Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
File: c31be989-e6da-32a1-bc88-9cfec65bed62.roa (raw, json)
Hash identifier: 2wTDIcZanM0Z2EsYO2TLpz8WLmT1sbjziz3Nw5Q9IYI=
Subject key identifier: FD:0C:46:8F:E5:01:98:89:E4:F0:8D:19:DD:91:F6:7B:29:71:2E:CB
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F432858484945690A627D5773AAA07680
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 397423
IP address blocks: 104.255.173.0/24 maxlen: 24
155.254.16.0/23 maxlen: 24
155.254.28.0/23 maxlen: 24
2605:6c80:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:69:0a:62:7d:57:73:aa:a0:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=4ccd06e4-db89-4f07-9368-1fd43c6bd118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:a0:90:97:df:09:64:7c:0c:3e:f4:09:66:
a1:f5:2e:a6:9d:15:fa:c2:4b:ef:0e:8e:48:84:94:
3e:99:53:d3:5b:d8:b2:ca:65:b7:6d:5a:3a:13:34:
1e:cf:27:dd:c8:df:8f:09:3e:51:1d:c2:60:5a:31:
0e:ee:f4:11:d3:fd:51:39:5c:dd:13:c6:7b:9b:10:
e8:d3:84:53:d2:ed:e2:7f:4b:15:1d:33:65:eb:b5:
bc:bb:fd:05:7c:7f:e2:5e:a8:21:e2:01:4c:0c:eb:
db:00:c2:5c:6f:94:8c:94:fa:13:f6:ee:46:bb:31:
19:af:55:38:cc:cf:54:98:69:82:a5:d8:83:a6:74:
c1:e2:b8:05:23:de:d4:2b:9a:23:8d:cf:7a:46:55:
9a:ee:f3:90:56:62:ff:dc:9e:9f:09:5b:7f:c1:cb:
aa:f9:38:a2:b3:39:f4:9c:7a:ec:70:bf:0d:00:ae:
3a:60:70:06:15:60:01:7f:c8:e3:df:83:95:75:61:
6d:e8:f6:4d:ed:32:97:4e:28:29:17:19:9e:d7:61:
8f:e4:6a:e8:c3:dd:a3:4b:a0:b6:a6:91:95:9e:98:
f8:ac:e9:1a:ac:ba:2d:7e:b1:c3:11:56:85:15:06:
0b:8d:8c:2a:df:cd:60:3a:0d:ca:64:68:5c:cd:e6:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0C:46:8F:E5:01:98:89:E4:F0:8D:19:DD:91:F6:7B:29:71:2E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.173.0/24
155.254.16.0/23
155.254.28.0/23
IPv6:
2605:6c80:6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:87:ce:ed:d9:8a:48:d1:e9:3b:06:07:1f:6d:43:60:c4:82:
ab:00:64:24:d4:fd:6d:8d:2f:6f:6b:0e:cb:7f:9f:92:9b:79:
f5:b9:d4:ba:63:dd:8f:72:27:78:4d:ca:fd:5b:21:29:91:64:
f8:72:9b:85:6f:5d:62:d8:5a:2a:08:81:38:a9:ee:30:ae:bb:
f2:d3:ad:b9:b6:05:aa:e2:aa:05:38:2c:03:ac:92:29:27:42:
f1:40:54:26:ee:9d:4f:d4:63:5b:f9:60:60:21:de:cc:dc:72:
fd:78:ed:1d:aa:1f:a5:dc:3c:40:72:4d:dd:95:26:8e:0c:63:
6f:9c:bc:d3:cf:8f:f1:bb:c3:fa:c1:81:41:ce:27:d2:06:8f:
42:a0:05:a6:f3:6d:ca:b3:b4:0e:a2:32:fd:30:dc:f2:59:09:
ac:42:05:cd:82:53:fa:ec:df:d5:51:da:97:ea:65:f0:73:06:
8d:7b:c0:44:cc:66:c6:69:01:93:fd:63:1c:ae:d6:27:8d:ca:
9a:82:63:ee:c1:c9:9e:75:2c:6f:e5:b9:1a:eb:5a:8a:1e:89:
20:48:19:23:9e:1b:40:39:64:c3:d2:1f:41:c4:19:f0:82:b8:
77:3e:8b:c5:0e:7a:7e:9b:d6:e5:e7:cc:c8:46:5b:df:34:c8:
bf:27:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:18 2025 by rpki-client