Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
File: 7e78a36f-6ca2-389b-8ebf-ef4880929330.roa (raw, json)
Hash identifier: QnPULqRmOEAR+TeX0GzydRCo5E7Aaplai/nNQDI7tPA=
Subject key identifier: DE:9B:C4:33:FC:9B:C9:EE:A8:6B:87:E9:18:6B:ED:2D:5B:45:76:DD
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F4328584851A57A8027FBF55FF872E700
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 393336
IP address blocks: 104.193.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7a:80:27:fb:f5:5f:f8:72:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=0a23274e-1522-4eab-8f63-7f32792a6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:dc:29:4c:44:a8:95:d1:e5:fa:c3:b0:0f:
81:1c:66:26:7f:91:0c:ee:78:d8:e3:31:c2:51:1c:
e3:a3:8a:f2:a4:2e:39:59:68:9a:18:b5:18:1c:f9:
2c:2b:63:0b:72:de:69:2a:85:01:ba:06:6d:3b:45:
3b:aa:2b:06:ab:8c:26:d5:b8:fe:e6:d4:fd:90:e7:
82:26:56:31:78:da:c6:75:c3:14:5b:53:99:1a:e6:
c9:87:57:a9:d1:01:0f:cc:ac:83:37:e4:7d:4b:f4:
39:fe:00:b3:d1:4d:32:d9:70:32:ca:6d:f9:d8:27:
10:9e:dd:33:77:88:8f:25:02:dc:a7:27:07:bb:17:
15:e9:c8:6e:53:8a:1e:12:e7:ce:62:01:72:b9:be:
32:d0:89:6f:c5:25:7f:52:8e:20:73:27:9d:2a:5c:
f0:ec:57:05:aa:1a:ad:54:46:78:30:1a:8a:dc:1d:
72:44:5d:b4:c7:e2:27:ba:00:c4:ba:61:03:f6:cf:
c3:51:23:25:53:16:1f:86:ee:e5:a2:64:e4:3c:5c:
ae:6f:c7:c5:40:81:2b:9d:37:b9:f0:fb:fd:1c:e9:
5c:e7:b6:9d:c0:24:28:de:fe:54:fe:c7:ce:f7:75:
8e:2c:61:7a:6d:b4:16:f9:ce:82:7f:4c:80:2c:80:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:C4:33:FC:9B:C9:EE:A8:6B:87:E9:18:6B:ED:2D:5B:45:76:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:69:70:a6:2e:36:15:ca:07:dc:c3:4e:10:17:b6:6a:98:66:
7a:4b:ef:c8:5a:03:29:de:fa:62:c6:a8:30:95:b7:66:a6:ff:
53:d3:a9:13:91:cc:3f:bb:de:70:b1:35:14:89:3d:2c:45:02:
4d:21:4a:48:a1:9f:e3:95:6a:ce:de:7d:4e:0f:69:e2:01:e5:
8e:fe:a0:6e:d2:17:41:50:d2:f8:96:dc:73:6c:f2:13:c3:ee:
bd:63:20:ec:d1:88:c4:9f:31:c7:50:00:ae:13:87:f6:96:bb:
00:08:32:76:45:1b:80:e8:07:5e:25:17:ba:e0:c2:1f:90:e2:
74:0b:cd:ad:01:a6:2c:5d:d3:79:b2:cb:7c:37:e8:d3:7c:6b:
9a:19:a3:d1:b2:5f:d6:f4:2d:60:2b:7a:dd:1f:04:3a:04:29:
13:39:d0:b7:61:32:d0:22:f1:e1:35:02:1d:66:f7:42:06:31:
ed:85:3b:76:4b:8b:02:84:60:f5:9b:21:04:f5:fe:11:80:bd:
d1:1b:c7:35:de:93:24:9e:02:81:5d:f1:10:fc:3d:47:3d:46:
d3:1f:54:93:e3:3a:f1:33:46:d5:e8:e3:5d:75:b8:b5:d7:8b:
f0:09:cd:b8:85:2e:95:46:3f:92:d5:f1:7b:1b:ba:78:3d:2a:
3d:76:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:38 2025 by rpki-client