Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa
File: 0e5a622b-034c-3a3b-816e-0f51519ea53e.roa (raw, json)
Hash identifier: ybWN9O++qh1GFjjEz+kvUCHn634u7l89RPbim+VfZzg=
Subject key identifier: 95:13:9C:AB:35:D2:D4:73:62:F3:B1:DC:4F:47:81:71:A6:DC:5B:73
Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial: 010D0C9F43285848F65BF3F9BECAC0341FB270D0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16789
IP address blocks: 104.156.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:f3:f9:be:ca:c0:34:1f:b2:70:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=08f09307-7085-4821-a026-821afec7e066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:38:79:e4:3d:6b:46:07:69:0d:c1:f2:e5:
06:de:ef:58:d4:b0:80:48:70:d3:39:9d:e4:b1:f7:
6e:dc:50:49:f5:24:47:f5:03:c9:26:ac:e9:a5:f5:
66:8e:6d:31:f0:49:b9:ec:43:5f:dd:22:2a:0c:6b:
b3:42:e2:36:a8:d1:d4:3b:82:13:40:c1:1c:44:db:
e3:f6:b7:71:96:3b:88:f8:4b:af:32:aa:0f:e3:92:
e9:f3:08:2e:f0:df:34:89:9a:b3:eb:5a:1a:32:17:
1f:5a:b1:b4:a5:cf:56:36:05:ba:52:ff:f6:02:9b:
e4:9f:c4:3a:59:12:a4:1f:05:ea:0d:6e:78:ba:ed:
53:f7:37:0f:c6:7e:b0:8d:0e:de:b0:84:26:90:af:
6f:3a:62:58:ea:94:d1:f9:70:b5:79:3a:6e:6f:c2:
94:a1:c3:09:da:a2:4d:e6:7c:a3:6f:d3:cf:fc:48:
6e:85:0e:db:b6:2a:1c:ca:15:19:0f:a8:9b:5c:7d:
ff:dc:79:13:06:0b:c1:f3:0b:87:a6:88:57:b0:20:
dd:56:24:0f:7e:bd:3d:cc:2f:a3:e3:8b:f2:e6:27:
a4:28:9e:e5:26:72:90:59:1c:69:46:8a:6f:26:85:
b6:0a:03:c5:d1:be:5f:1c:09:b2:fa:73:1d:33:09:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:9C:AB:35:D2:D4:73:62:F3:B1:DC:4F:47:81:71:A6:DC:5B:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/0e5a622b-034c-3a3b-816e-0f51519ea53e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
X509v3 Authority Key Identifier:
keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:36:da:41:9a:cb:95:f7:af:e8:3f:c8:d5:f9:f1:15:ac:5f:
03:2b:3a:2a:5f:c2:63:cc:df:aa:41:08:f5:e3:86:67:96:4c:
09:55:2f:41:dc:34:37:1d:21:a6:9d:5b:12:7f:3e:f0:6f:f0:
3b:5c:81:22:38:75:d9:39:59:39:2b:dd:4f:b6:8e:32:02:bc:
ed:fd:3a:0f:7b:d0:ea:38:49:e5:16:e1:04:0c:d7:ba:3a:f6:
5d:86:dc:a5:1e:e8:fa:08:21:96:4e:4c:ea:f8:0a:3a:45:4b:
04:0c:44:57:d7:c0:be:69:a8:62:3d:5c:c3:66:f6:46:88:3a:
5f:4a:8a:77:36:d2:9e:bd:38:7e:9b:e0:fc:52:1f:12:fc:32:
09:f0:a1:05:c1:2c:05:4f:ab:33:c1:f4:6c:68:c1:ce:c0:2c:
6f:0b:3d:d5:78:9d:e6:db:c2:2f:31:0b:49:85:35:75:1b:76:
c1:1d:3c:00:9a:9c:34:48:30:b3:46:7d:c6:29:ca:c5:0c:40:
1c:25:c8:c6:6c:a7:d4:a5:5b:fc:0d:af:87:95:be:0a:ef:5d:
9c:5b:3c:c7:c9:a5:66:36:83:cb:1e:4f:a3:b5:83:ac:ca:57:
ce:46:90:aa:eb:a1:3e:a7:9f:6f:9c:d0:55:63:de:03:ef:9b:
88:34:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:50:58 2025 by rpki-client