Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa
File: 23814664-a1e4-3868-9364-a0796ad96515.roa (raw, json)
Hash identifier: kZtR9N4IYgUOo7lcsHhyQKjEKeZdfgdUWqnGOVXxraY=
Subject key identifier: 8F:A0:47:AC:5A:3F:0B:45:EA:C6:45:3A:4C:6B:07:C2:1A:82:E6:9A
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584858A0533D988E8DF27259C4C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 46261
IP address blocks: 104.251.80.0/24 maxlen: 24
104.251.85.0/24 maxlen: 24
104.251.89.0/24 maxlen: 24
104.251.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:53:3d:98:8e:8d:f2:72:59:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=6a79ed40-4053-4f5c-a671-694570e9e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:5a:be:8f:bc:04:45:55:58:24:12:0f:cf:
01:08:59:be:fd:59:7e:14:f9:30:21:32:48:7f:0e:
eb:be:1b:27:42:01:01:e6:5b:22:75:3e:a2:0b:46:
9c:25:e2:aa:b4:64:ca:2c:f5:1d:0a:b2:d6:80:36:
02:62:8b:67:97:02:57:0b:83:78:64:77:5a:5a:be:
6f:6a:ed:b8:d6:d4:ba:03:d3:c1:b7:6c:00:91:33:
6e:40:f5:4b:32:f7:d9:f4:67:14:01:59:8e:da:81:
0a:c3:ea:65:b0:ad:c3:70:c2:89:7e:84:7b:9f:0d:
92:78:e6:8a:4a:ea:30:5d:18:26:1e:ab:85:ab:7a:
d6:71:71:7d:da:96:f2:66:e1:50:f2:84:d4:c5:e4:
38:a0:35:0c:e2:75:71:be:23:bd:eb:6b:e3:fd:fa:
0b:2b:66:0c:e6:d7:2d:93:0f:d2:60:8c:fd:64:c5:
9c:ab:86:c7:b3:8f:1f:1d:a9:d2:f0:4d:dc:b8:87:
cc:b4:19:8a:20:87:ab:c0:72:f8:c0:07:88:1c:d5:
bb:b4:d4:e4:aa:5d:79:f2:28:af:c8:e9:54:77:b5:
5b:ae:a1:1e:63:01:52:16:1a:6c:4d:86:62:7a:d8:
c3:14:00:1e:11:bc:7e:91:a8:1c:08:7c:80:8f:bc:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:47:AC:5A:3F:0B:45:EA:C6:45:3A:4C:6B:07:C2:1A:82:E6:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/23814664-a1e4-3868-9364-a0796ad96515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.80.0/24
104.251.85.0/24
104.251.89.0/24
104.251.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:3b:3a:a1:f6:ff:44:d3:e5:c6:4b:7f:e2:56:05:27:ab:fd:
ad:57:69:1b:8d:05:d1:99:af:d4:bc:85:4f:e5:7c:6e:e1:b9:
93:0c:e5:70:09:22:c9:fa:35:32:d5:d2:be:1c:ba:70:a8:b3:
81:1f:4e:e8:dd:bb:bd:bd:9b:7f:a9:96:7d:a3:23:15:6f:7d:
de:e6:73:12:3a:30:90:90:4f:43:1a:71:0b:a8:c2:7a:ae:31:
a8:4b:15:09:fc:bf:c3:bb:57:bc:8a:77:c5:5b:e6:c4:88:85:
e5:57:16:26:fe:a7:e6:10:c4:0a:ea:11:26:8d:f0:1b:51:3c:
52:57:7b:a1:a3:48:1d:f1:9b:ac:c6:82:8c:84:68:83:76:dc:
00:9b:9d:26:73:f1:99:ed:89:1b:de:77:10:1b:a9:81:92:36:
71:6a:d2:5e:74:41:da:0e:27:5e:0f:bb:4b:03:61:5c:cf:3c:
48:6d:18:54:e4:fb:cb:ec:bc:18:7f:99:af:f9:1e:f6:f5:53:
11:41:7b:f9:be:72:fd:13:96:ae:a0:a2:b6:fc:94:f4:67:7b:
ee:bb:d3:40:9a:75:b4:f7:8a:67:1c:11:95:ed:c6:f3:15:bf:
35:28:ff:8a:8a:04:79:f8:94:53:fa:85:51:fa:da:35:05:85:
54:8d:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:48:11 2025 by rpki-client