Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa
File: 512d584a-aed4-3b6a-9c59-eb585416fe6e.roa (raw, json)
Hash identifier: kMp1YfzHT34q6W0GSpSuiIcuShNJ9lKtSmmD+hpsNo4=
Subject key identifier: 82:5A:F9:64:D2:68:C9:1C:7E:DA:0C:01:E9:75:48:B0:E5:8E:15:24
Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial: 010D0C9F4328584819CFD0216684E04B59987680
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 399195
IP address blocks: 104.37.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d0:21:66:84:e0:4b:59:98:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=310a917c-79ef-445d-99af-afc21d3161fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:9b:35:f7:e8:52:93:1f:e1:78:cc:cf:ef:
4c:72:fd:23:fe:07:99:32:cd:54:df:08:58:44:01:
ce:c5:9b:cd:ae:c8:0c:d2:19:1b:a2:b7:bf:14:cf:
3e:83:a3:f5:2b:f0:52:12:21:3f:d4:99:ba:cb:4d:
54:6d:df:25:77:71:86:ab:d2:d5:9c:9b:3f:a8:ef:
22:15:a1:8f:a1:6d:04:9c:a2:82:8a:69:c2:98:68:
40:f0:d7:01:d5:d6:fc:78:c7:e4:1e:8d:37:92:ef:
24:be:b2:3b:7b:98:80:bb:34:03:7d:92:3c:e6:1b:
1e:5f:cd:7b:0c:af:ca:b9:2e:b3:75:8a:a7:c4:ea:
98:93:45:60:de:30:d8:ee:ec:2e:5c:06:b5:11:f6:
2c:bf:d1:95:a1:52:8e:da:c2:db:d0:89:7c:4b:b8:
a0:f0:58:dc:3d:20:d1:c0:75:20:6c:8f:00:a2:d3:
ec:68:99:08:7b:60:3a:fb:87:76:68:5c:4f:63:39:
d9:b6:47:c1:8b:ed:fb:a6:b7:ae:c3:cf:56:9b:fe:
1d:aa:34:7e:82:fd:5d:3d:99:27:23:05:8d:1f:67:
73:e5:71:b0:4a:d3:64:c3:70:64:a8:48:cb:67:02:
9a:4c:e0:ad:85:71:2a:62:12:e6:61:f9:42:90:46:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:F9:64:D2:68:C9:1C:7E:DA:0C:01:E9:75:48:B0:E5:8E:15:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
X509v3 Authority Key Identifier:
keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:4c:52:c3:5f:68:5b:6d:8b:d1:c1:40:99:28:bf:69:7d:21:
cd:bb:16:c5:89:10:df:86:8f:c7:64:9b:fb:77:75:01:16:97:
10:87:2b:40:f5:a4:6b:eb:34:6b:84:cc:25:6d:89:01:69:4c:
0c:fe:a0:3c:b8:47:d6:e5:8f:5d:b9:15:0e:05:64:3d:d1:e8:
25:38:3e:45:13:cc:1e:2e:58:4d:85:e1:29:53:80:18:4f:6e:
49:b7:4f:d5:42:2e:d8:d0:92:59:cd:19:46:15:a8:2a:01:9f:
e6:15:15:d2:6f:59:c4:10:c7:be:eb:16:f6:fd:b8:8b:f9:f1:
b5:9d:eb:4a:04:47:bf:0c:62:2d:aa:d4:85:dc:b9:91:8e:69:
83:c2:a1:29:15:eb:02:8e:af:79:1a:65:6b:c9:27:c2:9a:a4:
a1:4b:e7:59:48:55:51:3b:65:13:76:08:91:45:55:23:c0:37:
20:78:75:65:6c:70:7d:f9:0b:bb:75:b3:26:8f:60:cb:76:f1:
87:42:ba:1d:54:99:d9:b4:38:e2:43:a4:57:d3:20:a5:f4:ff:
1c:d7:3c:3c:d1:bf:73:37:fa:37:29:ab:d1:1e:33:9f:76:c1:
2f:5f:28:02:56:c6:14:f1:d2:4c:d8:d3:39:80:fc:45:51:9d:
b2:e9:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:54 2025 by rpki-client