Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
File: 7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa (raw, json)
Hash identifier: KEqQ2TrlAv0ozkY9Sw7GoQUvhlu9GzQf3lb6yP/mteE=
Subject key identifier: F4:03:FD:14:90:51:DA:04:E4:62:10:11:69:78:A6:F9:0D:51:0B:15
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F43285848222FDD64BA8F26FC38269280
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 11260
IP address blocks: 104.37.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:dd:64:ba:8f:26:fc:38:26:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=4b64835d-7330-48f2-8d78-4b130096084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:c1:f9:44:1b:ad:44:3e:f0:32:db:59:f5:
fb:f5:3d:b6:ca:06:4b:dc:db:27:18:be:16:5c:6d:
42:1b:11:87:f3:7a:6f:ea:aa:3e:90:af:06:db:f7:
17:aa:de:db:e7:57:48:71:7d:fc:91:24:37:fd:0e:
cb:38:b1:7e:39:90:00:03:ea:b0:b8:25:fc:96:2f:
66:04:45:33:fd:0a:48:e0:29:3b:14:df:44:78:8c:
20:be:89:20:2c:32:74:20:85:b2:d2:95:65:d4:f9:
e5:eb:3f:e2:65:95:71:b9:f0:5a:b7:52:de:e0:be:
a5:27:08:e5:f9:70:0a:6e:c5:8a:1c:6a:34:2d:cc:
9d:f3:e2:80:27:15:13:e4:8f:d7:18:e7:f7:2f:33:
a4:1b:13:ed:0d:07:2f:f4:d8:4a:60:60:45:3a:98:
1a:94:0c:42:62:3d:be:63:d1:58:76:68:47:e7:14:
20:da:15:86:f3:50:09:b9:db:74:75:69:22:58:58:
a1:df:18:45:5f:c3:89:b4:e6:a9:f6:58:11:ab:4d:
74:18:40:77:87:d7:2a:b6:23:3e:7d:a5:fa:4c:eb:
24:62:56:c8:99:ed:ad:fe:bd:31:10:84:33:f8:ff:
3c:2b:de:cf:40:26:77:9a:e9:73:10:39:38:11:d9:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:FD:14:90:51:DA:04:E4:62:10:11:69:78:A6:F9:0D:51:0B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7523ebb6-4152-3662-828a-5fb5d6e53cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:ea:13:58:c9:a0:93:84:d7:09:39:e8:15:51:1a:78:3d:b7:
8f:ad:2b:67:d3:37:36:b7:12:37:20:b3:42:30:38:17:5e:6a:
88:64:89:df:04:ad:e1:f9:51:3c:fb:2c:f8:df:24:12:cc:c1:
22:3c:7f:0d:c1:f2:e7:2a:67:12:34:9a:85:b5:42:52:7f:bb:
f2:5f:7d:e5:bf:63:3e:70:82:7e:a6:71:b6:a2:1f:af:61:df:
74:0a:de:33:ec:c6:0a:e4:43:94:cf:02:38:df:61:1d:04:74:
44:bd:f0:82:58:3e:96:13:cc:47:8d:6e:cb:ba:fd:88:eb:b1:
a0:9c:f8:9b:ea:d2:38:cf:e5:5c:ad:ad:4a:ee:83:a4:78:1e:
5d:fc:b5:49:31:02:fc:92:26:c6:69:aa:40:f5:21:1f:16:8f:
04:b0:a3:3c:5e:93:c2:b7:2b:43:49:df:f3:ba:25:a4:03:61:
76:1c:4d:52:e5:4f:ff:0c:1f:d6:9b:62:e7:b4:f5:99:8b:26:
5d:02:3c:6a:ae:1e:c6:27:e0:5e:b5:66:a8:81:fb:42:ec:47:
3b:6b:bb:cc:11:6a:15:63:c9:66:82:0e:6f:e9:3d:82:19:75:
bc:7f:23:98:b2:97:f5:42:40:3c:15:8d:16:b0:21:e5:81:8d:
49:99:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:34:56 2025 by rpki-client