Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa
File: a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa (raw, json)
Hash identifier: A9S9JYWJXaaS3a2xvtUZmjuiYBhA9gMh+MM/Y+JP55U=
Subject key identifier: EF:CD:A8:33:D9:27:F8:C8:A6:60:B4:F0:C7:FB:30:C1:3C:48:1F:BA
Certificate issuer: /CN=70197168-13e1-4a38-9046-75d751ec520a
Certificate serial: 010D0C9F43285848ADC602F7DEA6B19B1F23A880
Authority key identifier: 3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 104.194.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:02:f7:de:a6:b1:9b:1f:23:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70197168-13e1-4a38-9046-75d751ec520a
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=a2a22955-77c7-4c5c-b62d-6d4771986173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:78:d7:ca:97:02:43:22:20:90:ed:34:19:
03:00:b2:64:ab:94:ad:e1:59:13:34:6e:cc:c8:52:
f6:d6:08:64:27:ea:bd:d5:4a:ad:b3:3e:52:e9:cd:
cb:62:54:e8:0d:a6:a4:c6:6b:45:fc:0a:2a:78:3b:
0d:16:6f:1e:0c:44:3a:af:8d:0a:71:a1:34:d8:60:
77:02:7b:66:42:88:03:b6:e0:72:77:27:f5:67:ce:
d0:99:68:72:ba:67:5a:ef:78:44:c0:b8:21:be:8d:
86:4f:b3:91:aa:42:0c:fb:0e:af:ce:a4:ff:34:24:
e9:45:f9:f9:13:10:77:99:32:4f:af:f8:87:d0:0c:
21:78:bb:c6:fb:b4:93:aa:37:dc:8c:ab:bb:aa:be:
af:ff:56:24:c6:b5:06:c5:33:94:1a:4b:f9:a3:ea:
b2:3a:3b:04:22:d8:d3:2d:c6:35:1b:36:b2:f6:ec:
a4:27:6a:f7:1a:f1:4a:d7:f5:49:eb:1f:fa:b9:4f:
65:8f:c6:d1:13:47:79:62:76:6a:47:06:98:ec:5b:
7c:f1:2e:c6:a7:2b:2a:0a:d5:08:3f:f0:c4:75:58:
a3:a2:0f:ba:f4:16:3f:90:b4:69:fd:f5:99:81:1c:
78:74:05:cb:47:7a:71:03:1d:24:c3:ed:85:f2:f1:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:A8:33:D9:27:F8:C8:A6:60:B4:F0:C7:FB:30:C1:3C:48:1F:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.crl
X509v3 Authority Key Identifier:
keyid:3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.194.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0b:a8:78:75:30:a6:ab:a6:a5:37:d0:66:2d:7a:55:5c:9d:
8c:af:50:9b:10:50:40:94:48:fc:6a:d7:50:42:f6:67:09:d0:
a5:82:10:08:88:76:9b:c1:49:56:37:63:ff:73:c4:81:16:ae:
bd:17:96:98:0d:90:ca:7b:0e:5e:45:2d:b6:d2:ea:fe:65:8d:
63:e5:89:1d:4f:10:e3:97:a0:c4:ec:46:6b:f3:37:54:2a:ce:
82:12:ad:bb:41:e7:f6:4e:f5:a7:25:c0:4c:34:7f:ef:fe:80:
4a:5c:ff:ff:26:ec:bc:b7:2e:28:eb:9d:bf:23:22:4f:f2:59:
fb:6b:a3:99:f1:f6:58:d9:26:f6:5e:eb:db:8b:89:82:19:50:
7f:23:99:94:ef:f2:82:13:d3:98:27:f5:f8:a4:10:b0:50:7e:
19:d4:a8:ad:1b:14:44:61:00:4f:eb:f5:4d:87:ac:53:7e:8d:
1b:bd:1f:e3:e6:67:2d:a1:2e:3f:79:16:b7:ac:c7:c9:2f:00:
f1:26:f9:c9:e3:5f:70:7a:ab:b5:e2:7c:12:47:a1:47:3f:96:
88:28:d1:1d:9c:ba:f6:dc:20:69:07:f5:84:40:69:14:08:c7:
25:75:d0:cc:a1:db:ea:a9:63:3a:34:b1:8e:e2:9e:c2:84:95:
82:f3:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:40 2025 by rpki-client