Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/284a049e-5a60-3a58-97b1-4e0dc3ae0532.roa
File: 284a049e-5a60-3a58-97b1-4e0dc3ae0532.roa (raw, json)
Hash identifier: 3nP8BWDtGRx7MOdhtD+amEBOcBGgJZ/c0F4sOJnAIW4=
Subject key identifier: 0D:9A:14:39:1D:BE:3D:D5:FD:05:ED:53:84:0F:7D:DA:93:06:24:52
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858495529490F08955F6DFEB27460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/284a049e-5a60-3a58-97b1-4e0dc3ae0532.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 262287
IP address blocks: 104.253.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:49:0f:08:95:5f:6d:fe:b2:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=450e8f4f-5f52-4040-b836-1f0c3ab21ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:61:e6:8a:f9:70:c6:02:a2:28:d6:0c:d0:
7a:1a:36:18:91:50:27:c1:10:3c:6d:1c:a7:c2:f9:
8b:5d:de:08:2f:a1:0d:a5:60:cc:68:ac:46:a9:d3:
9d:f3:32:97:e7:b1:3f:4b:49:ed:4b:34:c4:cb:75:
f8:6f:41:b9:57:a6:28:95:1a:28:7a:e4:fd:67:4a:
8e:19:fc:c2:17:41:41:01:25:f6:3a:6c:0b:00:72:
c3:1a:f3:30:c1:85:a5:f8:15:bc:3d:ca:6f:6e:0e:
91:b5:6a:11:bc:89:df:f1:a9:e8:f6:95:3a:22:4b:
72:a7:b7:d0:ba:3d:6d:95:c1:7b:70:7b:91:f0:fa:
23:ac:3c:ca:ae:53:73:b9:0c:18:33:b8:81:27:26:
ce:3f:c3:22:2d:0c:85:0a:f5:90:38:9d:a1:29:61:
cd:74:23:54:3e:90:70:47:06:f7:38:5c:e8:ba:cf:
bc:e7:fc:95:c6:30:ea:95:6d:75:55:94:73:17:3e:
23:7a:f5:82:81:89:70:d1:06:27:1b:e9:26:d8:21:
f1:69:fc:b0:16:31:3b:68:bf:f5:32:6d:57:30:a2:
3d:21:ad:74:48:f3:03:09:e6:6f:72:d2:e8:58:7e:
e5:50:dc:e0:f8:72:6f:18:8b:99:ea:bb:55:1f:b6:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9A:14:39:1D:BE:3D:D5:FD:05:ED:53:84:0F:7D:DA:93:06:24:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/284a049e-5a60-3a58-97b1-4e0dc3ae0532.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.253.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b2:d6:27:dd:02:bb:80:e1:d7:39:d1:cc:a3:d0:69:cd:89:
34:6e:01:6c:ed:bb:31:0f:30:cd:8a:b7:80:97:08:1b:7b:ee:
16:3a:9c:84:25:4f:0e:e6:1d:ea:d8:d4:4f:de:30:76:83:f5:
c9:84:94:b0:9e:3c:f2:50:44:0d:ed:39:8e:d1:de:a6:40:6c:
72:09:42:40:e6:e5:f8:08:f2:50:cf:1c:b6:54:a7:93:c4:62:
a8:ed:be:59:ad:e0:c3:63:a7:35:c7:36:5c:2d:26:50:d6:2c:
89:3e:03:1d:1e:b7:a8:b7:53:f1:d7:72:b5:3a:c5:c2:04:3f:
f7:c0:0b:65:4f:e8:b0:ca:ff:b0:e7:0c:10:44:9b:6a:c5:bd:
16:b7:14:e4:2c:16:45:b2:f9:fc:be:da:fc:8e:ea:e1:e6:b6:
49:9b:c8:cb:3b:62:a2:43:fb:4b:87:0d:74:b4:e8:85:82:66:
af:e6:18:c6:04:30:2d:24:b4:ed:ee:6a:88:94:8e:b8:7f:8a:
46:69:26:97:2e:ae:62:23:e9:a5:0c:4c:a9:de:18:df:42:41:
8b:2f:71:96:fc:b6:23:9f:91:85:46:1c:57:46:0b:f4:fa:22:
02:b3:9a:13:dc:bd:30:4d:b5:0d:b4:69:b6:0c:c6:0e:c1:c2:
a5:1c:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:55 2025 by rpki-client