Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa
File: 237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa (raw, json)
Hash identifier: u6Jnpg4RYwa+1Vm9nfUwQY7/VMLnBm3M8OtoGlHTh38=
Subject key identifier: 5F:23:49:0A:41:76:02:C8:78:22:D4:D5:C8:95:9D:00:B5:27:AD:00
Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial: 010D0C9F43285848143A775E73955E95960CA380
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 25649
IP address blocks: 104.153.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:77:5e:73:95:5e:95:96:0c:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f5b81491-b80a-4852-a58d-38c5c07ed7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:ea:51:41:e6:9d:f3:d8:b7:fa:0a:63:d4:
02:0b:fd:0b:eb:8c:05:0c:2d:db:ff:52:fe:c4:e3:
44:a2:ab:98:95:23:0e:3b:e5:fe:19:9e:aa:2e:d8:
88:00:ce:3d:0f:e3:db:d2:f4:e7:e1:23:0c:8a:9a:
7f:77:ee:0b:7b:95:0e:dd:37:02:29:dc:e8:1c:9a:
6f:7c:58:e0:5b:b2:a3:78:54:6c:14:fb:03:f1:92:
dc:0f:18:34:36:12:d4:05:14:3b:9f:88:7f:75:30:
d0:d8:a7:5e:ce:d5:d7:e3:9d:e0:2c:2e:f1:69:44:
d3:4c:52:46:52:c8:23:86:4a:eb:48:5f:c6:5c:88:
15:48:f7:46:60:ef:e9:8b:ad:92:a5:aa:c5:53:30:
8f:1b:51:39:8b:d7:23:79:28:9f:df:bb:ce:fd:1e:
52:03:42:d3:23:9a:27:4d:83:43:17:cc:16:b1:fb:
a6:c7:be:82:83:6c:c6:44:3b:3a:22:af:fb:ba:84:
12:f4:a6:cc:16:54:47:22:d3:d2:ae:b5:e0:ec:6b:
8e:cb:27:7b:ed:e7:bd:19:7c:94:e8:2b:76:77:9c:
49:f1:c9:7f:d9:f1:6f:5a:02:c5:bd:7d:2a:4c:98:
67:f9:49:62:fe:ea:45:de:25:02:96:23:ce:69:f2:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:49:0A:41:76:02:C8:78:22:D4:D5:C8:95:9D:00:B5:27:AD:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/237a50c0-d85e-3ba2-8503-4ea809e4a78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
X509v3 Authority Key Identifier:
keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:2c:ab:13:5c:2a:ab:79:05:45:4f:c9:10:03:19:fd:99:f9:
c0:c6:e9:76:5c:5a:6e:95:ca:ea:85:c2:a1:99:85:cf:0a:02:
69:57:3e:fe:66:ec:48:62:96:4d:57:71:e6:b1:5b:03:cd:6e:
8a:96:c2:32:fd:db:da:cd:78:84:3e:f2:86:83:c8:fe:46:04:
8d:b4:06:9b:67:12:e3:2b:c0:cd:eb:81:46:32:74:12:e5:61:
06:8d:5a:03:0d:0e:83:36:26:60:f1:1c:0d:17:da:01:19:c2:
d1:8f:c3:bc:56:e6:19:4d:92:aa:a4:57:ea:23:6f:64:78:d4:
10:d0:e9:c2:8d:70:d5:5d:da:05:24:eb:6a:54:4e:ba:a8:72:
44:e6:61:c7:d6:b1:48:ee:c1:e2:91:c9:5c:46:13:f3:22:61:
de:69:67:c7:c1:16:49:ba:19:0d:13:2c:e9:be:12:14:be:54:
6e:78:10:47:51:45:60:4b:7e:b6:c6:b2:23:04:1d:4e:ed:8f:
5e:ee:6b:31:76:ac:de:2e:a4:e8:d2:d6:f6:88:b0:30:8d:59:
88:56:f4:05:50:8f:85:b9:c8:ef:06:06:df:94:c1:fa:11:21:
c0:a7:c6:7b:da:4d:c9:2b:c3:6d:32:58:0c:55:63:19:5d:f1:
2f:7f:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:36:21 2025 by rpki-client