Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa
File: d4441743-1181-3c78-aca1-bfe3d5680510.roa (raw, json)
Hash identifier: gEHskeicyOjkoSeiBi+WJCW/Yq4/PZmOiv0W9z1L02E=
Subject key identifier: 50:0B:DD:3C:1B:60:A9:AD:62:B4:94:8B:09:53:27:81:A7:F0:62:15
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482BF54FEE1FADDE4084A0F710
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 19437
IP address blocks: 104.254.237.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:4f:ee:1f:ad:de:40:84:a0:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=c405dcf8-7539-4c2f-a1cb-9a45c2f76db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:a1:52:77:01:54:bd:da:ea:d5:af:82:85:
69:4f:a6:c5:f5:1c:f7:08:22:56:4a:51:19:5b:ef:
13:2b:56:c8:85:c3:54:b9:45:f0:78:29:85:d1:f6:
8d:6a:aa:56:f3:5f:9c:4a:d6:f7:24:d5:21:2e:01:
e9:6e:26:07:95:be:da:03:cd:f2:fe:26:4a:c9:fd:
b8:c7:9d:ca:82:67:45:5a:b5:7e:16:4f:20:9f:04:
ce:c2:59:55:e8:26:d3:3f:e4:f3:7c:3e:e1:ab:dd:
18:00:0a:19:30:76:12:86:47:85:6a:4b:06:fa:32:
bd:1d:8e:f8:32:b8:2a:97:56:2b:f3:3e:71:2b:66:
50:d6:01:b0:d2:e8:a0:b3:0d:20:d3:06:57:f4:9a:
c2:b0:66:44:cb:44:08:51:74:34:76:f0:00:29:9c:
bf:a8:e1:94:df:c9:c8:ba:ef:b8:5c:63:af:a8:96:
a9:1d:6c:7f:ec:1f:7b:0e:57:96:56:49:34:92:86:
1a:08:03:0c:e5:f6:d8:be:04:4b:1f:f9:c1:d4:d7:
25:c2:22:b3:51:44:cf:ab:13:36:bf:e7:d6:2e:08:
cd:f6:d3:b0:44:a5:1c:b0:17:91:80:c7:6f:de:aa:
15:6e:4e:70:a8:be:5e:87:71:53:27:05:e4:1d:b2:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:DD:3C:1B:60:A9:AD:62:B4:94:8B:09:53:27:81:A7:F0:62:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:cb:70:05:24:1f:0d:aa:c8:1e:70:3d:dc:1c:3c:db:7a:3e:
28:06:30:f6:e6:22:d2:40:20:38:6b:61:69:43:60:93:52:a8:
4d:c7:39:b7:29:cf:33:af:ff:37:5f:04:90:82:25:88:5c:6f:
f1:a8:6a:c9:1c:a9:2f:25:d0:93:06:ea:9a:7a:d7:15:13:d4:
7c:c4:68:ec:13:c0:e6:62:cd:78:33:eb:87:95:4b:65:af:38:
ca:05:42:cf:ce:33:5c:34:b3:a4:96:c8:09:e3:5a:c1:8a:01:
4a:79:48:fc:94:1d:1e:55:cc:c7:21:28:f2:6d:c4:f5:9a:a7:
c5:83:46:e9:a8:0f:6b:76:ac:0a:3c:3a:76:76:d8:5d:d3:dc:
e8:75:e0:5e:c5:ac:3d:9b:8e:dc:17:aa:15:cc:dc:45:f4:9e:
de:8d:ec:e9:1f:5b:1d:02:67:56:8f:ce:a0:ae:f2:73:2d:41:
f1:99:bf:f2:b2:96:83:f5:0a:e8:12:23:90:4f:7d:29:f9:10:
6c:be:4d:bc:d8:46:9e:ba:6d:e4:94:67:0a:cd:cd:05:59:b5:
d5:91:8c:4e:ea:24:ce:e6:cf:8e:6b:8d:67:41:21:f8:a9:7c:
36:f4:00:7a:bb:b7:75:79:8c:39:90:eb:bf:64:5a:9c:b0:fc:
f3:ac:2d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:22:59 2025 by rpki-client