Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
File: a492bc79-a43d-3b74-a966-215a139f5151.roa (raw, json)
Hash identifier: COeT6qYvBDe3s6+KxoXaHJ8FEkeLe0lXkP8y92K8ewU=
Subject key identifier: B4:77:8A:D9:07:6E:B1:7D:29:C9:22:61:E0:C5:83:42:43:98:07:7D
Certificate issuer: /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
Certificate serial: 010D0C9F4328584863CB0A540F4673BCFB974FC0
Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 399833
IP address blocks: 104.250.248.0/22 maxlen: 25
204.144.124.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0a:54:0f:46:73:bc:fb:97:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=c6b876b5-7fe5-435f-ac47-06d35a162db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:8c:4c:90:38:6c:52:88:37:8e:d6:2d:9d:
c9:0f:af:2e:4a:16:94:a4:bd:52:ae:b3:77:ae:e7:
83:b6:b8:4f:60:b5:8c:df:0d:06:bd:de:c3:64:3f:
de:59:fe:ff:14:04:68:9f:72:56:5c:de:65:7e:95:
d7:38:58:81:40:0d:3b:fb:8c:35:d2:cf:dc:16:d2:
8e:77:70:fe:c6:73:55:4a:89:5e:27:21:56:f0:1f:
63:06:82:1d:f0:db:f2:5a:4e:76:92:f8:88:4a:0d:
9e:bf:91:49:bd:f4:dd:3f:15:ff:d0:57:d1:00:9a:
69:5f:28:5e:89:8d:ee:c1:4f:8a:47:f2:08:b9:2e:
e5:22:5f:bb:2e:d8:6f:fc:b0:60:99:a7:a8:26:5e:
08:cd:82:5a:53:4e:c5:e9:5e:06:70:57:3b:47:9a:
b9:1a:6b:0c:ba:5a:e7:e7:b4:34:ed:79:79:db:56:
53:bb:13:42:ca:47:a5:8a:ed:d6:a5:ec:94:0e:d8:
dd:b2:45:6d:3e:a2:64:fe:2a:ee:78:28:43:6a:e5:
fd:89:b8:01:2a:e3:b3:ec:62:26:47:1f:07:ee:7d:
41:b9:7b:55:fe:f8:15:ee:13:55:52:64:0f:21:2a:
01:bd:9f:4e:ea:f2:62:70:c5:9d:04:2c:d9:64:51:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:8A:D9:07:6E:B1:7D:29:C9:22:61:E0:C5:83:42:43:98:07:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl
X509v3 Authority Key Identifier:
keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.248.0/22
204.144.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:36:dd:4b:b7:18:fe:85:21:d2:db:90:dd:d4:8f:50:25:e7:
7b:ce:96:cd:e1:6b:c3:d7:30:14:63:b5:89:77:80:b3:3b:10:
a7:c2:42:4c:aa:70:ae:13:01:de:3c:5d:b1:e5:ef:68:31:aa:
07:a9:9f:61:73:5d:08:24:03:b0:63:8b:8b:75:a5:5d:82:8f:
72:47:55:23:10:89:cd:71:eb:1b:33:07:7c:3c:2d:53:20:49:
a5:91:99:89:2b:72:da:71:e8:55:c9:ff:54:09:44:47:6b:1c:
a5:1b:a0:ee:95:68:d7:38:0c:94:9e:a0:fe:fa:7e:30:d6:44:
42:8b:9f:6f:50:bf:1d:f3:c4:58:22:cc:24:48:c4:52:c1:81:
d8:f0:f1:cb:c6:e6:2d:71:7d:70:e7:fb:d5:80:39:f0:2a:ed:
07:1a:c5:a5:98:b7:1b:e5:9c:c0:a5:90:d4:e0:d6:3c:45:76:
17:56:be:7a:6e:fe:11:e8:c8:e6:f6:5e:24:5c:01:f5:c7:bc:
eb:c1:96:16:5d:4d:df:db:92:65:a7:a7:39:fc:ae:bd:7c:5f:
45:8a:30:d6:85:5c:5c:71:6c:6b:a1:6f:df:a8:4d:6e:8b:4a:
f2:a0:79:67:31:5c:72:f1:45:9a:6b:b1:da:8b:d7:29:5b:b7:
6c:fe:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:09:32 2025 by rpki-client