Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3878af0a-7b19-3244-a212-1b8f8d69eb41.roa
File: 3878af0a-7b19-3244-a212-1b8f8d69eb41.roa (raw, json)
Hash identifier: zFHhHT3lUL7d1UR4/d2sa4IvFZkwG90sL3PcJbrnm/s=
Subject key identifier: 3A:F3:39:C2:2C:04:35:7A:94:73:D0:B5:23:29:8B:1A:DB:06:0B:25
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F86BF0EE494B032B33738
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3878af0a-7b19-3244-a212-1b8f8d69eb41.roa
Signing time: Wed 26 Feb 2025 10:54:38 +0000
ROA not before: Wed 26 Feb 2025 10:54:38 +0000
ROA not after: Tue 27 May 2025 09:54:38 +0000
asID: 30036
IP address blocks: 104.201.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:86:bf:0e:e4:94:b0:32:b3:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:38 2025 GMT
Not After : May 27 09:54:38 2025 GMT
Subject: CN=8407f4aa-3f02-4f71-87bc-b46e4b11ac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:38:03:0d:40:52:c6:bc:aa:f6:16:72:a1:
87:48:d8:c3:d0:2a:d6:66:18:ce:6c:ec:2e:ee:52:
69:e3:39:89:7c:7e:7a:04:1a:98:48:c7:89:60:de:
a0:eb:69:c9:4e:cd:f7:f1:2b:d2:c4:44:16:af:31:
73:b9:35:21:49:79:8d:a3:98:93:33:97:c9:0e:d8:
38:82:5d:99:5e:3d:ed:89:e0:dc:de:16:66:42:c2:
3a:d7:07:99:1b:82:51:b0:67:8a:a8:96:3d:65:eb:
db:5b:49:c2:f9:91:ff:c5:db:cf:15:8f:a1:42:71:
ad:ad:d8:97:db:5c:9f:eb:f0:14:54:22:ae:c2:df:
e5:1a:42:cf:77:c9:fd:48:0e:0a:0b:77:65:69:50:
15:ec:bb:4c:a8:f0:ef:28:df:9c:13:17:7a:01:04:
ed:ce:0c:48:63:d2:fa:f8:98:b6:a0:72:89:cd:6c:
7f:41:7c:5e:ae:c1:5f:8a:b2:9e:ca:d3:fb:4f:66:
bc:6a:ae:3a:36:d7:77:d0:e4:6d:f4:79:68:05:5b:
48:1d:45:82:ec:6e:9a:3d:59:06:11:35:56:2c:98:
40:b5:8d:a4:97:bd:10:f4:bd:bb:03:42:ac:7f:8a:
2a:c4:42:9e:2a:c5:88:13:bd:1b:4a:c7:f5:ea:0d:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F3:39:C2:2C:04:35:7A:94:73:D0:B5:23:29:8B:1A:DB:06:0B:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3878af0a-7b19-3244-a212-1b8f8d69eb41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:39:6c:5d:21:c8:d0:fd:13:d5:ef:ab:2c:33:1f:d8:4f:b9:
82:1e:fa:ad:81:95:19:97:7a:dc:31:22:14:3d:07:7b:9b:a3:
d3:8b:83:d0:aa:5d:e4:de:b3:c5:3d:08:26:86:6b:d6:9e:83:
fe:44:9d:ff:71:c4:75:13:5d:42:70:8e:4c:73:30:72:63:51:
ca:c8:e8:fe:3f:88:cf:ff:22:31:1f:fd:6b:28:68:4b:1e:71:
58:e7:1e:d8:b1:92:5b:fe:70:5c:81:ba:bb:72:f7:43:97:e0:
6f:dd:49:b6:f5:49:de:0f:08:73:8f:ae:15:1a:ef:6a:40:c4:
a5:47:fa:fd:04:9b:bc:7e:1e:ad:8b:6a:64:2e:c3:33:84:1f:
40:54:e3:b4:4c:dd:e4:57:df:44:0f:c7:39:bc:31:81:c6:1a:
cd:65:1d:ae:85:1d:a0:48:57:8a:80:ce:43:61:2f:64:97:f4:
f8:e5:26:20:e5:14:a4:30:7d:25:6f:e1:61:c9:10:ad:9d:f0:
7c:7c:8e:fb:95:b8:38:57:c3:4a:c8:95:11:95:6d:65:e3:a4:
5d:fe:6e:e6:bc:9d:03:c6:c2:e3:1e:38:23:53:d5:6a:7a:a5:
a7:8e:b2:8a:df:32:5d:b2:54:b6:60:77:a3:1e:0c:43:c3:45:
68:77:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:44 2025 by rpki-client