Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa
File: 1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa (raw, json)
Hash identifier: hy5bWiQyQ1Vx5NXtPOCJNETtVklbiBGrWUbU7mTgq/I=
Subject key identifier: 15:1B:B5:D6:3E:96:74:27:CE:CA:4E:C7:4A:5A:C6:64:26:C2:B3:34
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44D7D89BED397D88CAB40
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 104.245.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:7d:89:be:d3:97:d8:8c:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=b0900f31-84c1-4e64-b99a-992968998175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:b2:9e:01:7b:f0:38:93:01:9a:2d:ef:2a:
9c:42:0e:57:88:85:c2:d2:61:de:82:bd:0d:e0:01:
4e:6c:b0:f2:96:b4:3a:2a:75:ee:07:57:7c:09:f6:
32:31:a2:d6:89:74:7b:35:e8:a1:74:92:2a:74:86:
f8:59:4c:08:df:84:da:f2:19:bc:66:20:4a:86:64:
68:11:46:79:2f:f8:52:ee:6c:7d:ab:61:07:fc:d8:
b4:cb:01:cb:6d:15:62:dc:5c:b3:5b:f9:d1:01:80:
f0:82:6b:21:7c:ab:17:a6:a2:c4:e1:52:50:c9:ea:
9a:17:7d:06:d6:1e:d1:1d:18:94:f4:af:7f:95:37:
ad:19:29:cf:37:22:a5:be:e0:6a:e2:b8:40:2d:2b:
49:99:6c:a0:32:7a:6d:93:51:1c:15:b1:98:f7:b2:
a1:be:b7:c4:1f:11:cc:10:cb:a0:f8:dc:8e:d0:68:
e8:95:13:f3:5c:cc:00:40:c9:f5:56:20:dd:a8:b1:
3f:49:1d:54:47:52:15:b1:6a:ad:e7:39:19:63:6f:
5a:42:fd:7e:6b:38:c6:dd:55:03:17:12:2c:cf:a7:
2f:24:ee:07:c4:46:cf:79:72:4a:ad:6e:5d:e5:c2:
fc:be:b6:63:00:b2:1e:30:aa:a0:bc:ea:3b:f7:ab:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:B5:D6:3E:96:74:27:CE:CA:4E:C7:4A:5A:C6:64:26:C2:B3:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b4:fe:07:12:b2:c1:b5:9a:62:b9:ba:fc:f1:3c:96:20:14:
cc:dc:a9:c8:ff:25:6a:21:bb:fb:fd:4f:14:a5:32:bf:78:e5:
0f:14:03:2d:80:fc:fa:65:1e:83:39:e8:5e:07:9a:df:28:ca:
60:18:b0:84:a6:00:65:fc:51:70:e3:53:fd:2f:54:ed:18:2d:
c6:39:98:b8:8e:4c:55:ed:bf:15:e9:70:0d:59:79:d0:9d:66:
ba:d0:0a:be:5a:a6:5a:b6:12:29:53:5c:ac:29:9f:89:d1:4b:
7e:3a:55:80:7c:ae:c3:1a:b4:aa:3f:7c:e8:11:2a:9c:53:6b:
83:73:2a:a4:f4:b6:55:ad:84:67:f4:fe:c9:a4:52:e7:01:63:
1c:86:aa:5c:23:30:9d:2e:79:a6:db:e1:c7:58:8f:e0:c5:06:
14:53:ba:32:d7:6d:19:5f:b6:63:ac:b3:84:cb:e5:c4:a2:3b:
4f:b3:8d:68:08:81:d3:b1:cf:a6:d4:59:4d:67:b0:88:d3:43:
62:dd:0f:f9:95:b4:7a:45:f3:68:61:23:51:24:4a:23:58:a5:
dd:62:cc:ce:32:47:55:e0:5f:14:3c:5b:93:11:bb:2e:26:2c:
5c:39:ea:86:70:7a:21:71:cc:30:8d:c3:39:6e:8a:e6:d7:9b:
52:1c:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:26 2025 by rpki-client