Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
File: 184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa (raw, json)
Hash identifier: JVt0KeDIWoHvd2vU2DhYBSJ1SKg06k+Wq7PHaYunZ8c=
Subject key identifier: 53:CE:16:75:C6:0E:9C:19:33:76:59:BD:7E:F5:EF:76:C2:FF:FA:DA
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F432858485E35B281D842FA091BB4CA40
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 42831
IP address blocks: 104.128.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b2:81:d8:42:fa:09:1b:b4:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=189854d8-00ac-474e-a4ce-734e879c9bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:12:bd:ef:c4:e2:92:0e:4c:f7:29:7c:57:
97:40:90:69:9c:ac:8f:6f:1d:5e:ab:54:af:0d:0b:
df:86:43:60:16:a5:66:c0:88:b5:b1:82:7e:4c:16:
be:8a:02:72:79:34:0d:ec:00:77:ec:e9:0b:bd:99:
46:3f:87:b0:81:ea:f8:8e:08:c1:96:f9:4f:3b:93:
06:23:da:92:46:3a:c7:74:61:45:6a:00:a4:6f:25:
f1:3e:89:76:17:30:0f:7f:04:2b:98:33:3c:30:b8:
67:4f:82:9d:9e:f2:61:ab:d9:d7:4f:ba:7e:f0:bd:
f3:5b:b1:73:3b:28:d9:d4:dd:cd:1e:4f:b4:c2:b6:
ea:a9:3c:b3:b0:ed:d9:c3:d4:d4:23:0e:63:10:b3:
6e:ae:14:f7:0c:22:7f:60:bd:fa:52:a8:75:ea:03:
a9:78:01:b2:fa:2f:d8:d6:a3:ca:8b:16:77:95:f4:
c8:fd:72:bd:09:2a:24:bc:0b:4f:c7:ba:39:98:fe:
37:7e:dc:c7:db:85:7f:7b:26:eb:ed:da:c1:2a:2e:
38:1a:d1:4d:70:c7:e2:b8:5a:53:28:79:69:64:30:
fa:0d:43:f3:dd:a8:70:2b:e7:42:32:1d:48:59:07:
51:29:f1:ba:df:da:64:90:30:e9:96:ee:15:51:d8:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:16:75:C6:0E:9C:19:33:76:59:BD:7E:F5:EF:76:C2:FF:FA:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:45:9e:be:e4:2d:1d:26:2c:3d:f4:c6:3c:ff:99:a8:86:e2:
93:3a:68:c7:7f:d4:72:d8:53:c0:fd:b1:b9:c7:06:93:97:7e:
cd:36:a5:44:a8:f1:70:1a:c2:7d:12:fc:e9:4f:89:2e:c2:84:
47:19:64:53:2d:7e:58:e8:e6:bb:5f:ea:07:e3:c0:4f:ee:c1:
3d:cb:c7:b2:52:76:14:12:47:eb:88:f5:8a:8d:4d:04:b8:5e:
4a:a3:ed:2e:65:e2:c9:78:c4:43:62:bf:2f:2c:fe:a7:f5:48:
b2:af:ac:aa:4b:10:36:eb:65:53:1f:e2:54:3f:73:79:9a:cd:
0f:bc:d3:b3:a2:7c:8d:29:b8:26:c0:5c:96:b2:b9:fb:07:1a:
0b:fe:7e:b8:93:c6:f7:e5:de:e8:a2:65:26:f6:8e:05:37:27:
7f:31:0a:08:4e:2c:25:8e:40:e2:5c:80:ff:9b:fc:37:4a:5b:
fb:a6:50:b6:46:0f:06:c0:e6:31:d0:df:14:fc:16:f8:e0:28:
3b:cb:3b:5f:3c:6d:6b:28:d9:6e:b0:93:b8:50:f0:59:89:3f:
ed:9a:99:45:9c:98:bd:39:68:03:42:69:26:f1:c0:2a:4e:3b:
12:62:6e:cd:18:b7:a3:40:a9:c2:b3:e8:d0:b4:0d:01:c7:41:
2b:79:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:45 2025 by rpki-client