Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31302e302f32342d3234203d3e203232303436.roa
File: 3130342e3232362e31302e302f32342d3234203d3e203232303436.roa (raw, json)
Hash identifier: EIaJ6UaFr2tTDYdKg16R2WztmNezU3ptz3VkMofzEZ0=
Subject key identifier: 0B:3A:C5:D8:75:3F:8E:8B:49:01:B8:19:61:4D:02:5C:A9:F4:0C:7A
Certificate issuer: /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial: 1B8B9B207E0ADF1638EA3D9BF3E1445D25354A53
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31302e302f32342d3234203d3e203232303436.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 22046
IP address blocks: 104.226.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8b:9b:20:7e:0a:df:16:38:ea:3d:9b:f3:e1:44:5d:25:35:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=0B3AC5D8753F8E8B4901B819614D025CA9F40C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:d5:d2:fc:48:26:18:7e:10:24:69:19:ae:
c5:dc:a9:f2:2b:ba:85:d4:65:62:ef:a1:ad:dc:e7:
eb:6f:b9:65:4c:13:6f:af:75:41:dd:68:5b:46:68:
50:fe:cf:ed:0a:a9:5f:14:b2:3c:55:9b:ab:df:9f:
cb:08:b2:84:6d:07:1b:a7:7b:3e:2b:f1:26:02:4a:
a2:36:88:64:9f:0e:4a:6c:94:88:0f:c4:20:29:d6:
5c:22:fe:f5:8a:ee:dd:b8:99:92:26:54:d3:99:58:
c5:1c:5f:c8:22:e6:47:00:60:df:12:cf:4b:ae:24:
e6:8b:f7:ad:42:b7:91:b0:66:5f:4c:80:03:32:4e:
30:8f:8e:0c:2a:af:49:0c:69:54:e1:5e:67:f9:35:
c4:42:85:78:65:0f:6c:0e:70:5e:46:4e:45:e1:d3:
bd:ea:87:63:91:db:95:6f:f0:4b:10:a8:13:b6:67:
ec:04:33:69:28:9d:83:e9:45:60:1f:65:a8:35:ff:
18:8e:d5:83:f8:89:74:ca:5e:bd:d8:2a:56:cd:27:
16:b2:ab:28:f0:23:06:74:a4:c7:4a:fd:f7:9f:77:
4d:37:8f:d2:58:97:49:b8:0a:20:ee:8f:51:39:5c:
58:4a:bf:6c:97:5c:e7:18:d7:56:55:ed:01:b7:e8:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3A:C5:D8:75:3F:8E:8B:49:01:B8:19:61:4D:02:5C:A9:F4:0C:7A
X509v3 Authority Key Identifier:
keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31302e302f32342d3234203d3e203232303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.226.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a3:27:f8:7e:0e:33:75:3f:bd:94:4b:2a:a6:69:70:f0:96:
26:90:23:26:e2:84:05:7d:ef:d0:9e:af:5e:f7:d1:62:52:48:
20:f0:6f:1c:6e:d9:c7:58:ce:c3:52:d0:22:a8:99:b0:a2:69:
e9:55:8f:6b:84:00:88:53:60:33:fb:47:68:5f:c3:3d:6f:5a:
a5:1c:92:a4:3d:75:f6:84:15:f1:78:03:0b:f9:5a:6a:4d:d2:
9b:6c:d7:9b:7d:18:f5:5a:73:80:32:45:eb:5d:07:c9:33:84:
d4:f5:1c:aa:25:16:2b:78:67:9f:1c:fb:8d:37:48:d7:d3:13:
08:95:dd:f8:1b:00:6d:9d:02:9a:49:c2:4f:b5:8e:25:bf:06:
73:cd:83:12:7c:c1:05:1f:60:fa:68:0a:43:ed:e9:5f:28:af:
09:67:95:bb:45:c9:52:1e:49:e8:1a:37:92:7d:e8:91:90:9c:
cb:df:f6:90:7c:de:ba:fe:fb:dd:bf:61:ae:80:23:a4:e4:5e:
3c:45:5d:73:24:40:56:d8:bf:6d:18:2b:08:34:f3:f7:bc:fb:
43:16:be:76:56:f9:94:06:95:ec:b8:15:3d:5e:b2:5c:f8:5b:
b4:49:6c:ec:97:65:a4:06:b2:31:3a:21:71:c9:b2:c2:3d:62:
04:52:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:27 2025 by rpki-client