Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa
File: 3c866c81-424a-3e1e-ac78-0550da029957.roa (raw, json)
Hash identifier: csK37PEhHLWcI4ZEq2p7UcQG3qz9JrdJNA+bUsmAPOY=
Subject key identifier: C0:65:E1:1E:D0:93:C4:62:50:50:AE:AC:8C:4F:B3:B0:B2:DE:C8:63
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F432858481BDE38D239D30CBC9342C5D0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa
Signing time: Thu 05 Dec 2024 19:41:28 +0000
ROA not before: Thu 05 Dec 2024 19:41:28 +0000
ROA not after: Wed 05 Mar 2025 19:41:28 +0000
asID: 16789
IP address blocks: 104.156.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:de:38:d2:39:d3:0c:bc:93:42:c5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Dec 5 19:41:28 2024 GMT
Not After : Mar 5 19:41:28 2025 GMT
Subject: CN=3121b897-a297-403b-9497-6272bfe2a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:6b:de:8c:e1:60:17:d9:12:50:6f:ec:2f:
17:9e:42:b4:1d:75:00:47:18:16:6c:49:0f:cf:92:
fd:86:dd:6b:83:e3:4e:46:ab:89:d8:eb:d8:a9:83:
3b:38:63:d0:82:f0:04:88:1f:21:91:cd:38:d9:6a:
43:e5:2a:2e:95:76:e7:ca:c6:a1:80:c6:13:ef:f6:
26:38:d2:bf:2d:16:33:9c:99:10:ed:6e:16:d0:1e:
ca:a9:b4:df:21:9a:3a:b5:26:0f:33:4b:f2:84:fc:
64:14:46:3d:ed:d2:7a:4d:c6:f9:4a:6b:c3:5f:0e:
20:df:02:4e:d3:85:ce:14:87:8a:4f:1c:bd:08:95:
de:d9:75:ba:2e:3e:05:d0:7f:de:76:b6:92:ff:a6:
42:07:5b:31:fe:68:90:91:a1:5b:2e:93:99:f1:e4:
19:9c:2e:d3:c4:d3:6a:87:6f:b9:6a:bb:89:65:70:
09:e7:49:d2:9f:b9:6b:03:db:6e:a8:89:2a:d6:c8:
21:5f:f7:2d:0e:c9:52:d1:c3:95:62:d1:e0:93:f1:
da:03:8e:64:ad:d9:7a:e1:ec:1e:83:3c:12:bf:ca:
55:c5:62:55:39:32:73:57:2e:57:65:29:20:d8:97:
db:4b:3d:a0:0a:49:a5:01:4d:b1:29:e8:87:b2:bf:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:E1:1E:D0:93:C4:62:50:50:AE:AC:8C:4F:B3:B0:B2:DE:C8:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:51:b2:1d:56:d6:84:7c:84:0b:34:0e:9c:91:07:7a:59:73:
47:82:1d:c5:05:00:cf:28:53:13:07:4b:57:0e:30:3a:4d:31:
ec:59:0d:be:8f:45:db:44:7b:4c:6d:dd:ba:b5:56:66:1c:c7:
d5:0f:e6:9a:63:ef:da:25:39:5c:37:ac:22:1d:ba:e3:c8:dc:
14:e6:72:f4:42:8a:79:7d:4a:c0:d6:01:d1:8e:41:9c:d9:3e:
3f:c4:0b:5c:6b:e9:b1:61:71:f6:c4:62:75:f8:83:fa:15:46:
8b:60:3e:4e:f7:bd:0d:5d:8d:93:e0:ac:d8:6f:7d:13:2b:df:
2d:bc:bb:b1:8a:69:96:62:08:f2:ec:d3:67:68:b6:b3:5c:bb:
0f:47:93:8c:17:c6:e4:e0:40:95:16:5c:7d:b9:38:fc:9d:89:
62:78:a8:3c:c3:d8:1b:d3:26:87:76:da:07:31:bc:85:5c:d7:
71:3a:9c:4f:f5:27:c7:47:05:7c:64:87:7d:3d:0b:71:1e:5a:
19:ae:69:79:ab:91:1e:8d:23:61:c7:9b:34:94:d0:b1:30:57:
08:27:04:0c:b3:5c:75:ca:9d:f5:22:5f:19:2e:36:23:69:a9:
81:40:21:b7:ad:83:f4:9e:b1:43:ef:8d:56:46:21:4c:37:fe:
87:e1:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:20 2025 by rpki-client