Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
File: 59401f7c-af88-37e4-b7e8-44bc381ea339.roa (raw, json)
Hash identifier: vyvHBGVZFm3K1OIfD/0DXbpH3/UXm++3Xf9Ok49srAw=
Subject key identifier: F0:41:FA:C9:C1:FA:62:4A:54:A1:84:E5:FD:22:C4:75:15:0D:43:67
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285847ED24C3D910AA215570750200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 64267
IP address blocks: 152.44.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c3:d9:10:aa:21:55:70:75:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=4bf4e1cc-361e-4142-831d-c946a985c2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:de:8b:e2:7a:68:91:d3:de:be:16:46:c1:
f1:e5:8b:d9:6d:ce:4c:f4:93:ae:ba:b6:9b:53:f0:
00:0f:df:86:5c:70:9e:01:ef:4d:3e:a8:8a:16:d6:
50:5f:de:df:e5:bc:52:9b:c4:39:6c:47:58:1c:38:
d6:75:1c:2b:fd:9d:2b:7c:a4:c4:07:4d:ba:70:47:
92:b4:2c:ac:ff:a7:ad:1e:24:13:ae:2b:4c:45:78:
e3:a8:9d:e8:0f:7a:84:60:d0:40:c4:7d:bd:af:34:
33:e7:f2:67:ee:7e:4f:6a:94:2a:8d:95:d9:c5:e1:
18:bb:1a:bd:c3:01:66:a1:0e:2e:47:5b:54:5e:63:
40:8a:60:c8:26:4a:77:d4:4c:49:12:ae:3f:3e:41:
33:f1:68:e6:be:a4:04:06:11:b9:44:ea:31:c4:1d:
a3:d2:22:81:b5:6e:57:99:49:d9:73:0a:6d:32:2c:
15:bc:5a:4f:64:40:bb:5c:ad:96:f4:80:6b:9a:58:
15:89:4e:0c:c0:ab:1a:44:56:47:30:24:74:b8:f6:
89:7e:d5:f3:0b:7a:01:55:5e:ab:b2:b9:1f:03:ba:
d5:90:00:7f:d3:43:7d:a4:92:75:bc:6c:c3:36:2e:
20:28:75:fd:f1:92:eb:ee:e3:1a:6f:3f:b8:b8:58:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:41:FA:C9:C1:FA:62:4A:54:A1:84:E5:FD:22:C4:75:15:0D:43:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:8a:4b:8a:f1:d1:3a:97:a7:27:67:19:cd:63:c7:5a:61:3a:
82:48:23:42:6b:9c:57:fe:82:11:20:98:ad:3c:57:1b:4f:78:
af:3b:ad:45:03:c4:ab:4f:4d:ce:18:89:4f:0f:cb:69:09:1c:
0b:3f:89:4e:e6:7a:2e:f1:ab:06:35:5b:49:ec:f9:2d:a7:d7:
b2:b7:51:35:4b:eb:00:f4:cf:b5:41:88:ce:d2:e9:51:c1:fd:
9e:67:d1:33:14:8d:62:d6:ec:34:55:ce:8a:55:84:03:4c:3a:
34:87:f4:b6:0a:fd:7e:3e:81:a1:8a:89:d7:26:f0:ad:71:cb:
2f:6a:5d:40:ef:2d:7d:49:a3:3d:48:61:9b:65:0a:fa:db:57:
ed:0d:96:a0:ff:75:42:cb:19:6e:8d:1e:b2:43:6e:3b:78:69:
5c:71:aa:3f:8c:1e:df:88:ef:22:5d:c7:83:24:64:37:54:60:
fc:5b:80:84:85:8d:b6:52:bf:d5:15:46:0d:a0:b4:ee:ba:99:
e2:ea:77:2f:b0:3e:ce:a5:62:34:76:f2:97:c4:8e:96:3b:f5:
90:a6:96:0d:a4:89:a9:41:af:dc:c4:7c:9c:61:09:e8:85:a4:
f0:ec:50:ce:5d:4b:fc:50:3c:71:ec:cb:ca:df:39:66:29:95:
1f:a4:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:32 2025 by rpki-client