Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
File: 2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa (raw, json)
Hash identifier: svomNmIZEt+YCaui8Ss7Up9vqFlIPNR7StwRHkqpPe0=
Subject key identifier: E4:2A:28:0A:67:54:08:77:02:D7:2D:78:2E:C8:3F:65:F3:CE:9D:2F
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F432858489AA8DA0618F9954ECA135200
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
Signing time: Mon 20 Jan 2025 05:41:35 +0000
ROA not before: Mon 20 Jan 2025 05:41:35 +0000
ROA not after: Sun 20 Apr 2025 04:41:35 +0000
asID: 215081
IP address blocks: 66.118.236.0/24 maxlen: 24
66.118.238.0/24 maxlen: 24
104.249.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:a8:da:06:18:f9:95:4e:ca:13:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Jan 20 05:41:35 2025 GMT
Not After : Apr 20 04:41:35 2025 GMT
Subject: CN=e27e652e-544e-4929-95a7-56ff51960d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:b6:9a:1e:cf:31:24:7f:8e:2d:49:e8:82:
c3:3a:e1:43:c2:76:34:51:8e:45:4f:63:4e:80:ce:
4b:2f:8a:c2:59:76:39:80:e5:d4:ea:6c:09:a1:c6:
d0:20:d1:d0:12:e4:2d:20:a6:16:c8:9a:b5:62:ff:
d9:2c:b3:a3:21:1e:d7:7a:17:3d:aa:76:bb:32:00:
c2:02:11:fb:fc:aa:30:63:ec:a3:7c:33:18:02:33:
0d:61:19:9e:e2:dd:6f:a6:4c:09:31:15:55:32:e7:
64:bd:75:ad:4c:bf:91:95:62:05:a3:3b:ec:6d:c5:
4e:d2:60:4c:58:01:05:12:e7:90:80:3a:12:0d:3e:
ba:34:85:4a:19:47:18:28:f6:60:72:28:0e:ec:fa:
c8:04:f0:2e:e4:94:99:cb:ee:bc:48:e6:99:9d:7e:
d1:89:5e:6f:3f:56:c6:ad:ea:ab:44:3c:4d:62:df:
48:a6:bc:24:28:f8:27:99:36:75:ce:51:c2:d6:3e:
2c:83:dc:29:7b:9d:1b:9e:72:ab:5f:22:94:41:31:
c7:53:6d:3f:4d:40:b1:9e:0d:8c:d7:c9:a1:f0:dc:
0d:d6:ac:0a:b9:fd:6f:6c:93:c1:d0:29:00:c1:4e:
b2:5d:2a:4f:58:9f:6f:e1:72:da:3a:a1:63:01:37:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2A:28:0A:67:54:08:77:02:D7:2D:78:2E:C8:3F:65:F3:CE:9D:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.236.0/24
66.118.238.0/24
104.249.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:f6:c9:b4:06:fa:23:c7:37:35:76:71:7f:95:c2:4f:db:b3:
db:a4:03:4c:0a:6f:5a:85:30:df:7b:48:6a:ac:98:06:14:4d:
af:34:3f:85:18:fd:b8:eb:a2:b9:36:50:2a:9a:5e:ea:e3:0f:
1f:36:6c:18:ae:bc:2b:7d:92:4e:41:c5:e2:76:34:d9:16:bc:
d4:39:9f:a6:51:7f:67:9a:f9:25:da:2d:5a:51:88:a9:ef:9f:
cc:26:dc:38:56:7f:37:25:6d:8d:fd:c1:bc:b9:ce:47:a0:94:
0e:14:cf:41:be:5a:2a:f2:45:17:97:b7:8b:d6:00:00:2a:10:
d7:45:60:b7:49:92:1d:60:b4:29:41:3c:72:31:b1:15:db:6a:
65:cb:a6:85:65:28:e6:8e:dc:d6:19:1e:2d:ef:49:19:35:84:
c4:50:be:9c:62:da:9c:6c:83:7d:b0:15:8f:64:9c:e6:f0:a8:
26:35:ae:de:d9:54:7d:52:2e:1f:23:49:03:67:59:4f:0b:2e:
ff:2e:9b:25:53:d1:6d:ce:0b:ba:33:59:a8:af:8c:56:73:ba:
58:5c:be:b9:c9:e7:28:9c:d3:80:b2:77:fd:63:74:70:8f:74:
f6:81:15:f1:29:17:6d:79:7d:d3:82:00:32:ad:78:13:6a:d7:
65:ee:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:43 2025 by rpki-client