Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa
File: 7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa (raw, json)
Hash identifier: lf8RFAC51FpkHQeiXuZab4ZFV1d6D/aV34r4dj4QVuc=
Subject key identifier: A5:BA:13:1A:2C:02:0E:CF:6D:0D:D5:79:98:B5:A4:CD:57:8F:44:5E
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584871C0766AE203A6FC1F9612C0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 399291
IP address blocks: 104.238.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:76:6a:e2:03:a6:fc:1f:96:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=4b042efc-ad58-49af-93c4-ff59015888b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:f6:d3:cb:4e:ed:59:8a:0c:e2:e2:87:d1:
70:40:7a:bc:41:d4:16:7a:d9:c6:13:8d:52:ce:ca:
6d:f3:a6:69:35:b2:d3:f9:17:c5:37:59:b8:ad:57:
35:12:5f:94:ba:25:f1:1e:08:e8:a6:53:75:ee:eb:
85:a8:d2:80:00:09:77:98:09:5d:05:4d:42:16:b4:
f9:f3:7b:e4:fc:1a:48:3c:b9:d0:9c:09:70:e0:6d:
e7:04:63:86:d9:e1:19:51:d1:e4:51:8f:2f:2c:0a:
00:6f:0b:ec:93:40:7f:9d:01:d9:47:67:e3:de:2f:
78:4d:35:1e:5e:0d:6a:0e:af:26:da:9f:e0:f8:07:
12:71:7c:4d:27:14:e3:67:f8:9e:60:79:54:3b:34:
cf:15:2e:05:83:f2:81:cb:a1:d4:9f:27:52:4c:4e:
c7:5d:ab:30:a2:46:4c:a8:a4:cd:3f:5e:5d:87:3a:
c2:65:5e:ca:13:81:80:bc:72:81:b3:c6:f4:0c:01:
fa:d5:1c:39:36:93:77:d0:72:c7:6a:5b:80:c6:0d:
86:82:a5:a7:48:9d:67:3c:2b:bc:d5:b5:85:b1:f3:
9d:96:f1:9e:36:b3:e5:15:70:71:51:2b:f1:f2:2b:
e3:5d:e1:f2:2b:e5:c1:9c:4e:e6:16:27:76:14:22:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:13:1A:2C:02:0E:CF:6D:0D:D5:79:98:B5:A4:CD:57:8F:44:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/7461eb70-aa87-3357-82ad-5c4dd94fb1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b0:db:b8:73:56:2d:4e:ef:de:28:8b:62:dd:9e:11:d4:0e:
df:aa:dc:ba:bc:46:d7:1d:93:3d:b2:29:fc:a7:c3:32:1d:2e:
04:1d:24:93:c9:ed:50:8f:5a:e3:d6:d1:5e:c5:b1:63:ac:ad:
de:0a:c5:a7:2c:64:69:16:34:67:e5:09:7e:68:9d:41:cb:65:
49:71:1e:ce:7d:5c:4f:15:41:a7:ed:ed:17:8f:81:81:ff:29:
81:5f:26:70:60:e5:ff:42:96:8a:78:92:60:01:f5:6a:97:a5:
78:91:15:af:0d:8c:58:1a:b9:12:68:77:57:fe:b5:19:46:40:
a7:33:f3:a1:4a:c6:f6:bc:89:f5:58:f3:47:de:8e:44:2a:f7:
30:61:b3:ca:d8:cd:29:8a:fe:2a:8a:4e:82:d0:d5:bf:4f:8d:
db:4c:e9:10:70:bc:a3:7b:51:73:76:c3:34:fe:db:a9:4a:d2:
06:d2:ec:eb:7d:33:7c:3e:82:53:ff:eb:86:33:3e:92:63:d3:
34:16:28:f9:c7:95:25:0e:1c:f2:02:67:65:29:47:e6:6f:ed:
2b:8a:97:5f:b1:4b:51:f4:d6:e6:12:ad:c9:7b:b5:5b:5b:95:
08:b2:17:14:81:4d:d2:18:fa:a2:a7:38:1a:f0:f8:32:70:1a:
c4:c0:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:48 2025 by rpki-client