Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
File: f79cabc0-9140-3552-a764-dafa1e390e03.roa (raw, json)
Hash identifier: gLLW8F/nXf55FnbFCTHJZIwTOR7CUj1PLIxsrv2Uae4=
Subject key identifier: 89:BA:38:C5:B5:35:CE:86:11:2E:3E:1F:8D:F3:C8:96:51:24:33:1B
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F4328584863CB03D9C717B9A505F3BD40
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 13807
IP address blocks: 24.223.104.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:03:d9:c7:17:b9:a5:05:f3:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=28d0c9a7-e96e-4a43-a515-310b4318c2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:3c:10:d2:ca:da:a6:2a:5e:b9:22:9b:c1:
0d:4c:4d:97:c6:88:dd:28:3c:d7:4a:42:bd:54:5c:
e7:7e:18:6e:45:c1:95:0c:51:58:82:44:04:c7:24:
b9:8e:cd:ba:71:d9:3c:17:ce:90:cb:68:49:a7:65:
cf:da:3c:40:db:dc:65:8a:07:57:64:d9:97:40:24:
6c:79:6d:7c:be:3b:bb:58:e6:19:ee:67:73:73:5d:
c9:34:bc:4a:55:66:ad:86:23:7d:b2:8a:6a:e3:ce:
c7:84:e1:af:3f:0a:45:c1:c1:ec:b9:26:a0:0e:82:
22:12:fa:29:dd:06:ed:eb:c8:51:63:01:29:5c:94:
21:70:07:32:87:8b:ac:68:43:24:db:d6:8f:88:97:
4e:f0:10:07:95:76:19:df:02:48:54:0c:5a:ad:fe:
54:2a:4a:7f:b5:84:32:59:01:7f:95:8d:bd:46:04:
18:75:57:75:b7:38:22:63:5e:d3:8d:08:61:b4:05:
c1:d1:d2:9e:01:29:80:ef:86:c3:c9:94:9d:23:33:
af:d7:5f:ee:62:f8:d6:75:74:4f:d5:b7:8e:a9:2b:
86:66:4e:ce:bf:4b:d8:d1:73:0a:a2:48:4e:9a:b4:
73:0e:e0:71:1e:0c:c8:1e:cd:9f:76:93:47:0e:e2:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BA:38:C5:B5:35:CE:86:11:2E:3E:1F:8D:F3:C8:96:51:24:33:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
24.223.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:f8:fc:2a:de:37:a3:2c:7e:94:4d:03:7b:5d:e9:88:a1:06:
4e:02:f0:0e:a3:6f:da:3a:74:95:45:d2:13:1e:d6:fc:db:eb:
7f:91:fd:c6:40:93:8a:75:ef:39:78:bc:6a:af:d8:3c:c6:38:
43:00:5e:c9:8a:a1:a0:0c:9c:f4:6b:dc:38:26:9b:95:3c:f8:
6d:f6:21:cc:4e:36:f9:97:5d:c1:4f:78:66:a6:58:a5:e6:21:
a9:ca:26:44:10:d2:19:20:97:96:d8:ab:e4:e8:4e:16:0b:94:
ac:cc:00:a1:3d:3a:55:d6:f4:14:61:73:97:25:c3:5c:48:6e:
5f:06:02:c7:71:2a:25:3b:3f:a1:a3:5f:93:7b:91:74:8f:d4:
07:3b:78:5c:38:4a:98:78:6d:d0:8e:90:b3:26:59:b6:a8:6d:
80:8d:54:46:2c:aa:61:4d:d2:dd:91:4f:21:d7:b2:20:c4:96:
5e:97:c7:1f:0a:ed:39:66:e9:b2:98:06:1f:05:d9:a2:b9:b3:
01:a8:65:78:18:d7:31:5e:23:da:56:cc:5f:89:ab:93:5b:39:
39:3c:38:5a:1f:ce:6b:78:67:60:b8:51:53:5e:3b:d5:55:f8:
b4:c4:3a:74:30:37:95:9d:0e:96:4a:7e:a4:73:d2:55:13:6c:
c7:f8:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:40:12 2025 by rpki-client