Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/8fa4741d-7763-345d-8a6e-84a1da7bd394.roa
File: 8fa4741d-7763-345d-8a6e-84a1da7bd394.roa (raw, json)
Hash identifier: jActqRyeH53SAVm8fhiBqbhDVYS+VqZLQDEo/n5ev7U=
Subject key identifier: B7:FF:8A:99:73:A6:5C:D1:9E:D4:91:B4:64:1F:E9:02:28:31:7E:17
Certificate issuer: /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial: 010D0C9F4328584855D59CAA75E0E422D9AEED00
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/8fa4741d-7763-345d-8a6e-84a1da7bd394.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 13737
IP address blocks: 104.244.208.0/22 maxlen: 22
104.244.208.0/24 maxlen: 24
104.244.209.0/24 maxlen: 24
104.244.210.0/24 maxlen: 24
104.244.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9c:aa:75:e0:e4:22:d9:ae:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=29363ab1-3145-4bf9-adec-111aac14450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:b9:56:a4:bc:4e:56:d5:89:28:4d:c8:77:
97:92:9f:d9:0d:83:8a:ba:ae:f1:6c:05:89:ed:fb:
bb:81:36:59:48:50:93:35:ee:ee:c0:70:2f:85:7f:
59:f1:a3:13:7c:37:7d:63:15:eb:94:9d:e3:95:1d:
73:19:5e:b9:d0:6f:fb:69:13:51:1d:05:ee:36:58:
3a:36:bf:32:0a:4a:d9:b1:af:36:cf:4d:04:2c:3b:
27:8c:cd:b1:7e:e8:c3:3e:94:4f:20:5f:aa:da:ce:
ad:fa:71:4e:4c:4a:24:91:d7:32:ba:57:86:57:4c:
1e:a9:ad:65:d6:ea:9e:d9:8b:56:e1:69:95:1c:73:
40:5e:d8:77:d5:7b:b1:5d:f3:c4:d0:92:74:40:f4:
38:eb:e8:49:04:8f:98:51:0a:e1:9a:77:2f:58:a1:
e1:b3:89:c4:d3:4f:b9:e0:67:c7:b3:bc:b5:74:f8:
7c:9e:7a:a7:d5:61:31:59:27:63:7b:c5:0c:2b:57:
21:8c:7c:9a:d8:7d:4c:1d:31:63:21:2f:ec:04:75:
02:db:16:18:85:db:9a:48:51:8c:5f:89:a1:f2:5b:
55:be:12:c5:77:78:e9:85:97:07:d2:e9:b3:f7:05:
2b:41:8a:4e:3b:48:18:36:1a:1f:61:5a:c7:24:48:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FF:8A:99:73:A6:5C:D1:9E:D4:91:B4:64:1F:E9:02:28:31:7E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/8fa4741d-7763-345d-8a6e-84a1da7bd394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
X509v3 Authority Key Identifier:
keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:54:4d:62:20:9d:c6:b7:25:54:09:fc:ed:03:76:9a:43:26:
c3:d2:98:1b:5f:90:3a:fe:5c:b6:80:57:c0:1b:e2:ab:4a:32:
06:11:e4:d3:03:7a:d5:23:67:11:22:fb:79:fe:81:ed:98:f2:
eb:ef:2d:5c:f1:5e:d0:87:0f:c2:c4:bc:81:b5:86:eb:8f:e5:
4e:fb:89:e9:6c:56:cc:bd:24:24:ff:6b:18:9c:74:17:5e:31:
5f:72:c8:83:04:f5:83:3f:2c:c2:94:4c:a4:a7:42:38:fe:31:
e3:38:1c:10:e0:e8:f2:97:13:c8:59:68:56:ae:41:72:47:1a:
8f:09:38:95:cd:72:55:b8:8d:19:b5:1b:64:91:a6:3f:6e:44:
59:4b:9c:aa:5d:c7:9e:5a:ea:19:be:0a:7d:ab:a2:07:1f:3f:
e0:c0:c0:c0:f0:7b:38:a4:5e:9a:87:85:73:17:e9:dd:56:30:
98:10:2a:71:6f:84:7f:d5:6c:16:97:2d:d2:58:33:ce:b0:1c:
65:87:dc:3c:5b:61:eb:62:ab:5c:24:56:70:5c:bc:95:83:b2:
b5:67:aa:b7:eb:37:99:ed:56:25:ee:64:68:11:c8:e3:fd:12:
a6:00:bb:5e:04:d2:c2:19:42:83:3d:44:d1:83:ba:fa:44:f5:
2f:04:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:09 2025 by rpki-client