Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/f636d1f7-1fe1-3605-97e0-8d8487ed8a6e.roa
File: f636d1f7-1fe1-3605-97e0-8d8487ed8a6e.roa (raw, json)
Hash identifier: ha91U6/Mn/EElTIoh8sP//pF63dgf6MZhW0mkTtecPY=
Subject key identifier: 64:D5:88:FF:9A:E0:DF:02:C8:32:41:99:D8:69:CE:FF:E9:B7:02:CA
Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial: 010D0C9F4328584827C53FBFDE94FC8B232D4180
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/f636d1f7-1fe1-3605-97e0-8d8487ed8a6e.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 398993
IP address blocks: 104.219.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3f:bf:de:94:fc:8b:23:2d:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=578ee49f-61d9-41a7-b10a-498ef5808c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:62:bf:ea:07:42:e4:d0:c7:7b:ba:d2:36:
94:85:3a:4c:b2:0f:1a:d6:87:ae:dd:d9:4c:4b:43:
f9:de:d4:e9:09:9e:b8:75:aa:ea:54:98:14:b7:e0:
8b:31:bc:91:12:88:b9:28:39:43:6a:e1:e4:40:b8:
f0:1c:ce:83:2a:a6:14:30:ad:6f:65:77:a8:73:cd:
b5:27:58:7d:6d:b9:40:f4:3a:9e:dd:e6:53:6f:a9:
b8:e2:a3:28:df:33:e6:be:82:6e:71:58:eb:a3:c9:
c0:30:b5:7d:6c:64:8d:e7:40:22:92:c8:ce:8f:89:
cc:cf:70:0c:da:4e:0e:ce:d6:85:85:fc:db:80:64:
2c:d3:5d:ca:43:2f:f6:f2:6e:b9:a4:e1:d9:96:0f:
9e:6b:44:6f:54:f3:8e:85:66:64:ea:40:20:31:27:
d2:61:2c:a7:07:1d:dd:20:9f:2a:63:ef:dd:51:e5:
e0:19:21:85:ad:32:9b:fd:6e:2d:e5:0a:3c:47:e4:
e7:e2:b2:dd:e1:a4:e6:cf:95:c9:b9:97:d3:6f:15:
ef:9a:41:e8:20:30:bf:55:6b:49:21:0f:95:a4:66:
78:60:19:75:22:b6:f2:3a:ee:90:d0:cc:da:e3:96:
94:4f:a4:6c:46:18:67:3e:38:27:ab:00:bb:f7:28:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D5:88:FF:9A:E0:DF:02:C8:32:41:99:D8:69:CE:FF:E9:B7:02:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/f636d1f7-1fe1-3605-97e0-8d8487ed8a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
X509v3 Authority Key Identifier:
keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:8e:6c:08:d7:28:45:76:c5:d6:6e:de:c8:fd:02:7b:25:23:
31:74:94:cd:57:4f:c9:34:8e:24:cf:14:16:82:7c:60:0f:9f:
85:93:36:48:db:09:e9:e7:d1:3e:89:8f:18:d0:5e:ca:e9:03:
90:71:47:0b:b7:d5:3e:90:95:e9:5b:64:30:51:11:24:d0:a7:
ce:78:a5:5e:0d:80:b1:aa:d7:6e:ab:f2:f5:58:4c:d0:ed:7f:
9e:18:29:5f:82:59:57:8d:6e:02:ee:73:4c:59:0f:d4:55:53:
ef:03:0e:e7:9e:53:7b:8b:0c:3f:00:d3:e6:99:8d:d6:85:91:
81:63:0b:29:a5:c2:67:49:44:88:89:ff:b2:8f:9c:07:91:22:
da:f1:64:75:6a:fd:65:76:9e:e6:26:97:ea:0a:bd:e0:06:0f:
f0:18:9c:2c:66:e4:d5:03:a6:eb:82:07:d6:ed:99:5b:e6:dd:
b5:b2:e8:f7:2e:69:88:32:48:e5:7e:59:1f:41:69:dc:e0:d3:
ab:e2:13:90:b8:81:a3:5f:75:1c:61:86:69:b5:55:39:d6:c1:
8b:20:f8:0c:ca:d2:0e:75:f7:d0:32:0f:e1:1d:58:f8:ae:e4:
62:60:18:12:67:78:9c:f4:51:a5:6e:42:0e:6c:df:0e:33:4f:
e6:d9:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:24 2025 by rpki-client