Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
File: a4264dfe-d219-3086-936c-b9b00996afd3.roa (raw, json)
Hash identifier: mAnXCG8IOwth/yrgndhvtVhTkH+dWGuu0io28aKuhL4=
Subject key identifier: F9:E0:41:E2:3D:AA:EA:85:73:6F:B6:96:8B:07:DA:FD:F0:1B:E7:B6
Certificate issuer: /CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
Certificate serial: 010D0C9F432858486C2B12510AA633D0B8BDB900
Authority key identifier: 9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 104.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:12:51:0a:a6:33:d0:b8:bd:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=8907e81c-2a67-4ab4-bede-9772650edbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:f5:50:15:15:1e:d7:58:8e:cf:69:c3:a1:
ed:a3:7d:15:ee:75:4c:a5:44:86:5e:c1:d0:03:7f:
96:e0:de:d7:89:52:72:3f:67:0a:7d:1d:0c:90:4d:
ec:3a:7a:f8:d7:92:af:5d:7d:0b:85:09:bd:e3:de:
fe:9e:96:95:a6:56:db:94:ec:59:bd:8a:b4:d4:cd:
7e:08:b4:b5:ef:35:c6:db:b9:9a:70:fe:42:50:2b:
c2:ca:70:8e:26:f3:91:01:93:3e:2b:d7:c2:eb:67:
76:a4:18:da:06:02:ae:ab:85:66:44:18:17:96:9b:
f6:a3:ef:f2:45:7b:84:71:33:0f:18:e5:22:11:63:
ce:54:ba:5e:87:49:a8:01:26:fb:c6:37:4e:34:29:
82:2e:02:d7:e4:c6:ab:bb:73:89:70:25:d9:07:fe:
02:21:bb:b4:c3:d8:d0:84:88:8f:9b:3c:83:44:2f:
b7:80:7b:0a:3b:b7:e6:f7:77:e6:ca:6d:19:d2:ec:
1b:2d:a2:e5:be:5a:e1:b3:e0:52:17:95:15:58:77:
8e:71:ce:b0:c4:e4:53:f2:f6:e2:82:c4:9a:0e:7e:
65:4e:01:6e:b4:1b:27:d7:29:cc:7a:c2:d9:23:df:
94:4a:d9:87:2c:0a:3b:9a:51:09:1d:38:1d:86:e6:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:41:E2:3D:AA:EA:85:73:6F:B6:96:8B:07:DA:FD:F0:1B:E7:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl
X509v3 Authority Key Identifier:
keyid:9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:25:9d:96:8f:08:6b:63:98:4b:b4:da:11:cb:be:6c:8c:64:
b7:b8:5a:bf:cd:3e:48:33:e9:f5:7c:6b:4c:77:38:8f:29:47:
01:a8:2a:8f:5c:3a:f0:91:2c:c6:85:fe:17:c3:e7:33:ef:fe:
81:1b:a2:4f:3b:a2:9c:2a:57:83:0d:6e:4d:90:cf:4b:81:e3:
7e:e4:c0:07:18:4e:56:16:1a:92:0b:6d:7e:86:fb:f8:96:68:
ca:26:1a:95:0e:f2:14:1b:e4:9a:3c:af:ed:08:d3:72:1d:83:
b7:ba:a0:95:25:dc:b4:ef:56:7d:d1:c9:a8:05:ed:e8:b8:6f:
11:c4:a1:26:26:d0:a3:85:16:f7:89:4f:aa:f3:84:3a:df:8a:
a1:54:f1:b2:19:25:73:1b:90:d2:67:64:d6:d9:4f:5e:dc:69:
8b:a3:e0:09:ad:ce:06:b3:37:38:f2:33:1d:8e:4b:76:7b:e8:
d9:ee:53:0b:11:44:b6:02:da:40:72:62:78:c7:59:55:0d:d3:
0a:fe:5d:a1:79:6a:9a:0e:4e:35:a6:c3:e7:ec:21:e5:6a:65:
39:8c:fb:73:e1:d7:ca:fa:cd:97:5a:dc:6d:0e:77:63:bf:91:
af:0b:dc:f6:a6:37:f4:7d:e5:66:95:c1:2b:c6:4b:4d:d4:ba:
01:24:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:30 2025 by rpki-client