Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa
File: e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa (raw, json)
Hash identifier: L1zIXyj3AjxTAdzU87oLSA45s356biJJXNgzMNMiMdk=
Subject key identifier: F4:CF:B0:FF:04:0C:E7:4A:42:89:5B:36:18:83:68:82:96:CA:67:F4
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B24C45428BFA5FBD907C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 11404
IP address blocks: 104.156.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:24:c4:54:28:bf:a5:fb:d9:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=6087e1cf-68f3-4cbf-887b-aac79c3a0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:c4:8e:d7:35:7b:bc:82:f0:9d:d3:68:2e:
d4:b3:5a:d7:8a:81:57:a6:0f:ee:55:60:96:75:f5:
1a:a1:65:ed:6f:82:9f:c8:91:9d:c0:57:6d:86:ec:
5b:54:4d:70:a8:3e:66:9f:a8:6d:ae:f2:a4:24:a2:
3f:ad:81:a2:69:d0:7f:19:dd:04:c2:4d:73:35:6f:
7c:c8:07:d2:8c:5e:9b:0d:a5:1a:2e:ca:d5:8d:a1:
22:42:e1:b8:c2:31:51:05:7c:16:12:1d:6a:40:1f:
00:97:56:b8:a1:28:fc:1b:09:05:d1:b2:79:0c:8b:
08:b7:4d:2d:8f:29:a9:3c:c0:d6:42:96:29:52:bb:
0c:de:d6:93:52:d4:3b:7f:f0:89:69:f7:6e:8f:24:
45:de:c7:b1:10:a6:bd:02:44:19:f1:b3:3a:4a:c9:
fe:c7:65:ed:c5:af:33:9e:7b:03:80:f2:83:9e:69:
11:1a:9d:00:5d:4f:8d:58:34:43:d4:08:38:37:2a:
ae:ee:3a:30:ee:c9:83:da:3b:22:59:f6:5a:35:67:
19:44:93:27:cb:84:8a:a3:4c:0e:82:7a:01:a1:b7:
0e:69:29:98:35:7a:2d:e7:de:b8:4d:61:30:28:46:
98:00:9e:44:99:d0:d6:14:b3:64:fe:56:70:83:c2:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:B0:FF:04:0C:E7:4A:42:89:5B:36:18:83:68:82:96:CA:67:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e67dd3ed-cf9f-34ce-88f3-e5be54a98174.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:7c:2b:32:ef:c4:aa:be:b9:6c:ea:2e:ec:e3:62:59:53:13:
46:09:cb:37:ce:bb:69:4e:b2:40:36:51:57:3b:ba:01:7d:51:
7b:fe:1c:64:6a:63:3d:bc:b9:b6:6c:13:dc:ed:fd:1f:ff:87:
1b:e5:ca:2d:63:27:a4:9b:4b:ab:a0:90:38:b4:1c:b9:a3:8b:
d3:ca:38:c1:79:8a:37:7f:c9:d5:de:66:da:08:be:d0:01:77:
4c:28:db:74:30:27:9f:17:39:4c:7b:f8:91:ec:5e:59:da:e1:
90:5b:b2:8d:35:9c:12:a4:ee:4c:76:99:b3:52:3f:c1:7f:9b:
3f:4b:3f:73:85:83:12:16:fb:b0:d5:42:bb:c4:58:31:88:60:
c1:a1:14:6e:f0:06:8e:be:25:e8:15:dd:4a:1d:25:0b:a6:c4:
e5:7a:78:64:51:b5:47:8b:05:d9:0e:6d:02:67:e2:55:6a:a3:
b6:91:42:39:52:24:bf:47:52:a4:0a:de:6b:d9:32:c6:72:28:
e6:6f:53:ee:59:45:b5:c0:e8:6c:00:c8:dd:4e:73:a7:cf:cb:
d1:c9:b4:38:ab:06:f3:02:57:ec:f2:08:42:15:be:9a:0c:b4:
52:a2:90:e5:e6:5f:5d:84:55:fa:6d:10:15:2f:97:78:47:5d:
b9:8d:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:35 2025 by rpki-client