Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json)
Hash identifier: Vn2pAaoGbKEr0STLD2EglxmX+UBFutEeaxyTcjx8Bu4=
Subject key identifier: B1:C4:0B:1D:B2:F6:48:76:A2:C4:E5:EB:3D:8A:BD:5E:3C:8E:17:1F
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F056125C1368DD6884B500
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 104.151.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:56:12:5c:13:68:dd:68:84:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=0d0bea1b-3f22-45aa-b0dc-c33995cca710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:bc:24:86:28:96:9e:4a:46:82:85:ee:22:
02:35:35:2d:49:88:cc:eb:07:4e:83:f1:f0:68:8e:
b8:39:6e:92:da:52:df:3f:d5:ef:d6:8b:54:5e:e6:
cb:aa:78:20:2a:14:45:35:06:09:d7:91:a7:8e:3b:
a5:cf:7a:a2:12:42:34:a5:31:db:ef:77:3f:59:c2:
0f:a8:6a:5a:bc:ec:f8:cd:23:2b:75:a5:29:db:63:
b3:c1:24:a9:8f:c1:8b:84:af:f2:44:fc:3d:4f:47:
ca:67:28:46:0d:b2:6a:69:e2:dd:a4:7b:ea:6c:86:
8b:74:68:3c:2c:f6:f9:94:95:ae:f2:c1:bd:e4:bb:
54:1d:ed:50:d6:fc:75:a8:74:14:21:76:2f:11:5b:
a2:93:1d:db:10:f7:b0:22:48:3e:6e:be:66:3f:a8:
1a:6c:ef:b0:cc:3a:08:4b:5a:ce:ce:39:5c:f3:17:
2b:79:7a:33:96:26:cf:b9:9d:41:84:c1:5d:6a:03:
0c:55:95:2e:65:f9:37:9e:eb:bb:d8:03:20:a2:73:
d8:26:8d:41:60:72:ad:56:2f:df:92:f3:f8:a9:45:
4f:77:27:49:38:52:68:68:5f:ac:80:78:0a:7b:ec:
78:28:93:61:2c:50:1c:f0:5f:1f:f3:93:96:42:ea:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:0B:1D:B2:F6:48:76:A2:C4:E5:EB:3D:8A:BD:5E:3C:8E:17:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
104.151.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b9:38:18:ef:77:64:02:f9:ba:6e:01:ff:1e:92:37:a9:9e:
31:bb:74:b9:eb:cf:fc:25:2f:b3:d4:d5:8b:3e:da:36:1b:5b:
26:64:46:b6:3c:1e:da:1b:48:ae:e8:c8:5f:ee:85:c2:f9:d3:
f3:c7:3e:67:2b:c7:94:de:e7:70:94:8b:fc:e0:89:1d:3b:e6:
16:13:e0:67:08:64:98:dc:70:7b:46:ea:4c:e4:92:f1:61:27:
b6:ee:6c:fa:f3:02:8b:c1:c5:0f:c6:58:a3:42:5e:69:ee:24:
77:05:26:65:a7:d4:bb:a0:b2:7a:ec:fe:77:a0:e6:23:2e:ed:
0f:cc:ef:d1:a0:95:01:51:5c:eb:51:06:d9:d1:d2:fe:40:d8:
68:c7:ab:10:52:b4:26:a0:be:1d:13:f2:e6:b4:5f:06:a8:58:
80:4c:3c:4b:86:5e:42:f8:58:16:32:17:5b:71:de:cc:68:22:
fb:8c:3a:ac:ce:72:3b:01:9d:63:9a:52:14:4a:33:91:4a:6d:
f2:b8:c0:de:b2:de:37:16:92:07:60:34:08:3f:34:aa:af:53:
1d:8e:9e:3b:4c:60:36:bf:8a:aa:48:03:55:2b:56:6d:b0:92:
ff:0c:a5:7d:2d:bb:87:80:6a:4a:bf:55:f4:2d:1c:28:87:59:
94:76:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:03:41 2025 by rpki-client