Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
File: 3e73c06b-902f-3599-accc-26c4dac8766a.roa (raw, json)
Hash identifier: MMfd9HGC9GQ/2g+a0klDCLOCizbYIDbzah5lXlbk5tw=
Subject key identifier: D5:09:0E:94:28:88:03:A5:22:E1:F6:65:2E:EB:E3:E3:AA:AF:5D:37
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F432858488F107B23BC3197B60D0D9960
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 40342
IP address blocks: 104.200.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7b:23:bc:31:97:b6:0d:0d:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=7afcabdc-0ba1-46f1-b017-7ac567d9067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:1d:5c:c9:fa:6c:ba:d8:27:c2:5a:37:f7:
89:7a:13:07:2f:ff:aa:63:cd:98:1f:d2:6e:68:ad:
91:6a:db:08:ba:1f:4a:c3:11:c7:29:59:b4:0d:9c:
66:86:ce:89:34:58:e0:24:96:f1:cd:33:bc:8a:0a:
84:d8:ee:23:6a:bb:b6:05:2f:69:3c:84:19:e9:16:
6c:c7:88:6f:a7:d7:63:ec:f7:8b:9f:ff:29:7e:c8:
71:12:6c:cb:b0:03:86:2b:04:0f:ad:65:3e:61:61:
18:9c:a6:31:8f:6d:37:8f:06:4a:0a:c8:62:49:d9:
54:0c:77:ad:f2:ad:f3:d9:04:cb:43:33:69:56:9f:
c8:77:e5:d6:62:c8:90:e3:1b:51:43:84:ed:cf:e9:
06:08:35:8b:9b:7d:c7:23:8c:eb:9f:f5:50:74:74:
22:37:8a:64:30:b9:1f:ff:d8:90:2d:2a:e2:eb:aa:
76:14:94:11:93:8a:22:05:b7:1e:b8:6f:bb:96:77:
8e:56:b3:00:17:cf:ba:ea:0b:01:b6:24:0a:19:47:
d8:3e:52:7e:c8:81:14:1f:e5:9b:32:af:ac:ac:cf:
6b:81:b0:56:e8:7e:35:57:4c:2b:a7:8d:1e:48:c9:
e6:b2:49:e0:a1:86:a0:3f:41:0b:1f:77:18:b6:dd:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:0E:94:28:88:03:A5:22:E1:F6:65:2E:EB:E3:E3:AA:AF:5D:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:fb:2a:2b:1c:84:27:4b:b1:41:15:34:c0:50:28:9c:ad:9c:
57:9c:0d:58:26:50:c4:1e:98:bf:db:b6:42:27:cc:25:e9:fe:
6b:5d:b6:97:4a:de:2f:7f:41:ec:42:36:f5:0b:8b:1a:51:16:
27:d3:43:a5:95:74:45:ae:ae:b2:7b:04:6e:0c:c6:1f:68:e4:
ef:bc:96:23:c2:25:8a:54:1a:fb:ef:5c:94:13:7e:e1:49:9e:
28:c0:16:95:75:58:cd:4b:4d:e2:9e:a3:b4:06:e4:d3:36:68:
e8:d7:b6:20:76:43:28:6a:a2:8f:4d:0d:80:d4:26:e6:1e:50:
73:c8:29:2c:08:07:95:29:39:ce:ce:58:0c:65:dc:28:9b:12:
4b:f7:af:bb:67:a0:54:33:d1:1f:18:d7:48:ce:61:e1:0d:b1:
29:f5:92:22:9c:39:70:56:cf:20:e9:15:92:a4:a9:7d:22:c5:
a9:b0:20:ef:22:80:fb:bb:48:5e:b6:1c:5b:a8:01:16:3d:63:
69:6f:c7:50:99:73:44:8b:2c:67:14:19:48:33:6c:a8:db:1b:
90:70:bc:b2:9d:c0:35:8a:35:63:ee:f7:30:33:6a:e4:40:81:
60:4a:7a:05:46:fb:53:cf:bd:2e:54:a7:dc:22:e1:80:4f:67:
56:3d:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:58:13 2025 by rpki-client