Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa
File: 28575f9c-570b-3118-a718-2754ac5ad8a1.roa (raw, json)
Hash identifier: Fa/R6eSxVGF/tWk40OJl/lw2qYHqQiLRc1DVctAeGgw=
Subject key identifier: 24:B9:BB:60:24:E6:3B:29:F6:A5:08:5A:48:2D:35:BB:F8:86:71:00
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285847E094C7DC1AC733DECB146280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 36040
IP address blocks: 104.237.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:c7:dc:1a:c7:33:de:cb:14:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=3d4237c1-aa18-4243-800d-ccfccf105d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:03:1b:9f:27:93:25:c6:ee:78:8e:44:d8:
e9:0b:98:7b:b9:d2:15:e2:1c:7a:fa:6c:d7:89:f7:
de:41:9f:24:44:5f:fb:9e:c0:45:22:44:75:48:8b:
1a:67:2b:83:16:49:a7:6b:9a:7c:e6:ed:e5:fd:b9:
1a:5b:26:1e:dd:b5:a7:ab:4b:cd:88:a0:89:03:9b:
c9:1f:a5:ef:3a:f3:be:11:02:fc:ef:d9:5d:0e:ea:
b3:3c:1c:23:ca:01:81:36:74:ea:73:6f:6b:8a:d8:
d7:e8:4f:ee:b0:fd:d3:15:b9:dc:f8:4e:d4:28:78:
44:f8:04:0a:54:77:c2:2c:15:cb:a9:52:d4:90:59:
2f:1e:44:8f:49:98:64:ed:87:a4:df:44:b1:6d:fa:
e9:c9:82:ce:31:d4:d1:54:bd:be:73:36:60:f1:58:
77:b5:fe:f6:38:6a:35:f2:b0:b9:47:d1:f6:37:0c:
99:44:7e:3c:a2:5f:d9:eb:76:88:0a:88:61:ab:33:
82:ef:4d:92:5f:77:8a:a4:b9:a9:e8:87:0e:3b:12:
47:9c:f5:d8:62:4f:26:59:0b:19:3d:60:3b:60:a9:
8d:a6:47:37:40:ff:cd:aa:08:39:a0:e8:88:ae:86:
ff:39:40:2b:8a:0f:a6:61:23:04:7d:40:de:21:9a:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:BB:60:24:E6:3B:29:F6:A5:08:5A:48:2D:35:BB:F8:86:71:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:8f:92:8c:ef:ad:07:b9:0a:74:4b:12:2b:b3:3e:da:66:1a:
24:bb:3c:fc:6f:d7:3b:08:d3:ee:b9:40:4a:e7:67:2b:00:a6:
8c:9a:79:e3:29:3a:92:78:46:cd:9e:8f:71:7e:8c:0f:d3:68:
bb:3c:3b:52:21:a5:eb:f3:12:68:2c:72:1d:d7:00:d4:88:f9:
d0:40:73:35:c5:10:c2:73:f6:a1:1d:f7:1f:ad:9f:5c:fd:d8:
97:82:b6:a5:b7:18:18:3e:1e:30:b8:d6:b9:68:a7:ed:6e:68:
79:d5:06:75:86:7c:a2:ee:13:ff:9b:75:91:a3:a7:8c:61:02:
9c:af:5d:b4:85:3a:1d:3b:27:d8:f3:89:fa:c8:8b:53:97:21:
37:06:f0:e6:ef:87:bf:4a:00:53:6c:24:97:47:a4:15:d8:f7:
64:63:84:51:a4:cd:58:69:e4:59:50:c6:26:39:ac:56:5d:6c:
5e:e5:4a:20:ea:4a:a4:77:9b:22:7b:cc:8f:c6:30:e8:dc:a5:
14:d2:61:93:5f:1d:15:5f:9e:6e:f4:4b:80:f5:15:5b:42:49:
a7:fa:8f:2a:8e:d0:6d:98:61:f9:1d:6f:3a:89:04:30:56:6f:
a5:62:72:a5:21:74:22:f3:61:72:c1:9d:aa:b5:11:4f:aa:af:
9b:d0:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:40 2025 by rpki-client