Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa
File: 272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa (raw, json)
Hash identifier: mi+Z6D3g6TVl6Da7pWUrpxLOJG2R8YU6m9X4wk4NJ0U=
Subject key identifier: E9:29:18:AC:A7:0C:36:2B:F9:2B:34:7F:43:CB:83:6C:A0:0E:7F:AA
Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4
Certificate serial: 010D0C9F4328584858A0502138E968FA295558F2
Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 13657
IP address blocks: 104.242.128.0/19 maxlen: 24
104.242.160.0/19 maxlen: 24
104.242.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:50:21:38:e9:68:fa:29:55:58:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=bf39ef3b-5fde-47cd-906f-1cfa315815d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:73:ac:5e:62:f8:92:b6:8c:c6:d5:69:df:a7:
d1:a5:7b:de:43:d0:c2:6b:c8:65:a4:d4:8e:1e:67:
c0:52:8b:ab:ae:80:6a:8b:e2:4e:5c:a2:b4:d0:06:
e9:c3:33:33:e5:ec:21:71:7d:6d:b1:26:8c:ae:8e:
8a:19:0c:f1:6d:7e:0e:23:3c:b8:d1:df:9a:a2:d9:
6d:66:fa:0a:e9:01:7a:7e:de:99:41:e9:46:c7:f8:
1d:43:e2:83:1b:b1:53:6f:56:d5:78:df:ab:28:34:
57:37:76:d2:e6:37:30:54:b9:5d:99:fe:66:cb:b9:
c1:3d:14:d9:c7:1c:2f:bd:bb:20:44:39:95:3c:dc:
74:8c:0c:4e:fa:c1:3d:5d:d0:75:17:e5:3d:3f:ba:
12:c3:45:8e:64:b9:d1:cb:31:b9:d8:4a:ac:9a:0d:
56:5b:5b:b8:b0:66:52:d3:00:3e:53:5c:0d:55:11:
39:5e:c9:e8:03:4d:ee:7c:c9:62:5a:63:b5:c5:5d:
37:46:7f:3d:1f:2b:a0:ba:0a:2f:67:52:d7:bf:a8:
70:e9:65:34:31:70:f6:7a:c5:11:71:fa:d2:ff:02:
5f:ab:74:24:10:46:77:29:f2:15:7a:e9:a7:d4:63:
93:45:e0:1c:9b:08:f3:27:2d:c3:87:de:9c:e8:ee:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:18:AC:A7:0C:36:2B:F9:2B:34:7F:43:CB:83:6C:A0:0E:7F:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/272e9b48-c4e2-30e5-bb6f-f5fc9613ab1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl
X509v3 Authority Key Identifier:
keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
sbgp-ipAddrBlock: critical
IPv4:
104.242.128.0-104.242.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f5:d6:96:04:ea:09:d5:8a:b7:f0:e1:24:18:4a:57:92:a9:
25:e3:74:ac:ac:90:2f:65:b5:e2:af:34:5e:93:c5:be:17:46:
52:06:6f:1b:a9:6a:c5:71:47:82:97:5c:1e:e8:32:e2:3d:c2:
0b:7e:80:4c:96:1e:cf:0d:29:bb:6a:82:45:0c:f7:a1:8f:ab:
cd:79:18:6b:76:12:1f:c1:35:a5:c8:84:0c:5b:52:c8:ed:c3:
e0:65:9e:bb:75:3d:a6:8a:96:44:57:4f:0c:7f:51:3c:30:10:
37:b4:dc:ff:e5:8c:96:1b:0d:6f:b4:b2:84:03:96:be:1c:1b:
2f:82:09:57:25:93:85:8e:5f:c1:e6:bc:ca:45:56:0c:7f:eb:
c3:42:c0:7b:ca:11:e8:2f:04:0b:97:59:41:08:75:33:50:6b:
ed:02:eb:68:c1:e1:78:c6:a1:3e:b6:bd:56:af:f7:3c:94:1f:
e9:bd:37:ee:31:57:98:43:76:76:a1:88:4e:28:36:be:0f:e2:
b3:0d:dc:60:ac:cc:9b:5c:db:41:f6:3d:16:cc:10:e1:3b:77:
54:9d:1b:fd:b7:ca:fa:fe:7b:2a:90:d5:9f:18:e7:fb:e6:a6:
b6:d4:11:17:af:28:21:a9:43:5b:f9:01:5e:0f:1c:ce:ff:61:
50:c7:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:33:09 2025 by rpki-client