Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa
File: d88b5200-310f-3d92-806a-4a865f0bb691.roa (raw, json)
Hash identifier: B1m6QveqmprgZOT9vy5Dzw/JHc9MQAjsg1eoTpo1pUY=
Subject key identifier: E6:57:24:E1:EB:42:91:6D:33:5F:C6:E2:59:37:71:59:40:C8:A2:94
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E094EDB48391130AC293EDC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 104.199.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:ed:b4:83:91:13:0a:c2:93:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=e7c70c19-515d-4098-9fa2-9fdbf5c5127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:80:dc:f7:01:4a:25:95:bb:70:cb:53:de:
d0:aa:1b:0d:b9:5a:ad:fb:55:70:89:96:4d:ae:d0:
cb:83:aa:0e:67:37:8b:7e:f5:6a:8a:d3:9e:d4:22:
98:51:f4:4e:d1:c8:4c:a1:af:ba:09:25:1c:5c:41:
27:03:24:e4:eb:f7:30:c5:e4:5c:e0:5d:bf:ee:5f:
c0:4d:93:de:5c:b0:62:3a:db:cb:78:8d:9d:e4:6b:
e7:ad:03:2c:3d:62:f4:04:d8:3e:a0:f5:1f:b7:6d:
f4:f8:b7:73:6e:59:23:38:29:de:ba:56:1b:d5:55:
a9:6f:7e:61:85:5d:38:b2:90:fe:5b:20:ec:26:49:
c7:2c:6a:3d:17:6f:59:24:99:e2:bc:7d:4b:4f:8a:
e7:e3:cf:ca:43:0d:ac:7b:33:36:43:17:1e:e9:b4:
9f:9d:82:5b:ef:64:a9:51:4f:b1:e9:c3:bb:c0:5c:
3e:f8:97:06:5f:46:2c:fe:e3:f1:ad:8f:b0:f0:3f:
c1:76:c3:cd:d7:ba:f3:14:5a:d2:0f:37:67:4b:38:
77:37:75:ee:f5:e4:af:9d:2d:22:ec:72:6f:ee:a3:
94:19:a8:72:85:0d:44:18:2a:77:8f:68:16:06:d2:
8b:4e:fc:c9:b3:11:ca:7d:a5:70:ac:d0:3b:25:2e:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:24:E1:EB:42:91:6D:33:5F:C6:E2:59:37:71:59:40:C8:A2:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ef:ad:24:d2:60:55:de:67:e5:22:7a:1b:cf:6c:9a:c5:ff:
e1:b9:65:41:bf:a3:79:bc:67:c1:28:0d:41:5e:99:c1:eb:98:
6c:72:80:4f:5b:14:d4:3e:a5:35:a1:5d:0f:a7:15:a4:0e:63:
60:dc:8a:27:b4:b7:f5:71:1d:e4:dd:69:07:3a:ff:17:35:9b:
53:8e:92:57:b8:9d:8f:db:5f:b7:8c:28:04:2e:56:51:c5:36:
0c:1d:e7:06:0e:c3:c7:c7:00:c8:71:0e:09:02:72:de:d3:7d:
77:89:0a:b0:c8:f2:b7:4a:42:83:bd:91:c5:b1:f3:39:4a:75:
f9:2a:b5:92:2c:4e:1d:b3:05:5a:3f:70:07:78:40:ff:bb:10:
67:60:ba:e8:b7:a7:cb:78:bc:a4:94:b4:ca:fd:7e:77:8c:c0:
52:78:16:0e:54:44:9d:8b:d3:15:a2:6c:cb:77:94:85:37:38:
81:2f:ac:4b:86:2e:93:f8:dd:b9:30:07:1d:80:47:89:4e:29:
f1:fd:83:37:6b:6b:f9:d4:91:5e:d1:94:ff:f8:8f:6b:cd:54:
88:33:5b:9c:f9:1c:05:de:e0:91:c9:0d:52:39:d9:3c:9d:f7:
5b:b8:9b:5f:80:2a:f9:fe:57:cd:0e:69:a3:a1:dd:d8:66:a8:
ef:87:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:20 2025 by rpki-client