Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa
File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json)
Hash identifier: FUA+qrxllH+q3RaQ8EU+6NBsmTLa1f7y+Vh7EfEp49U=
Subject key identifier: C2:61:09:D4:AC:88:BF:8E:AB:25:11:B7:61:BE:A3:C4:BE:94:BA:FF
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F432858492C4EB45E6FCC86E63E258080
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa
Signing time: Thu 13 Mar 2025 09:47:58 +0000
ROA not before: Thu 13 Mar 2025 09:47:58 +0000
ROA not after: Wed 11 Jun 2025 09:47:58 +0000
asID: 36352
IP address blocks: 104.143.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:4e:b4:5e:6f:cc:86:e6:3e:25:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Mar 13 09:47:58 2025 GMT
Not After : Jun 11 09:47:58 2025 GMT
Subject: CN=e0835d64-e626-4b52-83c5-3c487f81f489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:37:ad:cb:0b:29:7d:32:01:ea:c4:71:56:
db:e9:9e:5c:b9:e4:42:c2:5e:53:8e:d8:93:76:44:
93:52:fe:09:55:65:fb:3f:92:11:fc:ce:0b:79:52:
87:5e:b2:70:f1:c8:7f:7e:92:80:f9:a5:08:f7:d9:
f3:e9:7e:42:02:c5:66:f9:52:29:37:0c:4b:bd:05:
f9:d8:29:c0:c0:e5:87:2d:86:a5:1f:30:8f:75:57:
ad:98:70:23:2a:07:bb:0c:84:a4:09:0e:08:b6:49:
02:7f:66:e5:64:b0:cd:9c:f4:e0:b7:e8:44:75:df:
cd:dc:4b:42:ae:b4:94:09:e4:f3:4e:a1:1e:42:0d:
f0:3f:69:71:7a:cf:75:e6:0e:0b:8b:e6:ec:35:94:
59:3b:61:0f:0c:89:e0:d7:84:5d:c9:68:5f:fb:c4:
66:f8:61:fd:d9:7e:f0:0e:2f:a0:9f:7a:72:02:c4:
04:73:68:f4:cc:75:a2:4d:9d:ea:de:80:ad:f6:a2:
e3:5c:3b:fc:73:df:47:eb:99:8d:e7:78:0b:fd:cb:
59:92:63:b0:3c:7e:90:74:51:f2:7d:c5:1f:57:42:
56:13:40:5e:6e:0d:1b:07:c5:f1:7c:81:7f:ab:70:
87:18:4b:38:09:b7:61:fb:c6:ac:63:6c:1e:d4:ff:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:09:D4:AC:88:BF:8E:AB:25:11:B7:61:BE:A3:C4:BE:94:BA:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:8d:d0:27:6a:ff:db:44:de:d2:29:a0:68:af:a6:d3:6e:bc:
e9:02:44:4f:aa:ca:34:c3:10:05:4f:77:6a:0e:64:82:c9:72:
fd:66:e1:94:9e:34:6f:b7:49:7c:65:11:41:4d:50:64:9d:0f:
f1:9d:ad:24:3f:03:3f:33:9c:f5:59:35:3a:b6:b9:05:fd:a5:
dc:1c:7c:d5:57:08:96:96:a3:c2:66:43:59:a4:3e:e9:e5:b9:
91:d2:da:f7:45:e8:9b:04:91:23:25:53:2d:37:14:71:81:f0:
92:7c:ba:a7:9d:61:53:d5:bd:f2:b4:0d:cb:12:76:4b:8e:af:
d9:b4:2a:0b:92:98:f0:d7:ae:a1:8b:b8:8a:c4:d6:c3:94:68:
56:b1:01:5c:31:99:02:db:90:76:ce:14:32:be:66:39:b4:8d:
ea:33:60:5f:b8:21:fc:cc:62:55:34:f3:93:c3:e7:29:81:c8:
54:6d:2d:3d:a5:a0:bb:4b:b3:fc:d2:6f:2c:45:c6:e2:31:98:
c1:fb:68:d2:94:7b:55:8a:d2:02:fa:2f:e2:30:d9:86:41:d8:
04:74:81:af:6a:1f:2e:a6:b0:06:4a:68:4a:e6:16:02:ad:db:
02:72:80:90:cf:d6:9d:07:51:fd:63:71:62:0c:7d:4d:49:93:
2c:f4:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:14 2025 by rpki-client