Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa
File: e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa (raw, json)
Hash identifier: aJpw3+nKdXcqIpqxpAegsOvfSfkNzUVw+XXPWXEb/hc=
Subject key identifier: 9C:78:0C:9A:43:F1:83:83:EB:AE:C1:2F:52:4B:E5:55:08:75:59:D8
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482BF55582060F8AE301B3F680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 19437
IP address blocks: 104.254.233.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:55:82:06:0f:8a:e3:01:b3:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=284377c8-fcd5-4630-bd91-d6c12c4d114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:ad:c1:c2:63:2a:fa:2f:30:8c:3e:73:92:
e3:41:fe:8c:cc:a6:f1:43:77:fc:17:d0:74:24:f2:
16:94:6e:57:04:16:e4:8a:ca:fe:ad:31:02:57:fa:
ce:ce:a4:55:af:92:88:41:b8:ac:63:3e:17:c9:b5:
d7:0b:d4:e8:72:8a:97:22:e6:af:8d:ce:fc:e1:7b:
e6:7a:89:93:81:8b:d5:2b:1f:d9:1d:c6:f7:4c:fa:
a8:cf:2f:b3:4c:5f:57:d7:34:5c:54:18:43:94:81:
ec:e0:05:fa:fb:0e:52:c6:78:84:41:78:3d:2f:80:
fc:94:6b:21:71:33:df:23:61:38:45:01:9f:e4:99:
8b:0b:27:51:dd:55:35:e6:dd:9c:cc:80:a5:87:96:
55:07:7b:4f:61:be:b4:cb:d5:66:ad:74:19:3a:b0:
2e:70:a4:2b:92:ee:ba:3f:8c:d2:16:2a:60:40:c4:
57:f0:fe:39:a1:05:84:7d:49:ef:a0:86:c6:84:cf:
ee:98:c1:b0:b4:b6:fc:62:c0:d5:63:49:ec:95:9f:
36:99:42:6a:64:e9:d4:18:54:b6:25:aa:ad:d2:52:
c3:c6:46:f3:c1:60:db:d2:33:a7:dc:e8:0f:f6:7d:
27:58:8b:23:14:ed:30:84:9e:88:0d:c5:35:ef:59:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:0C:9A:43:F1:83:83:EB:AE:C1:2F:52:4B:E5:55:08:75:59:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e31d6b6a-ba7b-38f9-b9aa-6116a7546606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:61:7b:31:e7:f9:28:e3:af:4f:ef:e3:aa:2e:f3:6d:fa:08:
cc:68:b1:c6:75:41:71:14:cf:10:c9:8b:61:2e:87:97:6a:38:
eb:ab:a1:3a:58:c5:c2:b5:62:36:5b:07:3f:10:fa:33:87:1f:
e0:77:8c:43:5e:59:70:2d:b9:86:dc:b4:b2:68:b4:21:50:04:
4a:86:3e:8a:f2:ae:7a:04:45:f3:28:e5:9e:d7:15:fd:3d:bc:
da:fa:ba:0e:84:c7:9b:38:5d:a8:e3:1e:d0:8c:9f:53:8d:4d:
8c:23:ae:2e:f0:99:7e:01:fc:a3:6f:d0:bf:4c:88:e6:11:41:
d1:b2:ec:49:69:35:1a:3a:23:58:0a:1e:35:e0:02:9c:21:79:
c8:8a:19:3f:d1:47:1a:73:4e:7c:28:c6:06:a8:64:53:bc:f1:
74:eb:58:d8:50:74:f4:bc:ca:ee:1f:3c:49:5b:cb:d4:fb:4c:
95:aa:5f:d4:f4:8d:2f:f5:99:2c:34:04:9a:2d:5b:8c:81:66:
9e:1a:27:e0:59:1f:17:14:40:89:0d:83:5c:a2:ca:ad:28:28:
fd:a5:8c:41:19:5e:19:c9:0c:7d:e0:df:37:e9:07:05:ee:1a:
c0:7f:ca:1d:4f:50:2f:eb:29:66:ac:40:88:dd:82:a8:5a:84:
a0:dd:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:36:04 2025 by rpki-client