Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f03c1b6-40b6-3fbe-9007-87ad0b5eef29.roa
File: 7f03c1b6-40b6-3fbe-9007-87ad0b5eef29.roa (raw, json)
Hash identifier: pucASqir3LQ9GVqtAIiWe23BYmiqZOW2883el+UPBu0=
Subject key identifier: 33:2E:C6:D7:2C:37:4A:EC:EA:38:0C:C2:77:6D:00:BC:CE:83:D2:C1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E094DE4CB87955D15666BC08
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f03c1b6-40b6-3fbe-9007-87ad0b5eef29.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 104.197.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:de:4c:b8:79:55:d1:56:66:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=b04d9c08-dff1-45d9-a98e-66a0e7e34083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:35:f3:09:f5:23:3a:a0:fe:78:92:f7:bf:
21:af:f0:e7:94:df:36:72:3a:74:f5:a6:7b:c8:33:
e0:65:3d:d4:ad:e9:45:3d:67:51:80:90:5e:ce:55:
37:44:2d:27:8f:b9:14:dc:2d:5e:4a:0c:f3:4e:7c:
7a:97:cf:93:f4:21:58:9a:07:13:a8:22:31:c5:6b:
f9:82:6b:c9:56:49:41:ca:2b:1c:04:d4:a9:de:6e:
d9:34:05:81:4d:1e:f9:64:6d:ef:30:e2:de:2d:54:
c7:28:a1:96:8f:eb:36:ae:20:d0:27:7e:38:b2:98:
e3:16:87:65:6b:f6:64:82:02:ed:bf:68:4d:2f:cb:
79:13:66:5d:e4:3e:f3:50:39:22:73:c4:35:09:f6:
31:4b:be:4b:36:89:37:36:e9:56:ea:7c:de:a2:56:
ed:7c:65:48:02:d9:f6:ba:50:20:0c:fa:b2:9d:7d:
10:f6:89:3f:7e:25:02:60:6d:36:56:8a:a1:99:81:
1e:eb:ae:be:d9:10:7e:23:be:2c:bd:f6:53:47:16:
c9:81:4e:59:d7:48:ae:12:7a:a4:f7:fe:f4:64:32:
db:c4:4b:95:4b:14:bd:74:a0:e9:85:9c:52:b1:76:
74:bb:2d:7e:da:17:ec:11:0e:72:62:d6:91:2a:09:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:C6:D7:2C:37:4A:EC:EA:38:0C:C2:77:6D:00:BC:CE:83:D2:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f03c1b6-40b6-3fbe-9007-87ad0b5eef29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.197.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:4b:df:92:d5:47:c8:3e:bb:84:75:48:b3:0b:4f:16:a5:85:
39:72:7d:ef:f8:b3:27:d9:82:bc:9d:cc:f4:91:1b:f4:73:75:
a8:8b:e1:bc:e2:f7:d2:a8:aa:4b:00:d5:aa:39:1b:cf:8d:32:
89:e0:ce:9e:e2:26:64:4a:b1:87:23:05:3a:58:2e:66:45:1d:
f1:03:38:88:ea:d7:b6:a5:33:c6:7e:cc:b8:e4:10:3b:fb:eb:
0c:d9:4a:a8:5d:5c:4f:48:cf:e0:3f:59:4d:74:87:51:bb:3b:
1b:18:f8:b5:52:ef:82:19:9f:ae:62:c3:ec:f2:36:62:a3:ca:
e4:25:b8:9e:f5:d9:d2:2c:49:87:ff:6f:b9:df:6b:aa:64:d2:
16:78:ab:f7:e5:b4:e3:2c:4b:2b:00:9a:3e:9f:71:25:0a:4f:
36:26:c9:3a:60:f8:0f:07:fc:99:6d:c0:61:74:d6:ba:0d:97:
75:ad:28:80:0a:49:1f:78:5d:f7:cb:b2:87:b5:c9:10:04:2e:
bd:b1:71:88:d6:de:15:1d:fa:9b:3a:85:b9:dc:8a:40:a4:22:
39:2e:ed:d3:e9:30:99:a2:fd:66:3a:02:66:8b:dc:41:94:f9:
48:6d:70:2d:76:7b:72:07:72:3e:da:fb:db:4d:11:51:3e:a5:
6d:15:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:24 2025 by rpki-client