Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
File: dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa (raw, json)
Hash identifier: VTIgjrdpFBDXXmbd8W8RiWNpIiGreT3u9lI3WmK/YqU=
Subject key identifier: 27:39:8F:DC:AE:56:00:BC:8C:03:CF:36:AB:25:8C:FB:C3:F1:2C:1A
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328584832F041DC74A350E975F64800
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 23470
IP address blocks: 104.156.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:41:dc:74:a3:50:e9:75:f6:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ffa0ae0a-392c-41c0-b382-46b7a5545366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:df:99:74:d9:51:9f:84:b0:ae:90:9c:7f:
f2:f1:65:92:96:34:01:28:a5:44:bb:df:bb:ce:ab:
c3:37:8c:75:91:6c:67:0b:5d:97:b7:ff:7c:7d:4e:
4f:87:88:d3:bb:37:c1:fd:ff:5a:bf:2d:a4:37:f9:
fd:bd:9c:ea:f6:bf:b8:1f:60:3d:73:59:fb:65:93:
05:f8:15:cb:23:43:30:e1:bc:46:37:d7:a9:50:95:
b9:9d:39:30:47:b4:57:bf:e7:13:7f:ca:aa:37:a8:
02:05:f0:76:6f:51:b2:bc:41:4c:c1:d8:e4:9c:d1:
c8:56:d0:2a:ed:f5:41:cd:a9:ed:2f:9e:50:e5:c2:
b1:b9:4e:62:b0:a2:0e:9a:32:a6:a9:5e:c7:f1:4a:
73:68:f7:d8:b6:57:78:b3:d1:d9:82:9c:64:e5:60:
c7:d3:94:89:95:07:16:e7:0d:17:6d:f3:e3:28:9a:
6f:e6:69:04:c5:94:35:73:2f:62:64:2c:29:ba:0e:
88:8c:76:a3:f2:8b:e9:cf:80:52:6d:80:72:d8:64:
4d:c9:ce:6e:e2:68:d2:80:99:43:59:f6:65:2d:25:
22:c0:fd:05:d4:99:34:02:78:e2:61:a5:f6:9d:9f:
0a:e8:60:41:27:74:2f:a7:9e:83:9c:54:b9:e0:d2:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:8F:DC:AE:56:00:BC:8C:03:CF:36:AB:25:8C:FB:C3:F1:2C:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:1f:f8:d7:bc:45:81:34:94:21:bf:ff:b0:72:c1:9b:99:0c:
34:b4:ff:4a:43:d2:1b:ba:ab:2b:51:89:9a:e6:48:49:e9:63:
cd:a9:89:86:96:aa:d0:19:66:40:2b:ba:04:5f:ed:41:a9:e3:
ad:db:f8:21:5a:5c:68:ea:32:bb:76:c8:06:f7:52:68:05:40:
a8:42:cb:90:21:4e:ca:c9:10:7b:70:79:87:e6:2a:b3:1b:da:
8f:9c:33:14:b9:ed:29:52:9c:92:c1:69:0b:de:89:4e:d4:51:
ec:7e:d9:c2:0d:32:a0:c6:0f:da:aa:c2:8f:15:b7:b0:50:4e:
4c:c4:4f:f1:b9:67:0d:af:52:48:a3:49:49:16:b8:e3:44:96:
69:1b:89:1d:9f:7b:39:70:68:f1:2a:84:a6:17:ae:ba:3b:f8:
61:82:f4:06:39:b3:94:29:88:52:3a:f6:12:ec:98:28:42:e5:
bf:35:d4:87:8a:89:79:4e:d7:76:97:a7:d7:1e:28:38:ed:63:
c0:07:eb:52:46:2f:bd:78:7e:1a:52:21:e2:3c:96:e2:a8:cb:
25:68:16:4a:7d:c0:6f:75:cc:12:de:f4:2d:52:f0:63:24:4a:
c9:cf:7d:10:a0:0e:3a:b1:19:d0:8a:e0:27:b6:69:21:53:0b:
f1:5d:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:40:24 2025 by rpki-client