Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7e935ea-21be-30ff-adf5-259f61235bce.roa
File: a7e935ea-21be-30ff-adf5-259f61235bce.roa (raw, json)
Hash identifier: 8l8Z5GAy+FfssUSwRjhivksGxn1pYfUVnBKalw7cF6s=
Subject key identifier: 90:01:80:25:FC:20:64:B3:9E:72:F9:9A:FA:80:CE:9B:4E:9A:96:39
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858484D92088EC30BBC00A99A2900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7e935ea-21be-30ff-adf5-259f61235bce.roa
Signing time: Mon 23 Dec 2024 14:58:22 +0000
ROA not before: Mon 23 Dec 2024 14:58:22 +0000
ROA not after: Sun 23 Mar 2025 13:58:22 +0000
asID: 40676
IP address blocks: 104.253.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:92:08:8e:c3:0b:bc:00:a9:9a:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Dec 23 14:58:22 2024 GMT
Not After : Mar 23 13:58:22 2025 GMT
Subject: CN=21656cd3-646d-407b-928e-fffecb0ca333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:3e:70:9f:3d:a7:21:27:d4:db:ed:b5:a9:
65:34:bb:2c:67:50:1d:63:2d:ba:92:ad:04:c9:e8:
3d:03:7f:fa:4e:ae:5f:98:60:3b:55:d7:0a:7c:0f:
a6:69:eb:80:9c:78:a3:ac:64:9f:3f:50:93:11:a7:
f2:ae:ce:e9:1b:ec:a6:7d:76:53:2e:d4:d6:54:4b:
f2:60:0c:0a:59:8e:73:17:05:6a:31:1e:2d:f6:c1:
3b:8b:08:16:8f:30:29:ec:9d:31:8d:9e:23:93:0d:
dd:bd:7a:54:8c:4c:fc:83:e9:6d:8f:9b:1b:49:a8:
20:e1:d6:b5:fd:f3:0a:66:e0:d5:a3:3e:dc:15:74:
e0:48:09:20:e5:c9:29:c6:71:1a:40:69:77:83:ac:
e7:a6:0c:83:00:64:d6:46:4f:e9:56:67:59:e1:0e:
76:57:b4:4c:f9:c8:d0:8f:af:ad:da:d1:41:c1:45:
a5:4e:fd:bc:c6:f1:ea:91:27:4e:f2:d8:d5:f3:a7:
8a:1c:31:56:cc:23:bc:f1:6e:7a:95:e5:b1:b0:50:
19:c0:6b:c4:41:0d:4b:a4:f0:29:68:65:af:1b:56:
65:12:fe:a8:e8:06:bc:52:84:77:64:a9:53:83:50:
3c:51:e3:a0:80:76:48:48:72:b2:77:cf:c6:8b:4d:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:80:25:FC:20:64:B3:9E:72:F9:9A:FA:80:CE:9B:4E:9A:96:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7e935ea-21be-30ff-adf5-259f61235bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:47:d1:53:8a:f0:7b:f7:a5:87:03:69:55:1b:57:c0:7e:96:
a0:cb:dc:83:e7:4a:93:58:3c:36:ae:8d:33:59:74:d4:ef:a5:
4a:7d:64:dc:45:20:9c:8f:50:96:8f:ac:f2:b7:85:42:5e:4d:
98:69:79:0e:42:c4:32:d8:ba:ff:96:d6:68:c1:90:2b:b2:eb:
a9:63:db:14:b9:62:e9:6c:e9:b6:26:47:05:ba:7d:24:24:c9:
d6:f9:aa:24:56:8c:b2:60:14:52:9c:1f:ae:88:d4:f2:0e:a5:
41:fc:22:ce:a5:19:e7:b1:ef:28:c4:c8:db:c7:ee:e0:a5:85:
36:48:ae:45:6b:2b:eb:da:fa:99:33:07:8f:3d:54:fe:31:02:
7d:6d:65:fa:eb:a6:48:56:2f:d3:f5:bc:34:24:c0:dd:53:9e:
ca:58:d4:ea:0a:ec:f0:f7:fe:0c:1b:bc:2e:10:54:08:1b:2a:
96:c3:88:51:df:f8:52:03:e8:00:05:12:16:b7:56:96:94:e7:
2c:21:ed:65:55:b3:ce:7c:ca:6d:ab:2b:f1:96:c8:17:8e:32:
ec:40:0c:83:9f:34:9d:a1:25:cd:a7:3e:e8:a9:c3:ba:c7:aa:
6e:e3:bf:ab:0f:fb:3f:7b:12:11:91:a9:ab:16:4c:6a:3e:b9:
54:20:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:56:00 2025 by rpki-client