Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa
File: 8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa (raw, json)
Hash identifier: Hw/CVEWClqDdZAc9e6Sm7Pyo3Aw9XqLiU5gnPluNEl4=
Subject key identifier: 24:A0:9F:47:8E:CA:E1:DB:E9:4B:3D:46:61:37:71:7F:97:98:83:52
Certificate issuer: /CN=968407b3-e2a9-4ec2-9f39-e02d0486ee63
Certificate serial: 010D0C9F4328583D9E1AC6320F59586F87B72680
Authority key identifier: 67:F0:FD:54:48:16:3E:36:E3:34:5B:3A:5B:1E:03:11:7F:EB:E6:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Mon 22 Jul 2024 04:00:00 +0000
asID: 136250
IP address blocks: 104.166.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9e:1a:c6:32:0f:59:58:6f:87:b7:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968407b3-e2a9-4ec2-9f39-e02d0486ee63
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Jul 22 04:00:00 2024 GMT
Subject: CN=e31249d3-11df-40d0-a2e3-386d548bde28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:05:b6:b1:1d:eb:64:c1:89:23:60:de:40:
cc:51:e7:c5:6b:42:1f:7f:2d:07:ff:b1:40:0e:92:
44:4f:a4:06:27:52:19:cd:94:0e:80:a2:85:5a:de:
4e:88:74:cf:a9:e3:d7:8e:ed:28:d3:fc:5a:f7:0a:
4a:f3:b4:b4:3f:29:6d:2f:4e:d5:a0:34:8b:e8:eb:
4b:06:20:3e:b2:33:05:a4:57:75:24:71:79:2a:ea:
38:74:31:49:e3:e0:c8:b5:43:ad:25:ef:d5:7a:99:
17:13:91:83:e8:40:6c:95:a6:02:ec:02:bb:51:e9:
84:31:1b:50:d0:37:27:3e:5b:9e:11:ad:50:c3:27:
ff:c8:b9:6a:2f:20:c5:4a:a7:a4:62:0f:55:f6:42:
82:f2:3a:bf:fd:95:bb:9b:06:3d:1d:ac:63:31:36:
d3:d8:50:fb:c0:f5:90:5c:eb:b8:0a:5f:94:86:df:
ce:89:f1:66:56:c5:a0:25:e1:b0:89:e7:89:10:d0:
e6:00:6f:e9:6b:fa:3a:5c:03:69:ef:c9:b0:af:72:
22:ff:93:a3:73:bd:e2:48:21:81:19:58:79:31:99:
75:99:ba:e5:76:52:dc:27:4c:35:20:26:8a:44:4f:
37:83:0d:13:e6:20:4a:64:2c:17:bc:ac:38:0a:fd:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:9F:47:8E:CA:E1:DB:E9:4B:3D:46:61:37:71:7F:97:98:83:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/8ae20485-d58e-3fd1-bf1a-cf29a68d863e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63/968407b3-e2a9-4ec2-9f39-e02d0486ee63.crl
X509v3 Authority Key Identifier:
keyid:67:F0:FD:54:48:16:3E:36:E3:34:5B:3A:5B:1E:03:11:7F:EB:E6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/968407b3-e2a9-4ec2-9f39-e02d0486ee63.cer
sbgp-ipAddrBlock: critical
IPv4:
104.166.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:fc:f8:ff:aa:05:e5:f0:0e:1d:69:8d:f9:69:dd:93:44:f4:
10:6e:00:c9:79:d1:64:91:92:2c:e7:a2:4f:0b:de:ab:4d:58:
ce:9e:ee:6c:34:6e:6e:d6:be:3f:ec:3b:bb:fd:8f:b8:5f:f8:
e7:0d:9e:e0:83:03:b0:b8:84:b1:0a:f3:05:e0:e0:b7:6a:e1:
dc:f9:05:c2:8f:b1:20:8a:f4:55:e9:b1:40:d3:23:c4:3d:dd:
b5:12:60:ce:64:c9:0d:47:5c:86:77:c6:f6:13:7c:e6:87:fd:
ee:1d:a0:da:3f:9c:e9:1a:f4:89:c5:71:73:c8:69:f7:93:9d:
64:d7:fb:e9:99:2d:87:ad:60:d5:58:ae:c7:84:d5:4e:f5:06:
e5:35:ed:d7:81:5a:f3:a3:27:6a:f3:58:98:66:67:ee:cf:77:
0d:e6:66:85:70:24:12:89:c1:0c:18:60:f6:19:e2:a2:79:10:
46:26:e6:1a:a9:f6:c9:c9:ff:d1:34:56:08:a7:5b:7f:6c:8e:
64:48:eb:82:b0:8b:65:d2:32:2f:3b:f5:7f:73:f2:99:a3:e5:
22:da:a6:45:11:81:d6:bd:5b:a2:3c:d2:82:10:29:0c:a4:be:
f9:30:aa:fd:0c:d2:1b:f9:07:a9:be:38:45:c2:94:fa:4b:d4:
4b:29:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:04 2024 by rpki-client on console-fra.rpki-client.org