Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
File: 5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa (raw, json)
Hash identifier: 3EbAOosaKdlTA2SdbjTeSSeN8+wQrY9Q45NRuqFtm1M=
Subject key identifier: 68:F2:01:FB:FD:53:4C:7D:39:97:7B:42:6E:6E:2D:D5:09:F8:FF:7F
Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial: 010D0C9F432858488AE094DAF3407121CC769F00
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 63394
IP address blocks: 23.184.112.0/24 maxlen: 24
104.237.112.0/20 maxlen: 24
157.52.48.0/20 maxlen: 24
172.86.0.0/20 maxlen: 24
172.86.16.0/21 maxlen: 24
172.86.32.0/19 maxlen: 24
2605:e4c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:94:da:f3:40:71:21:cc:76:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=ae4939d8-0dc2-4c11-88b5-3c68e4f10e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:ae:3d:12:ef:bf:c3:a3:e1:21:66:2a:57:
75:cc:a6:42:42:40:bc:2c:13:e2:4b:89:48:d2:b6:
77:ec:1b:8f:85:f4:ae:66:84:8b:63:eb:84:11:8c:
46:ae:dc:15:11:d7:67:b0:35:50:a2:45:f8:4f:05:
61:23:52:3f:63:2a:fc:81:49:af:87:0b:f1:99:84:
8f:c8:d0:2f:b4:d6:6b:00:af:43:f6:3a:30:59:2b:
2d:e4:44:8c:0c:e6:7a:64:9f:70:88:de:c3:36:47:
f7:26:c8:e8:b0:29:d1:49:90:65:7a:c8:56:d7:26:
df:24:5a:4d:05:37:46:b0:65:6d:6f:21:87:3d:f1:
74:ee:a4:6c:4c:8f:bf:d3:94:9d:89:59:09:9f:78:
7b:45:dd:59:b6:92:fb:e3:7a:07:00:bc:09:df:45:
33:49:7c:5d:d8:d6:5e:08:76:f8:9e:2c:48:c4:0c:
5b:26:bf:be:19:43:0f:81:a9:1e:a7:e1:34:e9:5c:
de:7b:1c:8a:c3:9d:77:d2:b8:74:c0:d8:f5:12:e3:
8b:a5:e4:eb:c7:b8:f4:1e:78:33:ed:d3:f2:e2:2e:
c6:a1:84:fb:9e:cd:a4:92:cc:63:ac:c1:3d:67:ba:
7e:5a:23:08:85:22:f9:1f:27:e7:bc:33:88:9c:ac:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:01:FB:FD:53:4C:7D:39:97:7B:42:6E:6E:2D:D5:09:F8:FF:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
X509v3 Authority Key Identifier:
keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
sbgp-ipAddrBlock: critical
IPv4:
23.184.112.0/24
104.237.112.0/20
157.52.48.0/20
172.86.0.0-172.86.23.255
172.86.32.0/19
IPv6:
2605:e4c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ed:14:4a:7d:9f:b2:fc:ce:6d:1b:a2:41:58:b5:33:33:2b:
7c:21:9a:52:c1:29:2d:cf:8b:da:2c:e8:8f:3c:a0:68:af:37:
c2:52:08:59:11:a1:d1:e5:0a:cb:d7:9e:55:ab:ee:5a:40:c2:
05:05:40:38:8b:16:23:6e:55:9b:14:b7:10:44:ba:8e:d7:e2:
70:9b:58:a2:24:2f:db:d1:6b:a2:f0:be:53:91:02:3c:ea:7b:
cd:4d:55:e3:ea:43:8b:9a:34:3c:9b:ae:c5:23:0c:29:99:a8:
39:8a:9b:0d:c0:0e:2e:97:40:7e:e6:68:75:46:fd:66:eb:db:
79:82:e7:be:2a:49:45:12:4c:7a:85:d6:8e:de:85:08:23:f3:
6e:f7:54:6b:15:bc:56:79:3d:e9:50:c4:95:de:14:00:c5:f1:
e2:59:54:aa:94:e7:b8:57:da:6f:61:cc:b5:4f:98:0f:54:5f:
76:41:15:d6:dc:e6:41:87:6c:d7:4a:28:fc:9c:a8:a3:e2:28:
c4:ed:04:39:9f:78:ca:42:1e:5b:ea:04:df:fc:d2:3d:38:e6:
e7:a4:3c:ce:25:2c:27:22:a2:33:56:60:23:e8:f2:80:92:90:
d0:fe:df:01:90:a1:29:74:ef:d4:2d:07:f0:29:7a:7b:88:f3:
3c:a2:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:25 2025 by rpki-client