Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
File: 6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa (raw, json)
Hash identifier: uY8tO+8ve7xRLvuYADUc17dVmH+dJ07zNzYOGI9z/us=
Subject key identifier: 68:8B:9F:11:98:D9:D9:DB:CD:E3:9C:D7:65:38:D9:B3:B8:14:D4:BB
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F432858485F9AE3FE57EB5AA06FABA200
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 1239
IP address blocks: 104.167.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e3:fe:57:eb:5a:a0:6f:ab:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=4de428b6-278c-4ca8-9dc7-8d54d6409bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:b2:a9:53:97:82:d5:ef:b5:1e:0d:5e:c1:
20:02:fe:f6:e4:2b:50:fc:9e:8d:66:ec:2b:1a:5e:
7b:17:d6:a7:15:d3:ad:ae:a9:bd:46:ce:e1:1a:38:
9c:34:37:b7:6b:72:8a:c0:b6:08:93:41:64:0f:e2:
a6:ce:c9:19:11:b6:e6:ab:24:b6:99:91:0f:dd:ef:
1b:d2:7e:5e:6b:75:67:c7:3d:cd:0f:23:39:1a:db:
e1:92:d8:19:b4:a0:9c:66:68:0b:46:5b:7a:dc:52:
16:51:52:98:31:3d:d3:ab:3c:99:a4:25:96:75:e2:
1c:18:f5:cc:55:68:c1:6b:73:b4:44:8a:12:d5:1a:
61:42:57:fe:c9:b2:11:a4:ec:dd:38:a2:a8:51:4d:
3d:0b:ba:1a:0b:2f:bf:f8:3b:50:42:68:9a:17:71:
33:77:b2:81:c4:f7:fa:1f:64:a5:5c:ca:06:e3:f4:
9c:8c:7d:67:10:8b:d9:46:b7:3d:32:8c:db:73:db:
d4:fb:58:99:8a:54:91:99:f2:bb:41:82:56:fe:86:
25:dd:dc:b3:21:3e:55:65:9a:65:5f:a6:9e:00:6a:
47:88:3c:ee:5b:a8:ab:b9:1b:d4:a1:8c:39:6f:f4:
fa:9c:25:5b:46:1c:a7:2b:61:c6:9b:cf:13:bc:9d:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:9F:11:98:D9:D9:DB:CD:E3:9C:D7:65:38:D9:B3:B8:14:D4:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c2:7f:be:10:0a:63:33:52:d1:04:c7:49:cb:54:42:df:5b:
fa:3e:5b:e6:64:04:d2:4c:0a:85:72:18:4b:26:f7:d4:c9:4c:
96:af:54:5e:66:a3:d3:07:fb:d4:71:3a:6b:55:dc:5c:f4:cc:
ca:7e:4e:fb:00:a5:d8:74:9c:d1:99:50:75:a6:96:88:e7:e9:
2a:84:61:de:86:2a:e6:c7:ac:c9:26:48:45:ef:8c:8e:ef:f1:
2e:9b:e6:7f:83:5e:5f:69:2e:0a:f4:d8:c2:33:56:44:24:c0:
bc:f7:5e:35:e6:c7:ed:30:03:5e:05:8b:99:a2:97:63:f2:83:
e8:cc:0e:e0:0a:17:dd:dd:68:1c:70:6a:7c:3f:0e:f3:ab:8c:
e3:ee:5a:ff:c7:26:65:ba:62:65:53:c7:7d:20:38:c5:f8:99:
39:e4:af:4c:f9:ca:cd:e2:50:ad:90:0a:74:a9:1a:2f:cd:dc:
d9:a7:4c:95:18:d8:1e:8d:e4:46:a6:cd:ee:f3:15:b1:ae:88:
d2:9e:57:ce:da:5e:6b:26:c2:87:53:30:9c:ec:9b:78:93:cb:
c4:60:9d:60:45:a9:f1:e0:f4:b2:aa:58:c7:f8:c3:ff:0c:74:
ca:5c:29:1d:5b:d3:b0:15:4a:51:8e:34:82:51:0a:33:af:4a:
0d:51:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:25 2025 by rpki-client