Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
File: d4a714f3-d6ab-3784-91ec-aa3610979901.roa (raw, json)
Hash identifier: AXnx+YiQvQcH5yNN9cSmgeDPArTnWU2d1cSOag78GBA=
Subject key identifier: 25:CE:06:EA:CF:C4:1F:4E:59:4E:92:0F:80:6A:93:03:45:8A:03:CC
Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial: 010D0C9F43285848159FE5C13E2DF8E594C24000
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 19905
IP address blocks: 104.250.64.0/19 maxlen: 24
147.194.0.0/16 maxlen: 24
192.235.128.0/17 maxlen: 24
209.163.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e5:c1:3e:2d:f8:e5:94:c2:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=627ebbc6-9e85-4f18-8f7c-88c1749c3934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:59:5c:e9:ad:d6:c3:bc:b3:1d:d5:6b:6b:
dd:50:96:ec:73:57:38:79:9a:f2:60:e2:16:44:12:
57:2d:d3:79:60:42:53:b6:f7:2b:9a:d3:72:2f:80:
20:b0:30:f5:f1:ff:03:e0:a2:db:35:7d:45:41:8d:
c1:e9:89:7d:be:37:3d:6a:2b:b8:b9:8b:04:bf:c9:
63:fe:fd:31:6d:05:30:f3:08:10:a5:ec:b6:ce:cd:
df:08:48:d5:af:d9:30:5e:33:19:8f:53:9e:07:6c:
e4:a8:69:18:35:c2:be:3e:11:84:b6:20:11:b7:eb:
14:c2:c7:a4:fd:03:cd:51:ad:6a:7c:0c:52:17:65:
bc:1f:f7:2a:ac:27:58:3e:13:36:2a:db:c5:ee:80:
b3:84:77:ae:d7:6f:41:b1:42:69:d9:ff:61:70:f2:
dd:4f:08:36:18:fd:20:04:f7:5b:99:bb:b4:20:84:
d8:18:2b:55:49:a3:ab:fc:0b:24:06:ad:6a:62:cd:
fc:1b:e5:f9:96:f6:b4:49:5a:32:be:90:45:61:c6:
3d:f2:81:4d:63:3a:46:44:2e:75:02:e1:24:98:e5:
92:7a:98:e5:c3:52:3b:4e:b0:c3:a4:31:bb:d6:82:
32:4e:63:1b:30:33:88:e9:e0:de:a9:01:61:ce:13:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:06:EA:CF:C4:1F:4E:59:4E:92:0F:80:6A:93:03:45:8A:03:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
X509v3 Authority Key Identifier:
keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.64.0/19
147.194.0.0/16
192.235.128.0/17
209.163.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:98:c0:fb:69:b0:57:f4:70:aa:73:ef:fa:cc:1b:f6:e9:f2:
9c:3c:19:8a:b0:f0:5f:c6:97:1e:0f:fe:18:7e:c3:78:62:af:
30:44:55:15:7e:98:58:a2:61:f2:62:5e:d9:0b:36:63:5e:f7:
bc:86:9f:59:38:41:62:5e:07:36:2d:fc:f0:be:8d:76:c7:c8:
be:c1:ea:4a:90:06:33:f7:a3:f0:60:33:90:20:29:d8:c3:43:
2f:bd:be:1a:ba:89:bc:9e:96:63:1b:77:e9:14:a1:7e:af:74:
2b:ec:c8:c9:50:34:9a:1a:c2:53:6d:3f:5c:a9:10:95:6a:35:
e1:6a:e4:ab:c0:f5:b7:fc:3c:86:1a:66:dd:2a:aa:1a:e0:d9:
40:6b:19:1c:a4:35:45:cd:c8:b8:41:0b:f1:5c:0a:f1:b5:f2:
5d:99:a6:4c:a7:fe:ab:a6:99:f9:78:27:30:ce:27:77:62:6e:
a4:86:03:64:14:9f:b0:4a:bb:f2:55:ce:a1:c4:7d:d6:12:78:
53:26:d0:bb:f1:c8:57:67:23:d1:25:3e:72:ce:83:23:f0:45:
8f:00:fd:7b:f4:d5:c8:c8:3f:72:e0:9f:81:02:31:48:3a:4f:
21:2e:a4:53:ce:69:39:1c:cf:03:13:79:10:ed:f9:9b:a4:c8:
77:c7:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:36 2025 by rpki-client