Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa
File: 41d5735c-bf44-3d40-b55c-71b48a44901f.roa (raw, json)
Hash identifier: A51wKM/DV9xKALS6AqGDuojEIG2UIrGQ3ktaxUP4g9Y=
Subject key identifier: 4E:50:26:D1:53:8D:E3:24:6B:E2:CF:DC:F0:D6:E9:D9:F9:F8:F9:13
Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Certificate serial: 010D0C9F432858485F9AE4FC05103EB5EB580280
Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 40230
IP address blocks: 104.143.48.0/20 maxlen: 24
199.247.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e4:fc:05:10:3e:b5:eb:58:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=a883aecd-d846-4189-bca5-b4d1f2c1453d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:b0:73:26:23:93:ad:58:9f:7f:97:d2:de:
29:c5:86:de:14:53:40:f8:4c:f6:dc:ba:45:d7:c4:
b7:f9:5c:b3:6d:16:6b:81:a3:90:17:fc:ae:72:bc:
a6:c0:30:56:59:31:8f:19:a5:36:04:ad:f6:1d:ca:
12:2c:d5:68:82:e1:2a:80:b2:ab:fe:5e:68:62:4d:
cc:56:f2:61:89:03:8c:3f:37:8b:25:e4:42:69:8e:
c5:73:e6:9d:9e:93:d9:a4:ca:86:e8:13:c6:b2:0b:
74:01:44:30:74:3c:6f:be:84:dc:45:f0:80:31:04:
70:a0:56:20:9e:d7:03:65:99:7b:3a:ba:c5:27:0e:
9d:31:a6:45:f9:b6:3c:bf:8d:d3:4b:2c:cf:48:6b:
fe:a7:80:f8:af:f1:7a:9d:9d:76:d8:5e:a2:e4:6d:
a2:05:a2:6b:0b:f8:d2:e4:4e:0e:12:85:32:af:fa:
a3:34:7b:76:5a:96:d7:75:14:db:49:33:6d:23:61:
f1:06:45:a7:1e:08:0c:52:17:17:4a:36:62:18:db:
0d:f9:82:04:67:b3:2c:4f:7e:1f:71:9d:c8:33:e5:
bb:8c:bb:55:34:4c:88:13:62:19:72:6f:69:b7:27:
07:b1:64:bf:13:de:90:7f:8e:d6:8c:74:40:b4:86:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:26:D1:53:8D:E3:24:6B:E2:CF:DC:F0:D6:E9:D9:F9:F8:F9:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/41d5735c-bf44-3d40-b55c-71b48a44901f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl
X509v3 Authority Key Identifier:
keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.48.0/20
199.247.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:4b:3b:6d:d8:b7:72:c9:ed:67:0a:eb:4a:6e:51:91:6c:47:
da:2d:f3:20:c0:a4:40:d2:90:86:a7:86:1d:01:a5:59:7b:aa:
6c:cb:69:63:dc:fa:ed:74:7b:fa:ea:76:6b:f0:f0:17:c9:96:
31:c5:b8:71:d6:9e:1d:af:e7:74:ed:3b:7d:57:0a:f1:96:7f:
e0:ee:b7:4e:a1:93:09:e9:eb:e1:cf:f6:fc:32:95:61:e8:5f:
03:8f:84:8c:40:b0:17:35:2d:b6:1d:cf:1e:c6:0e:c1:79:b9:
02:01:8e:eb:38:f9:23:d3:e0:ef:1e:16:3a:15:fa:e9:9a:56:
9f:22:f9:49:47:83:94:06:53:0d:23:4a:7a:24:3e:7b:79:b4:
d5:96:5b:26:fe:43:4e:b4:d3:c1:07:2e:9f:a1:17:b7:be:01:
9b:27:4d:a2:ff:24:03:24:07:02:f4:9a:8e:f5:45:21:9f:f8:
69:2c:5c:4a:76:de:47:1e:49:c4:5c:2c:58:1a:32:6c:2a:18:
e2:46:3f:aa:46:3a:6a:23:00:25:7b:b8:b1:56:3d:f5:64:e7:
da:38:5c:f9:4a:55:73:42:31:bc:38:1c:75:21:11:19:77:f2:
5c:2c:e9:ac:e8:48:5f:1f:e4:80:54:38:6f:bd:99:91:1d:d1:
00:c5:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:57 2025 by rpki-client