Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa
File: feb035d0-a74a-3791-8fee-e996319d6a19.roa (raw, json)
Hash identifier: RvQpZP8aFjCTczbsWp0YLYmrqvBV7ljEHi6Wq2uD57w=
Subject key identifier: B1:EA:5B:12:09:ED:8A:46:53:53:93:FC:5B:21:29:63:9C:1A:6A:6D
Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40
Certificate serial: 010D0C9F432858482A8FE1422D5698FB6922BBC0
Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 139341
IP address blocks: 104.255.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e1:42:2d:56:98:fb:69:22:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=8d7feb43-0774-486c-bd9d-47060ca3c96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:57:b6:2f:ee:0f:0b:8a:68:6c:2b:c0:bf:
11:b2:8b:47:a5:fa:bc:ec:81:99:81:bc:13:3d:1c:
ac:96:c6:26:aa:d2:6b:c4:db:29:49:a6:22:30:39:
12:51:81:ac:3c:a5:23:09:05:cf:35:e4:77:25:08:
63:5f:36:64:6d:ed:e1:3c:e5:2c:80:a5:b9:2e:7e:
fc:b1:49:3c:f7:fd:b1:3d:7f:9a:18:5b:f8:37:8f:
bc:80:b1:54:ff:27:78:4a:71:c5:47:b2:ee:60:0c:
15:38:1e:cf:84:c0:66:70:d8:1d:4d:6a:a5:b0:32:
ab:fe:1e:ee:c4:3e:d2:c8:7d:55:38:5a:55:0e:a1:
73:b4:c2:40:09:45:fc:dd:34:c3:66:5a:f0:6a:f8:
b4:41:12:aa:21:36:da:37:0f:03:07:88:8e:1a:e8:
ef:e0:12:f9:e3:64:a7:ff:71:7c:2b:f2:0b:ae:bf:
df:22:13:b4:e6:c9:7f:a5:b6:75:b6:35:6c:dd:da:
a5:35:05:42:9f:90:2e:cb:95:55:47:14:46:d8:c3:
46:6e:3d:79:f9:b0:c0:3a:1f:98:fb:fb:69:65:e2:
91:27:cc:39:a5:48:98:f4:aa:fd:21:49:30:64:b5:
2b:c1:7f:d3:a4:91:6a:56:f6:1c:a7:49:c0:8d:1f:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:5B:12:09:ED:8A:46:53:53:93:FC:5B:21:29:63:9C:1A:6A:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl
X509v3 Authority Key Identifier:
keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:7c:ef:7b:4e:ba:d0:d2:f7:53:e6:9b:af:6b:c1:a4:03:92:
5f:c8:c2:82:be:78:eb:bd:ea:e7:ee:9a:0d:70:93:ba:23:50:
d4:48:9e:78:3c:31:7c:22:76:4c:10:f4:57:1c:01:db:21:66:
86:3f:47:a4:fc:66:eb:a6:18:13:98:f0:f3:54:fd:03:dc:0b:
92:1d:37:06:4f:3c:ce:db:f7:d9:97:f7:00:67:4d:7f:90:8e:
5d:43:16:f7:d6:df:18:1c:35:d9:99:cf:b9:58:c3:ef:18:64:
75:86:46:90:8c:dd:06:1c:bc:32:a2:f5:de:3f:f3:4e:4d:53:
d2:79:14:11:e9:e3:77:3f:06:27:e9:cb:23:ca:60:0b:f8:dc:
1c:93:2b:dc:ed:97:5a:c6:a2:67:20:ed:36:a5:e3:13:4e:7d:
e2:d3:ae:13:26:11:8e:cc:c8:e7:31:7c:f2:04:7a:37:e4:4b:
b6:9a:17:6e:ab:dc:c4:8d:6d:a1:11:f9:65:e3:c6:31:c6:09:
f5:ef:9d:a5:93:f6:9b:3f:d2:04:d0:33:27:56:a4:3d:be:62:
79:8d:58:de:be:db:92:fe:31:83:69:70:46:61:fe:a5:16:6f:
d0:90:54:60:a7:44:3d:b3:64:82:45:f1:66:43:00:6f:95:e9:
d5:60:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:03 2025 by rpki-client