Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2a77c9d5-1fdf-3a10-bb64-49dbc4017664.roa
File: 2a77c9d5-1fdf-3a10-bb64-49dbc4017664.roa (raw, json)
Hash identifier: q5rZkjgCqgmLijoJ3nk+YQ5TgIVfWNNmc/qzUyqCxmw=
Subject key identifier: 46:D4:DF:0A:20:C3:8B:A5:3A:D1:C3:8C:65:04:16:8D:3B:0B:05:8A
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328584845159348A33CE788F1C95740
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2a77c9d5-1fdf-3a10-bb64-49dbc4017664.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 57043
IP address blocks: 104.156.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:93:48:a3:3c:e7:88:f1:c9:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=fbb72aca-beac-4952-86fa-a01ce7868d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:6f:87:38:f4:14:bf:53:d3:4b:9e:29:20:
73:a9:95:e5:0c:b5:c4:de:5b:b8:5a:23:7c:8e:22:
f7:e6:c9:87:49:1d:b5:2d:6d:55:95:f6:68:db:a5:
2f:90:de:ae:3a:bd:fc:69:db:92:97:9d:f9:a8:1c:
67:68:3f:b9:26:b8:ce:5b:71:70:0d:f6:e0:1c:fe:
d4:29:13:a3:4d:46:c7:95:fa:0c:7d:0f:f6:73:6a:
f1:d0:fb:dd:c9:db:65:18:59:52:2a:44:59:6d:0d:
6c:24:ce:d9:99:ab:23:f2:26:d1:34:f7:d1:42:88:
2e:dd:02:ec:4d:a3:a0:10:74:69:da:ea:bf:63:2a:
98:e8:3b:17:9b:3b:9b:87:07:d2:fd:82:95:90:d4:
4c:9b:cb:34:bb:a0:5f:78:2f:67:4a:e3:19:0e:fc:
b5:74:a0:73:59:0c:3f:b6:b0:75:30:87:d3:64:e5:
7f:2d:b2:69:a0:e9:c3:fa:b9:8f:06:91:66:86:4f:
5f:c2:4c:11:88:3c:bd:27:d3:32:ac:37:3e:9f:4b:
42:32:5d:10:20:ca:b0:b0:b9:f6:6b:83:34:c3:1b:
a0:71:e6:ef:b0:3d:66:22:fa:d5:a3:68:4b:00:ab:
90:06:bd:98:5a:1c:f7:ce:f9:50:3d:93:0e:8b:fd:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:DF:0A:20:C3:8B:A5:3A:D1:C3:8C:65:04:16:8D:3B:0B:05:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2a77c9d5-1fdf-3a10-bb64-49dbc4017664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:8c:ca:67:f6:50:dd:89:67:9b:e5:fe:f9:1f:e9:7f:06:6b:
cc:41:1e:13:0a:8b:54:84:e1:2b:e9:2d:60:dc:8a:f9:f8:48:
44:34:bb:a8:10:1b:00:a4:7a:97:6a:ff:da:5c:9e:15:e0:74:
2f:04:59:9f:91:a7:ee:6a:20:8f:e0:20:6f:42:2f:8a:2c:3e:
9a:ea:07:21:d4:04:01:e1:52:e0:d8:04:d8:af:dc:69:ff:32:
8a:4a:32:f9:e6:4f:c1:97:e8:b1:77:60:9d:c9:2e:ef:75:59:
ff:2b:92:5c:6e:41:5a:53:a1:a9:fd:6f:e2:86:5e:a0:8d:8a:
d1:c7:6f:9e:95:f8:26:34:f6:fd:eb:a9:7a:d7:68:0c:3d:e6:
d0:00:11:6f:c1:a0:48:28:63:4e:b6:cf:1c:cb:3a:c1:07:ad:
36:5e:5f:9e:bd:0c:b6:c6:77:60:c9:2f:4d:e9:3e:6b:3d:58:
c3:89:0b:c6:19:50:1b:24:21:ca:56:da:28:e2:7f:7a:12:0a:
46:e6:42:f7:02:cd:57:6f:81:01:72:81:91:f4:d4:dd:aa:e5:
47:89:db:2e:10:98:7f:18:f8:20:96:0b:0e:a1:b4:c6:08:76:
c2:b7:28:fc:d9:d7:8d:68:82:ea:ab:a5:03:77:77:07:2e:7e:
f3:76:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:17:31 2025 by rpki-client