Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/83071f39-2540-343d-b0a6-069a0599dbe7.roa
File: 83071f39-2540-343d-b0a6-069a0599dbe7.roa (raw, json)
Hash identifier: CAF2xGiF12g0ChPaQ5T9ND29RvgZxd1zzryZfnEEkoQ=
Subject key identifier: 1B:A4:2B:A7:18:9A:CF:5D:0F:39:9E:42:18:BE:FA:89:C8:68:5F:73
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F4328584898D61050DB356FF0C60783E0
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/83071f39-2540-343d-b0a6-069a0599dbe7.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 104.218.200.0/24 maxlen: 24
104.218.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:10:50:db:35:6f:f0:c6:07:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=9eb2711a-2ffe-4892-a737-2f4fccf12ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:ac:e7:28:62:00:ae:17:5a:54:3a:d5:e0:
ab:85:b6:9f:7d:e8:55:5a:f3:e9:7e:7a:8c:60:9b:
5a:e4:60:e3:d4:52:ba:0b:09:91:65:a4:4d:e6:3c:
c3:b6:71:f9:31:fb:53:c5:b9:48:90:5b:47:ad:15:
d8:c5:1a:a8:4a:0f:1c:a4:73:44:bf:bf:99:f7:82:
f7:0e:39:2b:a5:8b:72:70:ac:36:c4:27:9d:30:11:
45:e7:55:b8:f2:92:5b:28:49:d7:2f:53:14:97:3b:
a4:29:f1:2a:84:29:e5:2a:96:b8:ad:70:43:27:30:
f0:56:f9:5e:0d:95:89:ee:87:4a:bb:0f:bf:90:df:
46:87:b4:be:b3:27:da:ff:e0:1e:4d:99:7b:65:27:
78:01:53:9a:5f:0d:b0:ec:41:86:4a:07:99:ab:be:
db:33:c3:6f:58:c7:79:60:b0:96:b2:b5:81:e2:ba:
5e:0d:90:3d:88:aa:7a:0c:7d:64:8f:70:89:75:e5:
1c:9a:28:45:ec:fd:9a:5a:7a:b3:cc:07:29:e7:f7:
fc:94:62:73:b2:97:6a:e3:c3:e3:7b:41:65:5b:b1:
4f:12:d4:f0:6b:e2:b7:78:53:9f:9f:93:bc:47:4c:
ab:ad:45:c6:46:53:66:91:4d:ed:bc:a5:78:c8:a7:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A4:2B:A7:18:9A:CF:5D:0F:39:9E:42:18:BE:FA:89:C8:68:5F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/83071f39-2540-343d-b0a6-069a0599dbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.200.0/24
104.218.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a1:80:1c:0d:e7:d4:44:04:13:df:0f:23:71:01:61:4f:6e:
09:df:85:ac:23:28:c7:4d:07:4c:de:fd:f8:7a:0b:82:8a:20:
4b:54:2f:89:a7:7e:38:a7:91:6a:b1:06:fb:41:36:b6:e2:99:
3e:02:e4:f4:6e:65:a9:13:92:a0:2a:16:85:2a:da:89:54:ff:
68:ec:8f:c9:75:56:a5:1c:2e:00:f4:ea:2e:1d:40:7d:49:8f:
bd:84:65:cc:b7:a8:bd:3f:5a:db:a7:cb:90:bc:c2:d6:38:cf:
32:40:99:37:d0:7e:03:c6:d0:d7:36:31:ae:61:b8:10:f6:f3:
b0:8c:ca:e1:2c:3a:6b:c3:a0:01:1c:1e:a7:37:06:3a:c0:15:
bf:20:56:e2:3e:9e:b8:2f:cf:ac:0d:7e:f5:a6:a4:d6:c0:a0:
95:24:f0:80:55:33:37:74:1b:6e:ec:80:00:c8:31:76:f1:7c:
69:b9:49:92:5f:5b:cf:05:de:01:63:2d:99:5f:51:96:3c:db:
01:3c:05:60:e9:01:d7:d7:1a:8e:77:3b:00:e7:bc:31:ea:c3:
46:a3:53:9c:3a:18:6a:f5:cf:71:c3:67:cf:19:36:83:23:cb:
d8:c7:f3:4b:81:79:86:92:bc:07:49:0f:86:12:e0:85:0c:11:
c3:8c:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:51 2025 by rpki-client