Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json)
Hash identifier: hGs2kYtWPWaO6Y4SvEfgilMsWb5SSeukeZA2724SaWk=
Subject key identifier: 58:F0:36:5C:40:88:33:49:F2:1F:51:C2:B9:CE:6A:81:48:83:E3:DB
Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial: 010D0C9F43285848090FBEB7EC2FD49F30ADEB40
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 396018
IP address blocks: 104.237.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:be:b7:ec:2f:d4:9f:30:ad:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=fc55bbc2-afea-4f44-ad01-86a5be2aa208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:72:68:08:bd:89:b1:c7:31:a2:6f:2e:4a:
6a:88:da:e7:85:7d:14:6f:52:0b:dc:40:b6:90:c9:
f4:c1:f6:c0:04:ca:c2:37:9b:be:f8:ee:3f:96:d9:
87:5e:d6:0e:a7:1f:09:6e:2f:38:20:8a:61:72:6d:
6e:f3:01:48:68:25:f4:90:ea:c4:0b:09:19:17:6f:
6d:70:14:57:41:72:47:e0:92:de:5c:f3:ef:ad:7e:
6d:16:6b:2e:a8:83:a0:67:8d:10:6d:46:3a:3b:a9:
07:bc:49:47:24:02:11:ae:c5:41:4a:76:79:c0:2c:
45:ec:a7:ce:0e:64:95:b3:84:1c:c5:1c:da:93:d0:
f4:fb:3b:ed:97:94:d7:cf:73:6b:ca:3b:36:31:4f:
e7:5e:5e:c7:33:6a:e4:6d:8b:fa:80:7a:8d:c6:b1:
22:4a:3e:21:d1:96:64:58:97:91:45:b0:ed:1e:cb:
a0:fb:4c:11:72:92:c8:c9:dd:b6:7e:6c:2f:bc:e4:
77:85:4e:66:90:1d:ea:52:86:06:ab:df:85:14:3d:
e1:45:a2:aa:01:89:d0:14:74:91:c6:c5:bc:b4:39:
aa:0a:5a:6e:60:57:8a:1c:ef:bd:ab:c9:6d:61:29:
53:36:51:76:89:10:b8:d1:09:07:ba:f5:e9:a9:f9:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:36:5C:40:88:33:49:F2:1F:51:C2:B9:CE:6A:81:48:83:E3:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
X509v3 Authority Key Identifier:
keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:02:3c:bc:da:7d:9f:c6:02:25:48:bb:18:e9:31:cf:14:23:
b9:bf:33:7c:ed:75:a6:d6:19:70:2d:cf:15:6e:46:4d:5f:b0:
2c:7d:5e:66:92:13:b9:5e:86:84:83:39:3e:87:14:4b:56:94:
02:47:9f:15:82:0b:70:5f:ae:8b:41:cb:1d:ab:ca:a2:d3:a9:
72:07:74:f3:ba:86:c2:de:bd:e4:27:3d:2e:27:86:45:79:f2:
65:7f:b2:c7:d8:9e:34:a3:c5:02:c1:3c:03:d3:10:d5:84:29:
6f:34:88:f4:ca:77:d5:24:ad:8c:e7:4f:3b:c6:9f:f1:c5:da:
a4:8a:5f:66:8b:12:35:6d:03:b3:64:ed:46:f2:ab:53:77:dd:
d4:68:75:2c:97:64:a4:20:91:3d:c8:46:37:22:4c:03:f3:dd:
db:ad:b3:bf:e8:45:56:19:fe:d4:53:ca:fe:a0:9b:c6:32:64:
6e:5a:45:97:51:4e:05:b2:cf:32:48:2b:85:5c:ff:e3:37:93:
fc:15:52:33:09:f2:0e:5b:04:06:f8:ec:80:32:9c:fd:e4:c0:
36:b7:71:1e:b9:39:d4:c6:3a:76:43:0d:60:1b:f9:9c:b1:29:
50:f4:af:5d:ed:aa:87:e1:05:e7:71:67:cd:c1:40:26:f7:dd:
8b:40:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:56 2025 by rpki-client