Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa
File: 4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa (raw, json)
Hash identifier: TCaaIm6YHrDi0ZaMxvddycoOcL3uOE83AiOWWxfbbE4=
Subject key identifier: B5:3E:EA:88:93:E9:BB:10:3C:2D:71:AE:CA:28:2B:C8:23:06:5E:8E
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849028F64A378AB01C73384C400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa
Signing time: Wed 26 Feb 2025 10:54:22 +0000
ROA not before: Wed 26 Feb 2025 10:54:22 +0000
ROA not after: Tue 27 May 2025 09:54:22 +0000
asID: 30036
IP address blocks: 104.201.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:8f:64:a3:78:ab:01:c7:33:84:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 10:54:22 2025 GMT
Not After : May 27 09:54:22 2025 GMT
Subject: CN=41a4cf8b-00e5-434a-a375-176ab16260e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:4a:e0:5f:80:f6:d9:3a:7c:78:37:02:6d:
8d:85:77:c6:4a:89:2c:90:11:c3:d2:b2:05:3a:3b:
8e:91:cb:41:96:69:46:5b:5b:81:f7:ea:c8:1d:cf:
e5:df:5b:ff:62:3d:ce:93:c4:a3:10:4b:a2:2e:71:
6a:15:79:5c:29:ab:7e:ef:24:eb:30:28:bd:ef:07:
09:f6:ee:ce:d8:38:ce:e2:2d:55:5a:46:3b:d9:38:
9f:2d:46:88:52:47:a1:20:9a:36:82:0a:35:b6:ce:
6c:54:ee:3a:76:42:42:0a:cf:cb:97:9d:15:e1:ff:
7d:d5:e4:21:8e:38:d7:44:9d:f0:54:a0:4f:f4:c4:
9a:17:e1:ca:25:18:7d:07:ff:ba:a2:38:f3:c8:f1:
e6:58:45:e9:49:18:f3:d3:34:89:fd:99:c4:1e:ce:
99:68:2c:0e:32:bc:e3:5d:e0:eb:6f:95:8b:80:5e:
af:95:74:48:0d:da:fe:5d:ba:9f:a6:b1:96:f7:56:
1c:4b:df:6d:b2:18:99:d4:dc:57:5a:c8:ef:3c:d1:
43:b9:71:12:ea:c0:9c:aa:e8:0c:7b:87:3c:02:62:
1a:21:a8:85:a7:e7:c8:3e:01:2d:23:c6:d3:d2:9c:
c0:08:ed:38:9b:c2:aa:22:e4:61:79:9a:38:b1:dc:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:EA:88:93:E9:BB:10:3C:2D:71:AE:CA:28:2B:C8:23:06:5E:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4aaf5189-177a-3f26-9b07-dc6eddcedca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
104.201.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f9:10:fd:58:87:1d:d0:f4:fd:a7:d0:f0:8d:77:a8:63:f5:
6d:81:88:95:38:0d:29:df:33:12:c2:f5:5d:da:72:68:1c:50:
01:f4:45:f2:b1:24:75:44:2d:b0:6a:84:ac:e6:93:bc:60:73:
70:56:e0:36:18:45:6e:2d:c9:eb:06:00:7e:50:4d:c8:05:44:
c7:f7:7b:ec:e4:f9:2b:f5:52:f0:46:37:83:0f:4d:2f:39:c0:
0a:c0:da:43:b8:b0:dd:2a:6c:c1:d4:63:03:85:91:99:00:d3:
bd:23:3c:63:23:3c:3e:6f:64:89:b0:53:ff:8d:bf:d3:e8:23:
14:e1:c1:9a:3b:d6:5d:21:f4:6a:a9:05:96:7c:22:eb:06:a7:
12:f9:ce:54:c7:36:57:f0:ff:fa:44:a2:9e:8c:43:3a:27:23:
02:4a:f9:f1:2b:7d:53:94:51:56:7a:7d:e2:33:49:7b:e5:2c:
1b:59:75:90:49:d5:7a:38:75:03:af:61:26:16:23:26:cc:c1:
68:46:b9:2d:ae:6e:85:67:91:91:e5:af:ba:b4:b8:02:89:1d:
34:84:54:90:ed:25:1e:4b:b5:b5:25:ff:95:87:24:41:64:80:
4b:70:8d:2d:c0:ea:95:0a:32:8c:db:4c:64:9d:03:e2:e8:ef:
b5:0a:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:54 2025 by rpki-client