:c8:cc:f2:a4:6d:
5f:38:5a:17:54:af:ab:6d:69:75:60:0b:96:99:56:
47:3a:b9:79:93:8f:77:ef:9b:bb:e3:cf:81:4f:71:
53:05:ef:b0:14:fc:35:69:ff:a2:fb:2e:cd:66:1c:
4a:b6:6c:70:0a:02:88:09:48:f0:09:59:97:f9:4e:
9b:1d:c8:7f:fb:f1:97:4f:1d:10:37:a2:05:48:44:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:03:02:80:CC:24:33:FD:06:4E:B4:CE:9B:CF:71:D3:64:2F:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
X509v3 Authority Key Identifier:
keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:3a:9a:b4:0d:8f:a8:fb:13:1c:9f:97:c8:b8:48:c5:62:e0:
e4:f7:73:c8:13:78:ee:f3:9f:52:64:97:20:f1:51:b4:6f:8a:
c0:f6:89:c8:6c:41:58:7b:72:f2:64:27:6d:5b:ae:42:a5:57:
ce:b0:fe:28:bc:5b:18:a2:45:ad:65:9e:64:6a:df:bc:ee:c6:
03:30:e9:7d:ae:13:8f:4d:98:03:84:e0:ae:7b:cc:aa:d5:51:
4e:6f:dc:13:ea:80:c0:94:e4:de:75:90:95:db:61:1c:45:47:
94:e1:c9:fe:56:fd:56:04:37:49:80:99:6a:51:65:69:e4:d8:
3a:fa:90:88:37:33:85:34:90:88:5b:91:fc:18:d1:47:fd:ec:
18:cd:81:72:1a:33:ae:6f:d1:3b:a6:0b:32:af:a1:53:6d:6e:
55:01:00:4e:2f:de:aa:66:2c:9c:a2:06:2b:e2:ff:df:5c:03:
fb:1c:9f:dc:9f:bb:50:b4:9c:93:27:4a:85:9c:8b:c7:6d:f3:
42:f6:8f:7d:11:d3:02:99:e0:72:1d:b2:51:ce:ce:45:84:9c:
34:b6:48:cc:78:35:d0:f3:64:46:c9:46:fd:4d:5d:e3:6f:d9:
8e:9f:64:4a:45:12:a3:93:f0:cf:17:0b:de:88:a8:14:6e:ac:
6b:e2:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:03:02 2025 by rpki-client