Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
File: 472b8477-15d6-33d4-b0d4-4c577d494c08.roa (raw, json)
Hash identifier: zkesrVbKe0e9/2KEpRrIH0viUhkH4g5PquIfWQwatQo=
Subject key identifier: 49:99:B5:9F:F4:CE:A0:E4:20:A0:2E:26:04:EB:CC:4B:D0:E6:44:BC
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F43285848100A940AFF51311CDB49F480
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 9312
IP address blocks: 104.245.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:94:0a:ff:51:31:1c:db:49:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f627c9a1-6a6b-4847-a27b-c25a2bbbcb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:35:e7:54:8a:f4:67:ee:cf:ea:7f:dc:24:
5c:97:8c:70:de:f1:f9:08:fc:42:22:1b:66:ab:6b:
4d:1b:d7:cd:de:e8:98:27:c5:97:a4:dc:e9:2c:8c:
ce:e9:82:de:00:a8:2f:85:48:c4:56:6d:6b:1a:47:
08:f5:e3:46:b3:53:23:3f:1f:b3:e2:a8:4d:06:22:
23:71:90:2c:ee:36:a1:a0:28:6c:91:cd:7c:b6:5c:
3f:5c:bb:af:0f:c4:db:ba:a7:86:c1:33:a2:61:3a:
05:19:7f:10:d0:33:76:43:5f:dc:dd:de:65:4c:a6:
16:4c:e1:64:87:94:40:d8:83:ce:47:80:79:ac:94:
c3:c8:0b:7f:df:e1:84:b2:4e:6a:bc:b6:08:87:ce:
c5:64:3d:45:1e:19:a6:5b:fa:3e:6e:f1:e3:45:ad:
4b:ec:da:19:b8:3f:00:09:8e:f8:d4:6d:17:84:e2:
0d:bf:96:b9:78:71:54:32:97:b9:4e:0f:bf:15:95:
23:23:7d:df:19:74:91:20:f1:c1:24:40:0e:f7:42:
05:a9:23:61:e8:55:f0:7b:21:5f:27:f8:52:c4:c7:
7f:c8:8c:4a:8f:75:64:fa:f5:c8:f7:0b:ec:42:4c:
f9:70:c3:63:26:f7:46:df:61:a8:35:6b:55:2d:fc:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:B5:9F:F4:CE:A0:E4:20:A0:2E:26:04:EB:CC:4B:D0:E6:44:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:b4:a4:d4:07:47:0f:2a:ea:f1:ec:bf:7e:bc:6b:cc:ef:9d:
f1:85:23:e0:95:04:14:8e:ae:34:cb:a3:cc:51:42:38:a5:5d:
11:4f:6b:04:bb:33:9c:95:82:a1:ed:cc:9b:64:87:42:7b:27:
cf:36:14:9c:93:47:fb:1d:5f:e1:43:7e:5d:49:21:9e:14:e0:
df:6a:43:da:15:29:12:10:d8:1c:54:bb:60:71:6b:07:54:b2:
e2:29:ec:18:58:b4:99:8e:9e:0d:41:e8:05:19:20:ae:d1:7a:
ac:a8:16:6a:b8:8e:49:f8:fb:59:ab:0d:d9:da:fb:a1:0c:43:
75:8e:63:df:2c:4d:7c:73:51:cc:54:aa:c4:ff:08:58:bd:28:
71:4c:ff:7d:fe:4d:38:d4:ee:4a:89:b6:db:2f:7d:a6:f5:b4:
6d:92:ae:dc:1a:3f:9b:f8:ab:5e:85:46:12:a7:b0:3d:e5:29:
2c:f9:f0:c8:cf:b9:1e:66:7b:d4:67:72:10:c7:f7:1a:c0:8b:
7d:a1:b5:d9:dd:37:ee:71:c9:3c:e2:b2:b6:05:6d:54:b1:bd:
52:e2:5e:a9:6b:0e:69:0b:08:f0:cd:4b:6b:6c:61:38:7e:ae:
bf:ad:90:c4:e7:1e:8c:93:5d:bd:f5:42:fa:b7:07:56:f0:f9:
c1:ea:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:41 2025 by rpki-client