Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa
File: 91d10d04-d56b-3251-ab6a-17d723896f38.roa (raw, json)
Hash identifier: nUB+j89mG/gLYX4i/Phn2ptJG9oNMhNUTL0vNfkOjc4=
Subject key identifier: 6A:4F:EE:C1:0F:34:6F:09:F3:8D:45:C2:94:6D:A3:93:6A:8D:F6:ED
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F4328584926C146A08B54D8A6D959CEC0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa
Signing time: Tue 11 Mar 2025 10:03:58 +0000
ROA not before: Tue 11 Mar 2025 10:03:58 +0000
ROA not after: Mon 09 Jun 2025 10:03:58 +0000
asID: 18779
IP address blocks: 104.143.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:c1:46:a0:8b:54:d8:a6:d9:59:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Mar 11 10:03:58 2025 GMT
Not After : Jun 9 10:03:58 2025 GMT
Subject: CN=bd2ae2ba-520e-409f-8995-847158608cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:77:c6:08:7b:9d:87:c0:62:93:70:d4:e6:
e6:c7:e1:6d:d7:ee:f3:6d:3d:bb:ba:e3:48:80:58:
eb:5b:52:5a:ec:9a:27:b4:48:c3:de:a6:ca:dd:0a:
4c:27:62:6c:0e:f0:69:09:ed:8d:04:ea:bf:c8:f1:
eb:b6:5f:59:69:e7:56:f8:97:94:83:13:d1:42:10:
82:e8:60:08:e7:dd:91:97:16:f7:e6:da:ef:b7:d9:
b4:0a:44:9e:fa:0e:45:80:c9:44:ad:c6:8e:4c:3d:
53:70:00:b5:d4:ce:dd:0f:31:6f:a7:62:88:de:3e:
35:8f:89:43:d6:18:0c:bd:b1:50:ba:66:b7:d1:39:
95:57:85:76:93:ee:ee:7d:1c:4f:2d:7a:5c:54:ee:
14:86:ae:55:8b:ab:e5:f5:74:cf:bb:49:0e:0a:cb:
32:cc:13:09:54:6e:8e:5c:fe:4f:c9:91:92:e5:a6:
45:a0:19:63:94:1e:76:a5:f1:04:a0:57:55:d7:fd:
da:00:a0:04:41:b5:ce:1a:7c:36:05:1e:4e:9b:58:
cd:33:ad:5d:59:73:d8:79:52:24:d8:73:28:2f:d2:
04:28:ca:14:ee:5f:7f:11:27:88:bc:6c:10:3d:16:
10:fb:a3:da:d3:ae:ab:90:21:38:b6:d4:ef:00:82:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:EE:C1:0F:34:6F:09:F3:8D:45:C2:94:6D:A3:93:6A:8D:F6:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ae:09:63:dc:03:78:cd:07:d6:dd:e7:d3:86:a0:cc:c2:fc:
b3:6a:6d:c6:a7:3e:cb:02:9e:17:9e:75:cc:28:52:f3:86:8d:
92:91:c1:9f:75:5d:b3:6d:22:d4:31:22:7f:dc:66:51:65:ae:
71:c0:ac:3a:2a:42:8a:46:ee:63:2f:97:45:38:5e:49:6c:84:
c8:d3:94:22:02:d3:4d:d1:4c:60:12:3e:2d:77:a3:09:05:20:
25:40:b4:28:f9:08:58:e2:3f:c1:3d:2a:e6:5f:9d:2a:20:a3:
70:97:7e:db:14:40:95:3f:90:dc:c1:78:8d:93:3a:11:c6:3e:
ff:dc:1a:22:02:49:5e:77:b0:9e:3f:0b:b7:99:2d:4e:65:cb:
2f:5b:0a:89:18:71:95:c5:1d:30:0e:5a:9b:81:47:22:1a:c7:
3c:d2:7f:3c:aa:e1:43:36:c1:6a:59:93:fd:a7:48:ba:23:fd:
82:b8:d3:50:d8:97:ca:69:d4:f6:13:9c:74:25:d1:2e:1f:d9:
11:95:90:e8:f2:f2:e7:a3:d3:3e:07:20:89:52:ce:41:03:4b:
20:d4:f2:26:76:1a:71:fa:91:5d:f9:c0:bc:36:21:57:16:41:
3e:00:83:e1:1c:ec:55:90:49:e1:16:a3:0e:fc:3a:6b:73:f9:
4b:bb:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:20 2025 by rpki-client