Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
File: 248a1fbf-b60e-3527-b32d-4b51452afa6f.roa (raw, json)
Hash identifier: RiqPr5qFRPIUkNSS0MGCQwb7Krl7I6hf/UhvYn3/Yd0=
Subject key identifier: ED:AD:5D:54:1C:53:95:8D:4C:B6:AE:65:90:9E:C5:95:E5:0F:52:90
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F6C5EA76B8D27F3493660
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
Signing time: Wed 26 Feb 2025 10:54:25 +0000
ROA not before: Wed 26 Feb 2025 10:54:25 +0000
ROA not after: Tue 27 May 2025 09:54:25 +0000
asID: 30036
IP address blocks: 104.201.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:6c:5e:a7:6b:8d:27:f3:49:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:25 2025 GMT
Not After : May 27 09:54:25 2025 GMT
Subject: CN=e0ef369b-09f1-4cef-b9cf-b8c7bf34741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:83:10:3d:5b:92:f9:2a:88:de:d1:2c:f9:
b2:f0:87:77:1c:e2:94:a4:2f:d1:19:93:b7:f5:8b:
2e:df:87:1c:b6:3d:ce:3b:e5:66:14:c4:47:41:1d:
06:99:a1:12:55:5d:8a:35:a3:09:be:15:67:78:69:
2b:0e:f1:9e:ab:ea:dd:82:d6:03:1a:9d:9b:bc:99:
51:d2:03:b1:c8:2e:40:b6:f1:7e:25:c4:4a:e8:d7:
37:f5:64:7d:c5:15:89:b6:1f:db:76:da:09:6e:87:
8f:ab:28:0e:e7:13:86:22:0b:19:34:6f:e2:21:8a:
17:ce:0c:f3:1a:20:18:24:af:91:14:68:df:5a:75:
0e:97:61:e2:c6:c7:85:5f:59:d6:62:a3:16:22:2b:
65:70:7e:a3:8c:15:93:3a:da:d7:a8:6f:cd:68:cc:
c0:47:6d:be:7f:23:cc:f0:f0:bd:e4:4d:97:5a:c0:
4d:5b:bd:70:8a:75:f8:a6:8c:9d:a9:28:e9:98:77:
2f:90:0d:26:51:48:e5:60:a4:68:00:5f:5e:5e:c1:
64:26:1f:ef:4a:45:f0:97:61:13:7e:be:bd:9b:0d:
ad:9f:ab:b6:f7:a0:4e:1a:98:f0:0c:6c:67:c4:ba:
31:18:78:ff:28:1e:c2:6a:9c:37:be:9c:23:56:1a:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AD:5D:54:1C:53:95:8D:4C:B6:AE:65:90:9E:C5:95:E5:0F:52:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c0:87:94:6f:2a:04:55:c0:a9:d1:30:82:04:f9:d9:a1:58:
9e:66:7f:3a:22:67:b9:dd:e9:4c:99:17:d4:83:04:8e:43:b9:
29:93:a9:d9:11:12:0b:0c:d2:97:42:c5:8b:6b:2b:f4:76:cc:
36:aa:95:55:d2:15:75:d9:24:cf:dc:44:1c:ce:67:91:c2:2e:
ea:cf:79:28:5a:61:d2:4d:e9:61:07:b9:6b:e5:9e:51:fb:d1:
af:c9:3e:e6:b7:ea:1a:9f:5f:fa:44:23:b7:4c:86:60:af:e1:
c9:bd:14:a5:33:35:ae:b1:89:65:5b:eb:31:86:ed:2f:cf:28:
a8:44:b9:aa:f5:a6:d2:29:28:0c:87:d8:c6:4e:ba:c2:63:f0:
99:ab:4b:b8:a2:df:5d:36:5a:31:c9:16:8a:3a:a5:ed:c7:9c:
4c:a3:03:f6:2b:5e:91:f2:9d:ee:b7:51:fd:e4:6b:80:d8:16:
a7:63:97:ab:66:85:74:67:c4:1e:19:c7:65:44:20:bc:ab:2b:
75:41:1f:65:d0:af:1a:8f:3e:f4:ac:7f:74:39:ef:64:54:53:
fc:49:39:07:09:ca:b0:3b:99:b9:a2:d0:29:e3:55:f5:86:0c:
f2:07:04:9a:12:43:f3:d5:46:7b:5b:17:a7:0a:73:46:b2:96:
1f:f8:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:39 2025 by rpki-client