Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa
File: d0a39b3b-d235-3903-8484-31fed3ad5af7.roa (raw, json)
Hash identifier: 38UgGJGE3PmLumNxT8MjdG95MlLNLxVvQXSN3cHYbg4=
Subject key identifier: 0A:32:6D:8A:A1:C6:3C:78:F1:59:FA:C7:02:EC:81:7B:34:4E:11:7B
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F4328584839EAC5B625C6FBD92B441520
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 400544
IP address blocks: 104.156.129.0/24 maxlen: 24
104.156.130.0/24 maxlen: 24
104.156.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c5:b6:25:c6:fb:d9:2b:44:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=4805a196-b18e-48d9-ac65-1a85ff58883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:13:47:08:3f:5a:31:1f:0b:56:0b:09:91:
ef:e3:68:55:b4:77:bc:b6:96:8a:e4:99:21:3f:fc:
cf:97:b1:6b:5a:0d:09:76:30:cb:e6:95:13:72:72:
de:c5:39:b1:dc:43:ea:da:1e:03:ab:45:07:20:67:
a5:cd:11:6c:c7:61:31:b1:15:bd:7f:f8:62:26:de:
95:a4:da:0d:63:d1:b8:e3:8f:c5:4d:ef:20:a7:92:
86:52:ee:74:b8:3d:4e:7c:13:2b:43:a4:6e:c2:3b:
db:e6:6e:98:60:c0:2d:c6:8e:71:7e:61:3f:5f:20:
cc:d3:dc:d1:ba:d2:b1:6d:93:36:5d:2d:2e:76:b2:
5f:de:85:7e:5c:f0:15:76:d6:77:44:cc:7f:69:14:
07:08:42:e1:aa:f9:2d:8a:5a:99:0d:b9:7f:6b:16:
a7:6d:bc:8e:a1:6c:cd:05:ca:94:a0:68:02:fb:44:
c3:de:e0:11:25:b2:68:70:ff:d1:24:de:37:2b:12:
90:fe:a2:59:13:4e:aa:a1:df:47:49:b8:e7:15:2d:
01:97:69:40:12:b5:52:01:50:27:53:65:14:1c:40:
fb:0b:fe:2f:68:5a:10:e5:f2:61:3f:ad:ed:b1:f3:
62:50:c3:58:a1:5e:68:21:db:d0:4e:21:db:c4:38:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:6D:8A:A1:C6:3C:78:F1:59:FA:C7:02:EC:81:7B:34:4E:11:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.129.0-104.156.131.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:77:75:bc:2f:4d:ea:84:15:a2:3c:aa:61:ed:8b:0e:5b:6e:
1a:7b:24:47:1e:e8:73:b9:2c:84:c8:49:9c:c4:13:8d:b7:d4:
37:87:ab:65:7c:ae:12:64:03:f5:3c:47:59:62:26:0a:1a:1d:
9e:ea:c2:95:d8:bc:f5:85:95:7e:ce:c1:7c:a1:75:3a:c6:7c:
df:f3:6e:82:46:7d:98:35:f5:1f:c1:27:3f:17:f9:2c:4b:a2:
1d:91:47:da:1f:35:5d:64:c9:d2:e0:1c:e4:ff:94:f0:15:c3:
9e:03:86:b5:fd:1d:1a:d8:2e:64:cb:14:0c:9b:75:a9:da:a1:
e0:51:37:fd:80:ce:10:43:ff:3e:69:17:eb:15:c2:84:51:60:
3c:32:ed:49:dd:c5:1b:58:af:9a:7e:05:21:01:97:cd:7f:eb:
ed:b1:a4:24:d3:89:de:b3:62:00:08:42:2d:17:93:ab:92:78:
c9:8d:c4:89:bb:1b:dd:07:ab:ee:5b:55:23:29:c4:c4:40:d3:
e9:33:39:07:2c:10:b8:45:ed:2d:ab:da:e8:15:6f:5f:8a:81:
ad:45:6a:2a:f3:bf:19:dc:7f:8d:e2:14:0e:48:20:08:6d:47:
9b:42:8f:fe:97:aa:80:bd:fd:da:98:e5:78:9c:db:2f:3b:56:
12:5f:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:15 2025 by rpki-client