Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa
File: 3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa (raw, json)
Hash identifier: goKypBtAa7neLZRXg4lZT/q7Xz677rBMkwThIcfR9Uo=
Subject key identifier: 8D:03:A9:AD:B6:A3:94:CA:E1:22:5D:B0:9D:EB:03:FB:87:BD:61:7D
Certificate issuer: /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial: 6C7E9F1EE91D38602BD882CAEA951EA73BFED7A6
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 395749
IP address blocks: 104.226.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7e:9f:1e:e9:1d:38:60:2b:d8:82:ca:ea:95:1e:a7:3b:fe:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=8D03A9ADB6A394CAE1225DB09DEB03FB87BD617D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:dd:6a:63:ba:15:67:50:00:60:5f:a5:05:
77:b9:56:3b:c4:c8:26:e6:9d:3e:b0:32:32:eb:7f:
8c:3b:cc:f4:ac:4b:9b:e9:b8:a3:6b:df:80:bb:f9:
6c:ae:38:a5:c4:09:c0:f8:09:58:60:f4:f5:14:77:
76:bb:e4:2d:24:6e:08:ee:9b:ad:53:88:df:5f:a3:
a8:40:b3:40:1e:67:8c:23:4b:17:03:b5:51:92:73:
c8:64:a5:df:8c:81:0e:72:ad:68:1d:6f:27:de:be:
0e:9c:7f:4d:f6:3b:a5:19:7c:77:32:08:a2:76:f1:
ce:c1:4d:cb:85:37:da:9e:ca:eb:41:17:95:ad:96:
db:4e:b0:b0:07:db:50:87:60:71:d5:ca:e7:94:a4:
db:39:0b:b1:57:ea:48:b2:31:ff:66:88:0f:88:a9:
2e:9c:f0:bc:e7:24:43:cd:dd:85:da:aa:ad:73:d2:
8a:f1:14:93:79:90:7d:11:e5:4d:2e:8e:18:94:3b:
f2:c9:fa:da:3b:06:1a:f0:35:6e:36:04:48:de:0c:
33:cd:d4:19:4d:c3:bd:d5:fd:e9:fc:14:8d:8b:9a:
15:66:21:70:16:35:a5:ec:f0:a7:8b:67:67:0a:fa:
04:49:27:4e:ac:7f:5f:6c:d9:d5:c5:88:b5:02:dc:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:A9:AD:B6:A3:94:CA:E1:22:5D:B0:9D:EB:03:FB:87:BD:61:7D
X509v3 Authority Key Identifier:
keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.226.18.0/24
Signature Algorithm: sha256WithRSAEncryption
29:30:97:aa:98:c8:4e:ab:f4:00:3a:ff:11:e3:7a:6a:00:2e:
54:79:f6:8e:ab:d2:44:f6:4c:93:bf:08:85:2c:ee:32:9b:f0:
1f:c0:a7:be:17:c4:06:ea:c6:ca:9c:f8:2a:4c:af:37:04:d0:
e8:5a:96:66:64:34:8e:cd:46:4b:10:fc:a6:99:27:d3:9b:c2:
30:98:fa:45:f0:7d:a2:b2:9f:7b:38:1d:fe:b7:a9:ee:7c:2f:
ba:a6:44:3f:ba:f0:83:d4:61:3f:3f:1e:4b:57:bc:6e:e1:9c:
46:39:69:ae:cd:62:3e:7a:be:ab:e7:7d:6d:ae:61:bc:be:88:
60:69:af:58:c1:dd:4f:66:4f:5a:b1:c1:24:95:af:3f:f7:ac:
a4:18:67:40:e7:b4:93:97:82:15:e7:f9:ea:8b:58:c7:35:74:
6f:19:49:bb:df:d6:0e:91:b1:36:47:88:18:48:1d:93:2e:16:
ef:ee:78:63:b0:b5:b6:39:09:77:c8:f7:d1:e5:a7:ff:31:59:
fa:e2:c9:22:77:39:c1:8d:4f:56:b0:53:16:dd:12:9a:57:89:
3e:6f:b9:ab:6f:75:2f:28:f5:d4:84:3a:d7:e4:b3:f1:71:c0:
f1:4e:69:ba:5a:24:9c:22:e8:8a:86:1d:53:8f:b7:26:dc:2d:
df:46:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:08 2025 by rpki-client