Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa
File: d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa (raw, json)
Hash identifier: IC/slvBTMgFbwlQAmbkkCgUkF7BQ/7Pm/04dRq77gjM=
Subject key identifier: F6:F4:0A:7C:AA:2D:D1:71:26:D0:FC:8E:15:9D:B0:6F:C6:2C:BF:59
Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial: 010D0C9F432858483F80255D104A2EF5BC03E9C0
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 210781
IP address blocks: 104.249.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:25:5d:10:4a:2e:f5:bc:03:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=cb6b210c-f0a3-460c-907d-bca7b7f7a19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:5d:1c:4b:10:5a:bf:a6:7a:10:1a:98:8a:
88:59:05:b5:0f:b1:26:04:f3:12:a4:dc:15:c1:25:
af:1b:99:e4:a6:26:3b:de:d7:8b:91:56:88:b2:e0:
4d:44:98:24:8b:48:de:e6:a7:de:bb:ea:06:e7:ff:
71:25:47:60:bf:e4:b3:b5:c6:ec:50:f6:e2:05:a5:
a4:b0:b6:04:dd:be:9a:eb:72:ba:ff:9e:b5:c2:7e:
83:10:c8:ac:de:c0:01:72:74:af:1f:88:3e:6c:05:
49:6b:ec:c5:e7:c8:48:91:20:80:a9:ba:95:66:0d:
01:f2:0b:db:4e:b3:17:f8:57:f6:e8:ed:ad:8f:30:
3c:d0:8d:b8:43:16:a0:bc:5a:3a:fd:d8:fd:24:4d:
34:8e:8c:57:d7:4f:17:ab:46:72:97:f9:40:3b:f4:
42:62:39:a9:ce:2c:cc:79:96:21:d9:23:a1:ab:72:
f5:89:53:71:73:38:24:0f:7b:53:2c:d7:06:25:a1:
38:57:31:28:d8:15:65:7a:62:fe:3c:a2:80:49:9e:
62:c8:16:9f:c6:e0:93:e2:ff:34:df:be:06:ef:de:
9f:0c:83:c7:4d:62:7b:fd:ab:00:d2:7d:e1:8e:63:
3f:1f:d4:46:e8:f1:c6:c9:eb:a0:33:93:43:cd:66:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:0A:7C:AA:2D:D1:71:26:D0:FC:8E:15:9D:B0:6F:C6:2C:BF:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
X509v3 Authority Key Identifier:
keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:4a:4c:cf:b5:1a:c4:6d:cf:72:d2:eb:96:f7:b1:fc:4b:58:
bc:cc:4b:fa:e1:39:64:65:3b:d3:d7:55:24:c1:7f:fb:c4:c7:
a4:cb:30:c6:61:ed:c6:66:4d:61:24:0b:b0:3c:f4:24:78:4d:
42:e8:4f:33:64:1a:51:46:65:d1:c5:9a:7e:6f:d8:6b:ab:2d:
4c:4f:4a:1e:28:5c:9e:0d:03:36:a7:32:1a:83:c4:ad:30:74:
b2:5a:6a:9f:d5:83:fa:92:fd:ba:b6:1f:44:e7:0d:01:af:13:
ab:fd:b0:fa:ac:a9:71:8f:4a:38:eb:e5:15:07:12:88:30:59:
2a:b4:1c:1c:b6:8c:ab:72:cd:74:c3:49:bc:cf:8a:c8:d9:dc:
d9:c7:44:bf:8e:86:a0:8f:60:c4:4a:37:27:f8:cf:58:51:ca:
83:b0:8b:e9:95:fa:98:76:5d:d2:ca:8d:96:71:10:34:4d:4f:
f7:7d:d0:b2:c1:8a:2f:6a:c5:62:f6:e4:4e:9c:25:44:74:12:
4d:85:f5:24:34:91:83:67:13:f0:dc:30:95:2c:aa:7c:3a:f5:
68:be:69:e1:da:17:0c:91:aa:61:61:2d:bf:1a:99:35:2c:a5:
ce:3f:7d:5d:6e:04:fe:a1:a7:b6:ee:8b:63:5b:95:7f:b4:76:
04:af:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:45 2025 by rpki-client