Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa
File: bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa (raw, json)
Hash identifier: b6xf687A27sy2VURA8k2OXiT1Qe2gRY4e3Er1dEijiw=
Subject key identifier: 9C:B4:DD:35:47:5E:58:C2:20:54:7A:28:54:F3:43:31:AC:CC:8C:71
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285847F84F7FB8246470DD1C522980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 9009
IP address blocks: 104.218.198.0/24 maxlen: 24
104.251.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:7f:b8:24:64:70:dd:1c:52:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=9969fe02-c999-4aed-954f-c8b1d47eef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:0e:05:72:a6:16:cc:85:94:a9:70:51:65:
a8:01:54:fd:70:9e:c5:b4:d0:7d:00:83:56:43:78:
3b:32:b5:56:7b:2c:11:a5:5c:8d:81:a0:af:5e:b5:
52:f2:45:52:08:f2:a9:f6:70:c5:43:59:af:05:78:
be:c5:17:f8:53:6b:ef:d8:b2:07:37:20:23:f5:d9:
c4:70:57:88:aa:1b:c5:ac:a4:1f:7f:73:7a:61:9e:
cc:b8:9b:36:47:af:95:0d:af:df:2a:07:a4:96:66:
f7:32:e0:d2:a2:92:7b:94:8c:94:90:82:e8:e0:42:
4a:e2:6f:f3:d0:34:63:80:62:18:4a:ec:71:ad:00:
20:ef:9c:7a:de:5c:e7:03:f9:61:cd:58:5a:71:73:
5f:c5:23:eb:ac:83:36:c3:f5:14:61:b4:3a:f1:cf:
d0:b4:53:67:7e:e6:15:3e:cf:68:3a:08:e1:c7:e5:
a5:c5:85:e5:2b:bd:e6:60:bc:0e:4d:33:32:b2:37:
69:7f:5f:81:e6:6c:5a:29:a2:f6:c0:92:3b:55:23:
e2:fb:4d:b5:c2:de:4f:53:46:d4:03:7b:f2:ff:bd:
2a:53:bf:f1:a0:47:a9:28:bd:97:b2:17:dc:c3:41:
06:66:c1:79:2b:f7:ba:3d:5e:5d:ca:98:0c:b6:4c:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:DD:35:47:5E:58:C2:20:54:7A:28:54:F3:43:31:AC:CC:8C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bfc47cc7-129b-3068-85df-6ded2dbe2d64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.198.0/24
104.251.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:71:c7:ae:82:7d:a9:c7:af:51:5d:c3:6c:6d:40:7c:04:58:
4c:ca:52:8f:e3:66:e2:e3:34:87:8f:8a:68:11:aa:7d:8c:cb:
f0:3e:b8:58:79:f7:cb:2f:97:4e:8a:05:11:9d:8c:97:49:4e:
a9:5e:7a:27:ff:d7:af:26:ef:c7:af:ef:fc:c4:71:3c:80:fb:
b1:73:5c:0d:fa:12:5a:6b:45:bb:d2:58:5e:87:6c:2c:e4:1a:
58:fd:4a:68:a7:f7:66:23:11:66:02:70:27:94:95:8c:08:60:
6d:5a:af:18:a1:0c:8c:b7:71:d1:4a:7f:f5:0a:6a:95:e3:bd:
01:7b:21:5d:c6:89:f7:8c:de:3a:c3:b7:b0:06:4f:d8:f5:90:
8f:14:58:e7:91:5d:25:7b:4b:d3:fa:dd:35:19:33:fc:e8:34:
8b:62:e6:d3:24:b2:d1:59:4c:39:8e:7c:40:82:22:88:ec:7f:
2c:d2:c1:ba:d9:cc:3e:00:dc:f1:d4:6e:9b:dc:01:3f:94:10:
af:8c:c0:a3:6b:fe:ac:40:b4:a6:6b:74:ae:4f:7b:7d:4b:a8:
cd:8c:55:1b:09:41:e8:7c:8e:f4:29:86:b5:bb:ff:a2:17:c8:
7f:9f:f1:d8:c5:cc:7a:9f:e9:c6:d1:45:08:75:e1:88:78:1a:
3c:4c:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:31:52 2025 by rpki-client