Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
File: 1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa (raw, json)
Hash identifier: KDdF4ZZcrgLP82C6L49IKwEWUiYs/3B+xIGsZ5m8zIs=
Subject key identifier: AE:E4:57:62:50:AA:7D:D4:8D:28:35:11:EA:62:A8:79:98:30:A0:76
Certificate issuer: /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial: 010D0C9F432858487A6EB41F198B8C4CD3E10240
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
Signing time: Wed 08 Jan 2025 16:38:34 +0000
ROA not before: Wed 08 Jan 2025 16:38:34 +0000
ROA not after: Tue 08 Apr 2025 15:38:34 +0000
asID: 46906
IP address blocks: 104.245.248.0/21 maxlen: 24
146.71.16.0/20 maxlen: 24
160.79.80.0/20 maxlen: 24
192.30.160.0/20 maxlen: 24
2606:c440::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:6e:b4:1f:19:8b:8c:4c:d3:e1:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Validity
Not Before: Jan 8 16:38:34 2025 GMT
Not After : Apr 8 15:38:34 2025 GMT
Subject: CN=0dbb889f-e6da-4445-aac8-98a42337dc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:7d:b0:a2:9d:72:05:76:3b:67:f1:fa:14:
87:cc:f1:af:a9:55:15:d0:c4:d2:8c:46:75:ab:4a:
a4:9e:f4:c4:57:d0:ab:85:ad:3d:83:9f:19:ee:39:
fa:1e:1f:a9:80:8b:4c:95:00:43:9c:be:89:42:bf:
82:fc:c8:e8:7d:b3:1e:ef:c2:99:22:e6:65:6d:e4:
4f:cb:5e:57:e8:7d:a9:d3:33:51:61:5d:3d:53:fb:
de:ad:60:47:78:fa:53:6d:47:c0:77:54:4b:a5:7b:
f3:48:a7:ab:d7:2b:e5:8a:4f:0d:35:0e:38:20:81:
81:d2:fc:2f:ee:88:ec:cf:ef:13:78:32:6c:bc:e8:
af:6b:83:9a:3c:e1:5b:cd:48:29:87:ed:73:3c:75:
f2:ed:1a:6a:40:45:2d:f2:13:20:ae:b8:ba:8b:c2:
e5:34:97:9c:93:6c:71:bd:3a:13:fa:cb:2e:9f:df:
72:99:e4:63:a0:fc:70:43:92:62:f7:75:0c:c9:41:
35:0b:fd:c7:6d:fd:b5:56:a3:f3:ef:b1:c3:ec:b2:
dd:3a:64:72:d5:88:f3:e9:d0:82:58:60:38:c8:6f:
02:0d:f5:07:49:3e:aa:06:c6:22:c5:26:fd:f9:b2:
0a:81:76:8a:b5:3f:6f:01:68:d0:d5:e6:45:53:88:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:57:62:50:AA:7D:D4:8D:28:35:11:EA:62:A8:79:98:30:A0:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
X509v3 Authority Key Identifier:
keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.248.0/21
146.71.16.0/20
160.79.80.0/20
192.30.160.0/20
IPv6:
2606:c440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:47:70:98:66:bb:4e:f3:9c:d1:4f:52:59:60:78:92:b2:0b:
45:ae:82:11:8d:d1:1e:8f:3f:24:c7:48:91:ff:03:ba:6c:9c:
22:0a:75:ed:96:68:b5:a9:aa:ef:96:31:c7:88:64:85:8b:9c:
a6:72:85:99:6c:db:ec:27:26:7a:c7:42:00:0e:b6:00:f4:85:
7d:f4:37:0b:ef:2a:88:c5:70:ed:90:7a:3b:61:ee:8f:16:e7:
50:97:0b:df:1a:12:1e:ba:61:f9:b4:aa:09:c2:f4:0a:86:d1:
68:40:c4:31:da:b6:44:cf:ea:ba:31:4b:f3:a8:df:fc:90:23:
9f:72:7b:c3:f7:d1:3b:2b:ec:4f:b0:a0:e2:fc:c3:9a:72:07:
23:82:62:70:de:a5:f9:c5:ca:06:9e:0c:b4:b6:c3:36:6d:ee:
f1:2e:ba:e7:86:9d:8e:82:99:9b:da:0a:e4:09:97:f0:f4:74:
f6:b2:a4:66:13:35:84:6d:b4:fb:0b:4d:44:5a:22:7d:a6:a7:
8b:a4:ef:74:14:06:19:1c:5e:55:f6:71:17:3d:44:f8:3e:75:
8c:83:29:29:2d:7c:27:8d:0e:bd:44:cc:3a:9a:4f:64:30:38:
27:ea:c6:23:bc:05:c5:bb:5c:2f:a6:d9:58:50:cb:05:c3:77:
a3:ee:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:33:36 2025 by rpki-client