Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa
File: e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa (raw, json)
Hash identifier: Iu6UlIxXkqqEQ6rFHuJ+k5dI6+1csJCKDcW5+IAac/U=
Subject key identifier: 2C:4A:88:F9:F4:9B:B3:9D:2C:3E:F1:F6:25:88:75:56:C4:7A:4D:86
Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial: 010D0C9F4328584957F4053C08251C95A0C5C240
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 21713
IP address blocks: 104.160.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:05:3c:08:25:1c:95:a0:c5:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=e66045de-5429-4e54-891b-831d17c4fd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:22:85:73:12:0f:d1:16:bb:ed:c9:70:78:f9:
eb:38:bc:73:4c:c5:32:31:58:de:c6:9a:9a:ae:90:
44:e6:99:d8:1a:9a:9d:53:d6:2b:25:8e:f0:5f:2c:
fd:85:6a:6e:62:69:1f:1d:43:00:3a:83:1f:8f:b8:
9c:a2:d8:88:6d:61:64:1f:a0:82:c1:6a:4c:78:c6:
1a:b3:f6:27:ae:bc:22:2b:ec:28:c9:40:40:e9:4d:
56:7c:ce:47:8b:8d:d8:92:72:10:75:7e:61:3c:66:
9e:9f:94:b3:84:36:d6:77:5f:1d:b0:5b:2b:27:6c:
47:fc:77:3b:1e:f9:56:62:7c:88:2d:6c:a9:90:95:
5d:5b:ef:b6:63:f1:95:9f:21:67:16:1f:32:60:5c:
c9:7e:32:83:2a:2c:6a:96:ea:01:42:7e:70:06:13:
96:47:41:e3:2b:b7:96:60:9d:35:0c:c4:e1:9e:ee:
ca:54:a8:79:5c:e2:e5:73:38:a5:19:44:ec:b2:69:
53:a0:12:79:c5:b5:4f:83:46:89:83:bc:45:c0:3b:
21:34:02:b4:5e:0e:cc:80:e7:db:d2:2c:a4:84:d7:
3c:0c:dd:7b:e8:8d:ca:84:99:cf:e6:5a:5a:74:b8:
04:9d:99:3b:23:b9:6b:f8:8a:61:48:02:41:6e:df:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:88:F9:F4:9B:B3:9D:2C:3E:F1:F6:25:88:75:56:C4:7A:4D:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/e7b94c2e-8bda-3ac3-b0a0-23d5ee689ad5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
X509v3 Authority Key Identifier:
keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.160.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:2b:f9:9c:39:81:c2:a5:dc:ae:3e:42:83:8b:7f:99:4a:b6:
70:66:d1:61:57:07:ea:ca:97:44:a1:c9:45:8e:03:62:ed:d1:
ea:f2:71:b5:31:89:fb:f2:f3:ac:e0:af:e9:55:45:77:1d:37:
b2:fe:2b:f0:a5:9c:fb:f6:30:ff:5a:fa:e8:1d:e9:13:ab:23:
f0:d8:33:48:06:e2:34:1d:e1:bf:96:a3:d9:9b:b6:e9:54:a3:
26:ea:89:d9:0d:e4:51:82:5d:05:3c:7a:8d:f3:40:cb:73:94:
9a:fd:66:a2:bc:29:14:b8:e9:26:0f:a7:01:10:b2:da:91:2d:
c8:9b:b4:54:e4:eb:c9:e3:51:b6:07:64:8b:66:9f:f5:52:c1:
5c:77:b1:35:f8:41:2d:35:02:bf:e9:8c:5f:01:f5:f5:20:4b:
37:61:30:cc:ad:7b:24:92:19:96:de:87:41:d6:ca:15:e0:e1:
75:62:dd:da:44:5d:2f:e3:ab:78:be:7f:a7:21:4a:fd:32:12:
55:93:3d:a5:b4:91:7f:0b:29:ca:e9:e8:1f:c3:98:c8:a7:9f:
66:d7:c4:b1:ee:ae:69:e9:57:3c:cb:8b:9c:4a:a2:81:4e:b0:
25:34:de:8d:1e:8f:1a:ca:f0:45:51:09:4f:55:07:59:04:f2:
35:fb:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:40 2025 by rpki-client