Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
File: eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json)
Hash identifier: SaELLXlrmunUyzowogQzEEhDp6vEKliC2ImJuqJpZGk=
Subject key identifier: F6:44:24:5D:C9:62:72:96:E5:DA:34:FC:29:99:1F:5F:B7:14:CA:70
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584871C0731E4AE6748A24B50200
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 21559
IP address blocks: 104.238.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:73:1e:4a:e6:74:8a:24:b5:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=a76df884-cf91-44c9-bec9-d46d163f87ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:f8:91:05:79:33:dc:17:06:3c:f4:9d:cf:
17:16:62:af:34:27:dc:31:d0:d8:55:2e:60:55:e7:
ab:ea:db:d8:52:88:56:d7:78:f0:c1:07:00:46:b7:
9e:14:45:7c:ee:46:9e:d8:de:6f:25:81:0c:e6:d5:
dc:dd:c3:68:27:8e:18:9e:ff:ca:af:90:a9:a9:21:
d0:d7:ba:77:b9:2a:4e:cd:17:38:e6:4c:3b:63:58:
d3:0e:15:3c:90:0f:4d:13:3a:62:9b:34:27:2f:e6:
fe:63:a5:60:9d:e5:50:4e:52:e9:5f:e9:40:72:83:
2d:85:f0:24:3f:cf:35:7a:7e:0c:90:25:c2:21:fe:
fa:57:a3:16:36:11:2d:b6:d2:5e:17:86:af:9a:78:
3b:e3:df:4f:d7:8f:e4:a7:cf:8b:e3:9d:55:ec:85:
b0:1e:30:95:42:90:49:35:c8:32:bc:8c:f1:c1:e3:
bb:ef:51:2b:ba:79:86:50:25:81:3e:e2:fd:de:d4:
b7:cf:a8:b8:be:7b:e2:a0:8e:36:81:f0:01:9d:36:
f9:f2:29:8c:eb:ba:8c:3f:ab:ba:0b:a7:fa:bb:80:
88:01:4d:a2:44:19:0b:ce:a2:af:70:fc:2a:e2:3a:
1d:1f:d9:03:4f:e7:af:b3:a3:21:4d:68:31:09:55:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:24:5D:C9:62:72:96:E5:DA:34:FC:29:99:1F:5F:B7:14:CA:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:2f:e6:0c:6a:bb:88:53:90:ba:d6:76:fe:1a:97:3c:56:bd:
8e:32:94:38:31:ae:57:1d:80:27:4d:d9:c3:94:f4:0e:bd:20:
c4:29:72:51:cf:b2:7c:1e:f3:f9:49:d4:10:28:3a:61:e7:ea:
80:21:ac:0f:31:98:af:57:0d:a2:cb:3b:f7:61:0f:95:fd:60:
1f:02:f2:27:04:45:96:67:16:14:07:57:b6:fd:85:16:34:88:
14:64:9b:5e:0d:91:e9:64:1d:21:28:f3:a1:fb:81:aa:83:e9:
1d:20:43:00:27:07:84:1e:ef:a3:4d:87:5b:42:2e:0e:4a:da:
de:ee:75:1b:f9:76:d4:d9:a5:2a:90:6e:83:e6:88:e0:fa:01:
5e:33:e6:7f:22:0d:b6:2f:1b:29:44:2f:bc:8c:d5:63:d4:44:
5d:9f:0b:10:ae:73:1f:15:63:6b:28:22:dc:c6:10:9a:2a:75:
b6:74:cd:40:ad:30:15:9c:7a:e2:bc:31:e9:59:b7:2d:9a:b8:
06:6d:37:2f:ff:b7:f8:26:29:aa:dd:52:13:b6:3b:7b:2e:80:
cd:80:20:0a:19:34:7c:79:4b:32:eb:12:3b:bc:58:a7:12:33:
31:28:c7:17:3b:21:52:fa:4d:f4:2d:75:0d:ac:11:71:9e:7c:
82:40:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:18 2025 by rpki-client