Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
File: 18fb001a-970c-3cab-8188-d1568ca51609.roa (raw, json)
Hash identifier: N9cAa8jRFQ5P5LZwruODxU0sKFJLF1qqb7kUVFZ9+js=
Subject key identifier: 90:83:B6:75:59:9A:0F:CD:C3:B3:66:A7:BD:4B:77:8B:72:85:50:8F
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584851A57396301D3FAA4FD21B80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 18978
IP address blocks: 104.218.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:73:96:30:1d:3f:aa:4f:d2:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=1818063e-e4de-4603-a850-4c892d7f6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:00:80:0b:5b:2c:bf:de:89:27:1e:f2:75:
a1:01:b1:31:69:ed:90:ed:97:d9:9b:90:4d:de:99:
d9:9c:92:8d:34:36:9a:42:2a:9b:60:6d:da:03:6b:
b3:2a:02:2a:61:1c:21:e9:56:6f:6b:d1:3d:41:ff:
37:3b:a9:8b:02:bd:8d:6e:d0:af:fb:6e:6d:c9:21:
85:39:bf:68:15:d6:c1:c3:5c:4d:b8:21:81:f7:09:
2f:4b:b9:ad:80:85:82:f6:8c:a7:12:9d:a7:c3:9b:
25:93:80:cc:21:6b:b8:1f:c8:78:7c:d5:bc:64:86:
e8:e1:46:c1:a9:5a:74:31:24:40:32:43:da:98:1f:
77:29:95:ec:7c:ca:df:06:af:05:29:ca:92:12:e8:
bb:96:5b:79:cc:c9:e3:26:c7:e6:c0:8c:61:b8:e4:
05:72:25:74:3b:af:8b:18:3a:05:b1:f1:26:4e:6a:
69:11:70:3a:0a:06:c0:c5:2b:df:5c:e1:68:08:38:
57:64:7e:b7:94:00:b0:d8:c9:3c:1e:89:1a:a7:77:
50:0a:08:65:c7:04:3e:b8:9e:21:e2:93:4f:3e:bd:
98:66:14:78:d8:7f:f3:ff:1c:d8:f2:e8:96:a6:59:
9a:f3:1a:94:05:5b:8f:77:82:fc:0c:da:b6:3b:b4:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:B6:75:59:9A:0F:CD:C3:B3:66:A7:BD:4B:77:8B:72:85:50:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f8:6b:1c:fd:da:f6:32:4d:81:fc:49:7c:ac:d6:f6:31:23:
22:c8:1d:3d:de:35:18:c7:b1:63:cc:7b:e8:fb:5a:e1:01:fd:
5e:3c:01:73:bf:0f:06:c8:30:72:84:69:9e:86:7d:e4:aa:25:
b9:82:5d:1e:98:f0:63:7b:76:a8:a7:da:14:f5:b5:4e:10:7c:
07:22:9a:c9:93:db:1f:40:db:c3:1f:5b:a9:ed:39:e6:92:a1:
21:7a:26:05:ec:97:00:ba:38:d0:55:dc:c8:86:78:89:0a:d3:
21:d4:cd:f1:b0:c3:1e:de:10:c1:87:54:b8:51:46:2b:7d:28:
e1:6e:31:e6:62:3e:8c:52:91:d0:5a:70:8c:4a:df:fe:28:d9:
e5:bf:05:e3:4b:7a:60:60:00:98:3f:85:c3:8b:a9:99:89:30:
6f:c1:10:7a:05:8d:f5:2a:ee:0b:16:9e:9e:61:cd:34:e1:44:
26:f0:61:4a:e8:46:21:1d:a3:16:58:56:24:e2:7e:63:51:4f:
c0:f0:98:8d:4c:c7:b0:c7:47:b7:98:61:3f:3b:de:a0:c2:87:
8d:fb:b4:83:09:4c:c8:00:1e:3d:57:2d:66:21:85:50:b2:6d:
45:8c:7c:70:d6:b8:f5:68:bb:47:42:2d:68:c3:2e:73:d6:df:
91:d6:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:51 2025 by rpki-client