Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
File: 303511ae-00e0-3ae9-9384-2797153592ac.roa (raw, json)
Hash identifier: YR/deV4snQZRPggjqLaoID7LsJVuNG+rJZSBQ4IHyVI=
Subject key identifier: 53:D9:89:E9:9C:FF:11:33:8C:FD:5B:0A:D6:D0:3B:27:05:79:30:66
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584854703512BA05980F413E9AE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 212238
IP address blocks: 104.243.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:35:12:ba:05:98:0f:41:3e:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=f6f24e72-f1eb-4bfa-894f-3980dd35d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:17:70:ff:bf:ee:0e:10:e7:b8:ee:01:ea:
c4:97:40:0f:5f:8e:65:a3:7e:6c:69:63:a5:2e:4e:
b6:5f:cf:dd:65:d5:f4:81:97:58:86:f2:10:b6:3f:
4d:60:d1:09:a2:1e:e8:bd:03:9c:8d:68:21:e0:0e:
b2:62:5e:a6:6c:aa:66:90:4c:d6:d3:83:de:a6:9a:
53:49:f5:ff:0a:f8:2f:05:e7:f7:c1:cb:ec:86:bd:
ad:ed:f1:b6:38:5a:a4:ed:b5:fb:d8:fc:ee:85:76:
49:19:da:52:92:38:0c:89:9d:64:83:ef:b8:21:c4:
39:ed:ec:91:c7:63:16:f6:93:9e:e9:26:4a:3c:e3:
03:9e:05:7e:34:61:b1:31:be:3c:72:2e:34:f7:cb:
c8:d6:ce:94:02:80:5c:5a:fb:c8:4d:ae:d8:17:65:
d0:73:83:41:0a:6e:29:9d:62:94:55:6f:62:f8:1a:
ec:bc:71:49:51:c9:74:f1:44:ed:53:c7:46:3e:f0:
75:a2:89:57:f6:34:93:71:59:1b:56:be:88:79:89:
26:97:4e:03:68:e4:43:ed:bb:dc:5e:f8:10:3a:4d:
5b:43:6c:8d:54:24:a8:77:b9:8b:09:f6:8c:59:cd:
32:7b:fc:e0:89:f5:64:08:af:ce:6b:65:02:4a:90:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:89:E9:9C:FF:11:33:8C:FD:5B:0A:D6:D0:3B:27:05:79:30:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:0c:af:f2:e0:71:89:f0:50:5f:c4:dd:f2:35:8a:df:71:a4:
ed:db:ab:83:14:53:e5:cd:2b:a4:c0:c6:ab:18:60:69:23:a5:
3e:80:2b:a3:d2:7d:90:cf:b0:eb:56:d8:98:56:39:1b:d9:98:
32:a7:c9:fe:82:9f:a2:06:e8:30:98:db:e0:3d:f7:eb:fe:f6:
5f:8a:ab:ae:02:95:81:11:65:5f:24:ef:5d:77:dc:5a:94:d5:
99:8b:fd:59:23:71:4f:af:1f:ea:5c:fb:1e:d0:6d:77:33:c9:
1c:bb:90:78:5e:93:3b:6a:e3:ec:37:7c:8a:5b:2e:60:24:8e:
5d:1a:ac:ae:0d:1b:53:37:a7:0f:56:6e:0a:44:ff:91:9f:91:
5d:68:61:9c:ed:e9:bc:97:fe:3a:73:21:a1:c6:12:f1:63:9d:
43:81:04:50:8e:3a:13:b6:27:fb:4c:6b:e2:34:d1:2d:61:22:
dc:5a:4f:24:42:db:1e:66:d2:90:17:17:2d:de:24:8e:d8:26:
5b:53:15:2c:10:30:76:64:19:f6:08:ee:dc:53:c5:28:76:7f:
2d:3d:3c:1d:a0:6b:70:10:2b:76:c0:68:81:27:f2:0f:da:4c:
32:34:ff:d5:54:f1:8b:1d:29:d3:83:c6:f1:9e:3c:6d:9f:e3:
60:74:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:47 2025 by rpki-client