Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json)
Hash identifier: 6W9mdpinnsf4mNnkohZNl+xULTPOlA1pzl0x/WjTZYU=
Subject key identifier: 13:14:5B:97:37:8F:10:3F:D0:7E:9D:21:01:36:65:05:4E:92:72:87
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552951854B2E752BBA512900
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 104.151.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:51:85:4b:2e:75:2b:ba:51:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=949a8348-f583-4693-ba49-7846c0f2f672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:5c:1c:bc:90:51:9c:f5:9a:50:d9:dd:07:
2b:4c:34:23:25:aa:cc:a8:27:49:c9:88:e4:ba:18:
29:3d:9b:9d:f9:c0:22:a5:18:11:de:7c:6d:55:1a:
ed:cb:67:8b:dd:a8:c5:dc:9a:95:3a:81:3e:69:52:
49:17:0f:20:7f:68:fe:34:68:61:44:16:dc:2a:05:
3c:68:a5:04:e5:76:65:45:d5:eb:a2:a6:0f:94:b3:
1a:9c:67:83:55:bb:d9:7a:cd:7d:18:be:f1:47:d7:
f8:fc:67:8f:47:96:f1:eb:54:72:17:9c:54:f7:08:
02:fe:c5:6b:62:79:f7:63:b3:45:e0:0f:91:9d:8b:
51:c0:fc:b8:81:71:0a:6c:82:97:7e:2f:ab:0d:ac:
9d:4a:83:dc:de:54:28:7f:76:8c:c4:0c:3a:78:5f:
46:ec:b9:48:da:fb:dd:7e:7e:07:02:db:8e:0e:0e:
f8:24:44:3c:5f:c5:1a:c5:80:ae:dc:27:16:f8:0e:
f1:31:e4:54:84:90:23:9d:ec:6e:c4:31:c7:bb:7a:
98:cf:be:aa:02:7a:e8:27:73:8d:71:d0:0d:28:0e:
ee:9e:e4:98:f3:00:0f:a9:dd:b6:07:e7:aa:f5:11:
69:34:38:e7:14:c9:d2:b0:b7:24:f2:70:99:ac:d5:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:5B:97:37:8F:10:3F:D0:7E:9D:21:01:36:65:05:4E:92:72:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
104.151.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:5a:f8:f7:65:53:f4:6b:ee:4b:ac:09:f8:e4:3a:15:40:d8:
b9:c7:cc:11:07:da:81:00:f5:09:31:b7:6a:8d:38:53:ad:15:
82:c8:4a:df:0f:39:29:05:e3:fd:2a:39:0f:fc:ee:1a:96:dc:
7c:08:55:82:1b:c3:5a:6d:8b:65:6c:85:31:cb:67:62:0f:8e:
0e:e4:ea:ee:25:2f:1a:08:a9:5d:01:09:31:9d:78:34:f0:1f:
29:28:70:60:f4:84:24:78:6f:d7:9c:2b:cb:85:e9:f3:4f:08:
2f:cf:02:d9:06:ad:72:85:e2:73:26:fa:0c:5f:c9:2b:6e:2d:
9f:e1:f0:cb:5b:bf:10:4b:9c:0c:b3:61:2e:f5:01:bf:7c:77:
2c:9e:17:ab:76:21:e4:5f:84:8b:de:6e:32:a7:81:f3:d3:d8:
e7:d6:35:f8:38:e0:e9:3f:17:44:4e:88:93:7d:4d:4f:9d:6c:
17:1d:ae:1c:ab:1d:08:3f:af:bc:2e:43:77:0f:41:48:f9:25:
e3:1b:c2:46:6d:d5:d4:01:50:a8:50:d9:ab:a2:26:29:75:58:
61:33:77:1e:af:4f:fc:47:1f:00:1b:90:6a:2b:ce:7e:b7:03:
9d:30:5a:0b:99:f4:e1:31:0c:1f:96:41:9c:64:88:26:9f:95:
f1:56:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:33 2025 by rpki-client