Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa
File: 9d2999d7-a1bb-3446-acf4-a09d095fef48.roa (raw, json)
Hash identifier: I48/XyuXw2ejC51ObVf4ZsEKq3hqeGjTQbMtlhLGUJc=
Subject key identifier: 45:14:0F:C7:75:47:59:0E:73:CC:E5:80:73:48:56:40:18:7C:BF:EE
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482BF555972D71473E6BCCADC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 19437
IP address blocks: 104.254.238.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:55:97:2d:71:47:3e:6b:cc:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=e6397f2a-b197-441a-b28e-56e2865495de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:a6:69:22:61:59:0a:11:ad:1e:71:e3:5c:
88:fb:33:57:c0:c0:a4:b3:9f:e7:77:de:39:a6:0d:
c4:0d:ac:e3:59:58:1d:05:9c:b4:ed:2a:e1:19:b1:
d8:11:af:a8:e4:9e:40:ca:19:8f:2b:c1:c6:53:ec:
e0:0d:16:61:d8:b2:37:7a:72:53:46:6e:08:92:29:
b3:2e:d4:a7:4c:2c:4d:95:e8:1f:29:f1:6d:60:d3:
49:03:af:bd:59:cc:f2:21:c9:1c:fd:27:32:e3:a8:
b6:05:86:f4:56:b5:ba:87:4a:a7:32:75:3e:58:cc:
4e:cd:0d:fd:88:d8:df:0b:77:93:ae:29:a9:ea:69:
3e:52:b6:85:54:39:f4:d9:df:90:e8:f7:0b:73:52:
6d:dc:75:0d:bd:01:49:16:49:ae:b3:26:f2:d4:38:
a0:65:f8:f8:e5:67:1d:01:3a:75:a8:50:65:e8:fa:
a8:90:57:b4:36:20:89:75:a9:3c:59:5a:91:43:06:
b6:db:42:5d:3d:e6:e5:a6:21:79:98:18:a3:5f:88:
ac:2a:d0:50:88:2c:59:90:8e:9a:5d:a3:f0:fc:94:
54:a9:43:4d:04:5f:3c:f0:66:c4:7b:c1:0e:4c:44:
c9:69:e7:0d:51:7d:e9:e1:e3:56:02:8b:d5:d6:c3:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:0F:C7:75:47:59:0E:73:CC:E5:80:73:48:56:40:18:7C:BF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0b:49:70:b7:9a:24:e6:ad:ea:4e:d7:26:ff:1f:4f:71:89:
7c:64:90:e1:b6:6a:6b:8a:a1:99:d7:15:9a:03:fb:79:31:2d:
d6:51:03:a5:8a:1d:ce:c5:66:06:14:79:8c:47:4a:63:af:a7:
c1:fa:9d:cd:90:c5:50:1f:48:4e:5f:1f:07:55:47:06:5b:dc:
7b:ba:e5:15:b6:3a:7a:7f:73:c8:94:4e:7b:d2:13:84:30:2b:
1c:b5:97:f4:a9:41:c6:63:2e:7b:69:89:38:e1:e5:18:9d:de:
59:15:c9:fb:dc:ed:67:25:9d:da:ae:b2:e9:3c:61:34:2f:15:
c3:83:d6:c9:c6:bd:84:c9:d9:f1:6d:42:7b:0a:a2:97:59:8d:
dc:93:91:64:17:ce:81:0d:48:29:5c:b9:d1:4c:27:d2:b1:82:
03:93:fa:12:6b:85:82:cf:e6:7d:9f:81:d5:b0:66:0b:ae:50:
f3:01:b0:d2:3a:1f:73:09:d6:59:39:3d:0e:97:39:c0:2d:a9:
96:b7:8f:a9:ec:59:ea:4a:c0:a4:61:7c:a0:b5:3c:14:ff:60:
6a:81:51:f2:b6:d0:e9:3d:25:c5:5a:ab:1c:b5:b3:47:36:b0:
00:67:26:7c:5c:4c:09:62:e7:57:7d:3b:e4:94:65:4d:76:67:
b0:f9:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:17 2025 by rpki-client