Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa
File: ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa (raw, json)
Hash identifier: Q3CJ4tyg3tduUyOHRVibHs0cADrXHHhzK5z7TvNKf/Q=
Subject key identifier: 47:C7:86:B9:F5:4C:AB:13:D4:28:74:2B:7D:12:37:EB:A7:19:C0:1F
Certificate issuer: /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial: 010D0C9F4328584839EAB9D1B218EDE8BCAEBB88
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 20205
IP address blocks: 104.37.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:b9:d1:b2:18:ed:e8:bc:ae:bb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=9fa7528e-f7a3-4c23-a1af-e091ec4056a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:23:ff:cf:04:fb:c9:37:c1:9e:af:61:b4:
86:10:ef:a1:7a:38:c0:c6:ab:a0:03:7e:3c:ef:ea:
ad:47:ad:4a:2e:0f:fb:1e:de:38:0b:a8:8c:19:e0:
94:13:db:18:cb:55:bd:3c:63:ba:5f:52:f3:9e:6e:
8d:55:80:d8:d7:68:de:5a:64:59:96:4d:e2:4b:88:
8c:4c:ae:34:11:ea:87:69:d5:47:af:e4:51:85:5f:
a3:8a:ff:2d:88:71:61:5d:08:14:70:58:ec:cb:5e:
72:4d:cc:40:18:55:50:18:5d:15:6a:07:39:80:a9:
5f:2d:75:bb:54:db:ba:cc:04:8b:ca:a5:d8:a3:7e:
2e:20:82:fc:d4:46:90:2f:d9:1b:94:bf:13:b8:bb:
e0:d1:56:4d:41:55:0b:a5:c5:cd:3a:81:93:b2:87:
21:23:88:0d:de:94:cb:71:2d:19:d5:eb:97:e4:5e:
5f:ad:d8:60:c1:fd:2c:00:a5:a4:03:61:60:d7:3d:
17:e6:35:b0:e8:a1:3f:07:78:6e:93:2f:1c:73:4c:
8b:61:e5:e7:5d:09:2e:33:fe:73:f2:03:68:20:fe:
c7:82:9a:1e:7b:2a:ac:0c:30:15:dd:b5:f6:f2:52:
b7:1a:63:f0:18:0c:6b:7b:6f:a9:af:96:c1:c4:72:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:86:B9:F5:4C:AB:13:D4:28:74:2B:7D:12:37:EB:A7:19:C0:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/ed8da83e-c2c5-3642-82db-1e37110bfbaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
X509v3 Authority Key Identifier:
keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:4d:8a:73:9d:98:66:9b:b6:5f:ce:37:8d:f1:c9:c7:74:6a:
6d:93:c7:04:98:d2:0b:e6:de:d5:b4:d3:37:60:68:52:5e:c8:
74:70:20:99:30:bb:5e:92:4c:ab:b9:3a:eb:5f:1f:b3:ae:2d:
80:a7:cf:f1:42:9e:7b:4e:f3:8e:03:6a:b5:99:5f:2c:81:2f:
f6:20:6b:be:50:9d:81:c6:3f:f3:e5:fb:6a:bd:5a:92:e3:0f:
79:37:fb:b6:0e:c7:9e:9d:bd:94:c0:72:af:cf:27:40:2d:c9:
29:25:d6:78:3f:1d:87:4c:b0:45:a8:f3:34:92:22:e3:a6:9e:
0b:00:b7:31:47:b9:4c:7b:42:73:99:cb:30:12:0f:7b:3d:4d:
b0:02:12:a1:40:8e:80:e0:c4:47:50:ae:e7:f9:0c:22:1f:c3:
ac:b4:fa:13:e8:7e:7a:d4:7b:44:e8:38:b9:77:7c:2f:22:f8:
7b:4c:b9:fd:86:56:f4:07:19:99:be:2d:a1:7b:d3:00:d2:b3:
a0:aa:5d:c0:ed:2f:79:f9:0a:b3:61:54:83:3b:9f:88:3f:e6:
ca:80:01:4b:4b:69:b6:ff:17:e7:7b:56:2e:35:04:c0:a9:0c:
73:70:9b:25:14:3a:70:32:2e:19:d4:35:33:2f:7e:07:d3:39:
10:51:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:39 2025 by rpki-client