Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a8096b45-d6ff-3962-95ca-5d98578948e0.roa
File: a8096b45-d6ff-3962-95ca-5d98578948e0.roa (raw, json)
Hash identifier: RHr5fnpi2YUZmLTo6H6wy5beang984rkbVv4xr9IOF0=
Subject key identifier: 72:96:17:A4:F2:9B:8A:54:5E:7C:AE:6E:25:B7:3D:CD:F1:86:A5:01
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F43285848748B2121B6BC1701343F4D80
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a8096b45-d6ff-3962-95ca-5d98578948e0.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 48024
IP address blocks: 104.251.224.0/20 maxlen: 24
172.81.102.0/23 maxlen: 24
172.81.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:21:21:b6:bc:17:01:34:3f:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=7af93074-416f-44dc-bcad-60b3111b5c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:58:1f:ae:47:ab:47:49:b6:2b:51:72:f7:
3d:44:67:fe:35:bb:25:c4:f3:34:2d:0b:3f:09:36:
0e:58:3b:98:57:94:b0:ea:e1:15:1e:79:65:b1:c2:
d3:08:7b:92:ca:d6:64:53:c2:93:b0:cc:f1:f5:4c:
22:59:00:73:4e:89:8b:5d:6b:75:29:a1:f6:7d:21:
df:40:04:b6:b6:57:1a:5d:87:ac:54:93:ca:e4:db:
fb:5d:0c:d8:84:4f:78:fd:73:d4:14:61:a6:d9:67:
62:9f:dd:b1:ce:d5:48:47:27:8b:f9:37:1d:f3:12:
2a:f8:bb:be:6c:bc:61:11:0f:c0:52:7f:fa:3e:e7:
d5:a9:3a:1d:ba:65:50:9e:36:26:2f:e0:33:83:c7:
69:5a:04:f8:f5:ad:ac:07:34:b9:00:cf:7f:af:e0:
40:93:ae:3a:e6:6a:cc:51:8b:2d:0c:42:ec:1e:18:
77:41:21:7f:06:40:55:4f:c3:74:5c:c1:64:0a:8f:
4f:2c:95:32:57:a3:48:a1:a7:3f:1e:4e:62:1e:22:
42:20:58:2f:3d:80:15:75:bf:69:c8:d9:b2:a2:f3:
ec:09:fc:9b:07:19:f5:7a:5d:6e:79:04:12:3c:3a:
83:23:af:58:db:e7:19:af:78:8a:e6:e8:f3:d0:9b:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:17:A4:F2:9B:8A:54:5E:7C:AE:6E:25:B7:3D:CD:F1:86:A5:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a8096b45-d6ff-3962-95ca-5d98578948e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.224.0/20
172.81.102.0-172.81.111.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:1b:58:7d:2b:79:fb:98:7c:9c:51:85:3f:53:fe:76:c4:7d:
36:14:01:b6:2a:64:f6:63:ad:a3:40:b5:47:2c:30:e4:cd:95:
c3:b8:cb:24:47:44:bd:6f:46:a6:b6:f8:3e:03:72:6e:71:06:
52:b9:be:b7:d3:a4:ba:cf:59:28:b1:45:ca:fd:f3:d0:49:ea:
d2:e6:db:2e:ec:05:6e:81:08:f3:4a:7c:78:fa:2d:6c:ac:07:
9c:46:4f:db:43:2e:fb:5a:4f:b5:00:64:2f:31:a8:62:e5:cc:
10:b6:c6:2a:90:c3:d5:8e:ed:1d:61:4b:3d:b4:d0:f8:53:b9:
65:94:fa:e5:38:0d:09:64:91:6c:2a:fd:ba:2d:36:eb:18:62:
7b:05:54:c4:f1:e9:9d:f8:b4:7f:04:ed:30:c0:66:8e:db:6f:
3e:ee:f6:14:c4:54:d6:63:f2:5d:f5:32:07:8f:49:26:97:b0:
40:1e:90:e9:13:01:14:60:9b:fe:93:44:df:90:a0:e7:a4:da:
00:d8:5d:6f:f4:84:50:b7:09:33:a1:e8:0e:e9:f9:4c:58:19:
eb:df:b2:fd:db:16:f0:a1:cf:26:d4:3c:a7:1e:88:3c:be:e1:
56:e8:5a:d9:5f:9b:77:34:d3:17:76:06:92:f1:33:bc:b0:ae:
aa:02:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:06:00 2025 by rpki-client