Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
File: 6e71f7f6-1874-3623-9d1c-fe8383f37047.roa (raw, json)
Hash identifier: E6fyeh6UNSFlHNZu4F9e9ry1URJbl3VQ4hLos5Z/JFc=
Subject key identifier: 94:4E:A1:52:AD:81:64:C8:04:37:D3:2D:B8:C4:1B:F8:4A:77:D6:6C
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490B4C1D84834BAE9E54C74AA0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 19437
IP address blocks: 104.254.236.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:1d:84:83:4b:ae:9e:54:c7:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=98f93586-6087-4e25-972e-b8d363e33753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:db:34:bd:7c:cf:12:3b:af:0d:f2:1c:4f:
d6:0d:20:62:7b:a7:7b:66:1d:9e:f6:bf:e6:c5:6d:
bc:90:3c:c4:4d:49:3e:fd:d1:09:51:9e:02:91:3b:
ab:bb:6e:a6:5b:b9:1a:96:b5:b4:9a:fc:6a:64:6d:
f9:3e:7c:08:e8:fd:94:c5:5a:fd:a8:56:e1:9e:22:
40:ad:d6:96:3c:09:0d:7a:2b:89:2b:21:0e:28:61:
94:bd:11:31:74:b3:20:d0:63:87:7f:d9:37:5d:c0:
2f:ea:bf:a4:ed:d2:d8:85:ff:8b:60:59:4e:11:ba:
b0:13:27:72:c5:48:e1:87:03:ab:78:27:14:72:94:
bf:06:37:6c:e1:d5:52:95:3c:15:bf:a9:b9:6a:13:
09:01:1e:fc:ec:be:3e:e1:b0:1a:4a:6f:a6:52:d5:
69:a9:28:1d:3a:3b:68:fc:82:c1:b9:0c:b5:2c:87:
ea:14:dd:97:5c:d3:d7:0b:8e:df:f9:4f:b5:21:1c:
0d:0d:27:28:5d:3b:1e:1e:e3:ba:e5:60:b3:37:96:
b4:b4:79:16:e5:55:27:fb:b6:c3:25:10:da:55:a8:
1f:fb:df:33:4e:73:d7:a6:06:bb:74:af:4b:38:01:
59:ae:e8:85:48:4c:95:bf:0a:05:73:fc:9b:d8:02:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:A1:52:AD:81:64:C8:04:37:D3:2D:B8:C4:1B:F8:4A:77:D6:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:3c:8c:d8:22:d1:fd:d9:82:d2:e2:3c:da:e0:6d:54:5b:37:
76:8a:14:60:ac:29:67:80:5c:54:41:b2:ce:09:ee:fb:78:19:
87:d2:3c:7f:e2:27:7b:a9:9d:b4:0a:7a:0a:ee:28:f1:75:4b:
0f:0b:37:b6:57:a5:a6:9b:9b:5b:7e:2c:74:a0:12:7b:6e:c8:
a9:b5:3c:18:7d:e7:37:35:b1:14:8d:7f:47:dc:54:4f:e0:f1:
93:43:93:0e:aa:cf:09:49:5c:21:24:11:50:9b:07:6c:ca:3c:
f9:01:94:ee:f5:94:53:92:95:91:61:bb:09:bd:4d:ee:6c:37:
bd:91:c0:9b:ae:8d:da:25:df:83:48:93:66:9d:e0:38:3b:dd:
73:5f:0d:56:dc:b9:90:f2:87:0f:81:57:8b:6a:b6:54:e6:f1:
0c:b0:2a:fd:fc:81:1c:ce:7e:05:55:c5:70:91:b4:02:a2:4f:
94:13:3b:f1:11:13:c1:c0:d1:54:8b:21:50:a2:2a:e0:c1:28:
98:d0:14:c5:5c:69:83:aa:bc:f1:0c:9c:4e:a6:7e:37:2b:eb:
cd:5a:ad:af:d5:51:cb:2b:b6:49:0d:ea:e7:54:6b:a9:ee:6d:
fa:02:66:7c:a4:2c:92:28:6c:21:82:fd:c2:77:1e:ae:4d:c3:
03:ac:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:16 2025 by rpki-client