Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65bf598a-165f-317f-9785-fa6740e180a7.roa
File: 65bf598a-165f-317f-9785-fa6740e180a7.roa (raw, json)
Hash identifier: hyl1R4KcSc9QAkzt1j/GZGa1kcLvLXOUstZqEmyvHYk=
Subject key identifier: 5D:B5:B5:7B:BC:A6:6C:F8:80:45:2E:D6:00:94:A1:89:0B:AE:15:25
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848F201ED825BFE815C0DF72300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65bf598a-165f-317f-9785-fa6740e180a7.roa
Signing time: Thu 20 Feb 2025 12:36:24 +0000
ROA not before: Thu 20 Feb 2025 12:36:24 +0000
ROA not after: Wed 21 May 2025 11:36:24 +0000
asID: 13335
IP address blocks: 104.23.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:01:ed:82:5b:fe:81:5c:0d:f7:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 20 12:36:24 2025 GMT
Not After : May 21 11:36:24 2025 GMT
Subject: CN=d408c848-9354-4afa-8c83-47526be26677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:21:6b:da:fe:23:70:19:ac:44:e0:99:8b:3e:
40:23:3d:14:aa:c4:30:41:3e:af:1e:29:48:64:ec:
e0:4a:a8:9f:1d:c0:9d:e9:93:59:7a:f2:92:1e:e4:
94:fb:aa:18:c1:67:04:a7:e0:86:26:10:5b:82:a6:
9b:b9:e6:f6:73:6c:2e:d5:0a:0a:d4:9f:36:a8:50:
6f:aa:99:83:22:6f:71:58:00:83:df:a7:bf:36:23:
46:7e:f3:53:34:d7:fa:c7:9f:f8:75:49:fb:b9:96:
ff:25:79:c9:67:af:e0:96:8b:c3:4c:e3:72:d1:85:
75:d3:54:4b:0e:da:cb:a9:d6:58:67:56:a7:79:cd:
a4:5b:e6:4c:3c:5f:ef:3f:09:b4:67:e5:ca:27:ae:
25:68:f9:61:22:9c:ee:59:97:c1:a2:3e:c7:82:94:
b2:bc:cf:41:c5:f2:5a:11:4e:a5:d9:dc:cb:12:e5:
32:54:3e:41:2c:5f:0d:7b:e3:fa:f0:89:3b:7b:02:
ed:4f:96:23:2b:db:be:25:37:49:ba:b3:cb:41:70:
d5:96:6a:a5:75:2b:f3:90:ac:e4:da:9a:15:ff:53:
cc:45:67:30:fd:8e:9d:f4:a5:8b:d5:5b:e9:04:de:
97:17:6a:83:86:5a:09:92:c0:87:cf:53:36:2e:04:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:B5:7B:BC:A6:6C:F8:80:45:2E:D6:00:94:A1:89:0B:AE:15:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65bf598a-165f-317f-9785-fa6740e180a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.23.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:60:be:59:87:50:2a:8a:47:22:bd:42:00:87:f3:37:1b:72:
ee:fd:51:4a:ba:bb:6e:c7:f3:e4:11:bf:d4:80:60:9d:58:b9:
c7:1f:c1:c7:9d:83:ad:db:c1:df:d3:6e:1c:da:ac:d1:ff:61:
45:20:a8:0b:26:b6:de:fc:79:84:b0:46:c7:2d:b8:a1:1b:ac:
9b:42:0d:f7:cd:47:6d:b4:61:66:f0:8f:45:2c:84:47:09:69:
34:33:59:a3:71:90:a3:d2:53:84:30:f2:4a:27:68:c8:65:b6:
e0:b0:3b:a7:8e:44:fa:e1:56:b2:87:a3:be:bf:f0:4e:ee:a8:
3c:03:75:10:ed:66:b6:9a:80:ac:50:85:43:fc:05:37:54:f1:
4d:d7:59:0d:2c:a5:3e:09:93:0f:0d:7d:34:dc:6a:98:57:08:
80:24:46:68:03:7c:f3:9a:33:8f:e4:8f:7f:e1:90:fe:c4:57:
91:33:4f:de:bc:bb:c2:65:1a:9d:f3:b0:84:69:29:71:eb:2c:
2e:d8:39:02:07:da:20:e2:08:85:ed:a7:78:01:65:92:b1:e5:
1d:89:4f:a6:23:33:d1:83:09:8e:8d:92:ac:30:4f:61:cf:ab:
53:66:b9:76:37:63:29:29:fa:32:4b:11:c6:d1:34:91:e7:a1:
0e:94:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:06 2025 by rpki-client