Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa
File: 1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa (raw, json)
Hash identifier: lYzHUREk0Q5ynKMsA7IOJacVDposu/Kc8gGMjvW5Vls=
Subject key identifier: 5B:C8:7C:20:52:77:17:74:2A:BE:17:01:26:5D:ED:FC:BA:02:EC:A5
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F432858487A2E7A3D6FCB9C36EC2F08C0
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa
Signing time: Wed 08 Jan 2025 14:29:09 +0000
ROA not before: Wed 08 Jan 2025 14:29:09 +0000
ROA not after: Tue 08 Apr 2025 13:29:09 +0000
asID: 40788
IP address blocks: 104.193.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:2e:7a:3d:6f:cb:9c:36:ec:2f:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Jan 8 14:29:09 2025 GMT
Not After : Apr 8 13:29:09 2025 GMT
Subject: CN=62d5de7c-41c1-42d4-a6b9-af0f89c869f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:52:00:ab:35:63:1c:f7:27:d3:6d:90:c7:
7a:70:ef:24:f6:5d:96:af:fd:fa:8c:05:b5:22:3d:
1d:34:97:d5:ee:10:c8:e1:ec:fd:7e:45:d4:c7:45:
58:4b:67:7a:9c:24:e4:5c:40:a4:86:e8:c3:e4:ae:
04:ba:5e:f0:80:a1:5d:ec:fa:71:29:3e:5e:2d:16:
54:44:90:7f:1d:e3:47:5e:95:2f:79:2d:6e:bd:9b:
2a:3b:45:f4:76:09:6c:b4:3e:b9:dd:24:a9:da:62:
d4:e6:f8:ba:90:55:65:5e:1e:aa:be:67:88:61:e1:
b7:2f:2b:e8:c4:62:68:28:80:74:50:85:60:17:ec:
97:f4:f7:35:a4:ba:92:7a:a1:7f:0e:cb:11:c8:ed:
13:86:49:75:24:b4:bb:57:74:5e:15:2f:2e:c6:2c:
7e:f0:9c:7b:e0:90:fb:53:98:91:5e:e5:e5:db:06:
af:88:d1:d2:1a:1d:74:d9:ac:e9:0e:00:0b:90:af:
53:be:f9:e5:0e:f8:ca:e0:83:1d:12:65:7b:24:9a:
f7:e6:a8:74:82:6b:52:28:73:62:b0:e6:28:81:db:
21:00:54:f5:fe:1f:fe:4a:22:5b:31:44:ce:65:9f:
c7:cf:f4:8c:da:36:54:98:5e:5a:4e:fe:13:e9:22:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:7C:20:52:77:17:74:2A:BE:17:01:26:5D:ED:FC:BA:02:EC:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1cd03f73-c2eb-3271-91b1-9de65564f3a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:3e:49:4a:0f:7a:c3:bf:fa:03:80:79:67:c8:71:8d:d6:7f:
aa:b1:56:00:68:d4:3b:b9:0c:4e:f1:11:86:98:d0:8d:bb:be:
fe:4a:c7:25:23:e3:f8:b9:8a:5e:01:3d:70:5e:13:b0:60:95:
13:d3:4b:61:66:b6:ef:ba:a7:cb:79:60:9f:43:81:9f:75:26:
11:8d:4e:57:50:74:c9:7e:eb:f0:32:91:9b:1c:d0:63:09:ac:
cc:c3:59:b6:c6:39:73:37:12:65:8c:15:a2:d8:a6:59:cd:a2:
f8:ad:e7:94:08:a7:a5:30:88:98:e5:a7:5f:ca:a3:de:f2:f6:
50:df:44:1e:e8:3f:5b:0d:1f:ef:aa:fe:3c:d3:42:ae:0b:37:
46:97:e3:e3:74:97:65:36:f0:38:fa:3e:f0:f4:1e:2c:42:8d:
21:92:b6:9d:65:b2:f8:e3:c0:90:43:79:83:c4:21:b9:0c:53:
5f:a5:90:07:65:c2:c2:7f:41:a5:af:cd:b8:5c:ba:56:78:f3:
c4:4e:9f:61:fb:9e:48:dd:46:a8:13:82:ee:f5:af:6e:da:15:
f5:de:0e:8c:6d:55:18:e2:1c:66:b7:43:f7:c3:6c:88:4e:3a:
8c:86:d1:3d:5c:67:99:98:43:57:c0:b9:58:4e:0b:73:d0:b5:
09:27:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:20 2025 by rpki-client