Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a023b846-348c-3a6c-b4b6-ea4c6d110980.roa
File: a023b846-348c-3a6c-b4b6-ea4c6d110980.roa (raw, json)
Hash identifier: zRvpPH3aJc/sfdTrl8Z3bRN1V4i/rZqI9tMGHhvY/gE=
Subject key identifier: B8:88:B7:BC:79:4A:80:32:C8:C6:F5:9A:7B:AE:59:91:EC:E1:7A:E3
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285848DBE0A57BC308AE7044B3FF80
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a023b846-348c-3a6c-b4b6-ea4c6d110980.roa
Signing time: Wed 12 Feb 2025 14:21:33 +0000
ROA not before: Wed 12 Feb 2025 14:21:33 +0000
ROA not after: Tue 13 May 2025 13:21:33 +0000
asID: 212238
IP address blocks: 104.219.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:e0:a5:7b:c3:08:ae:70:44:b3:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Feb 12 14:21:33 2025 GMT
Not After : May 13 13:21:33 2025 GMT
Subject: CN=8d32d145-c123-488a-a603-db297550a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:fd:b2:22:9d:43:5e:d7:22:4c:f6:8c:1c:
5b:86:aa:4c:2e:2e:c0:97:b2:10:b6:d7:33:06:d9:
a7:dd:ab:fa:2c:d7:4d:dd:f8:5e:66:51:7f:33:ed:
b4:97:1e:69:11:df:71:66:aa:1c:79:ed:ec:56:04:
76:dd:c4:9e:ff:a7:ce:13:ce:04:5f:08:af:4f:af:
33:47:19:ff:27:ee:ca:5e:cb:8b:87:e0:03:53:ab:
e2:4a:de:7c:2d:ae:b4:d4:59:04:ba:d5:86:55:e6:
ab:fc:fb:3f:e4:8d:ad:20:ac:5d:17:2e:40:a0:31:
92:86:5f:8a:cc:55:fa:71:dc:30:90:42:7a:d9:6a:
c0:38:fa:cf:9b:35:e1:e4:51:60:eb:19:f3:68:93:
25:9a:74:a0:91:59:1f:92:ab:f7:cc:64:a9:f1:30:
81:9a:03:87:7a:69:93:0a:5a:7b:68:f7:6d:e9:0d:
4d:4d:60:6c:5d:ea:5e:8a:ba:9f:13:d7:70:20:7d:
17:6d:cd:0b:52:62:4c:17:fb:4d:c0:93:c3:45:c5:
38:8d:bd:dd:e8:c0:b7:e5:2a:14:cd:fd:89:04:d2:
20:7f:73:16:99:22:a6:9d:2d:d1:81:f6:b5:ad:d0:
12:f9:59:43:10:b7:49:9d:44:a4:36:89:ce:b0:d7:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:B7:BC:79:4A:80:32:C8:C6:F5:9A:7B:AE:59:91:EC:E1:7A:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a023b846-348c-3a6c-b4b6-ea4c6d110980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
104.219.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a6:bb:d4:44:2a:74:b5:0e:53:ac:bf:61:79:d0:b2:21:19:
5b:c3:6a:0a:4e:57:70:99:92:52:97:2f:ab:b2:4f:8c:9d:49:
26:f5:c6:9d:55:9c:9c:49:cb:82:e5:dd:25:fb:d4:03:fd:95:
db:f3:45:1c:9c:b7:40:b5:da:09:1f:89:c3:57:57:69:4c:a5:
ef:4b:35:0a:64:4d:b3:ff:4c:b7:bb:85:ca:b8:af:b8:cc:44:
15:39:c0:28:ad:0c:3b:ca:af:1f:8e:26:a9:72:20:19:01:53:
eb:0f:df:00:66:54:20:da:58:fb:94:77:22:7e:77:aa:82:23:
b5:d1:d8:fd:d0:08:b8:44:bc:e1:9e:fa:7a:00:4f:3f:be:63:
fb:67:69:dc:32:cc:9c:d7:87:53:1c:fe:10:c4:45:de:f5:d1:
2b:5c:2f:93:64:79:45:d1:86:a7:7d:6a:f8:d1:27:ba:9a:51:
4e:83:73:3c:36:64:18:55:6c:87:09:3c:99:67:02:9d:ed:c0:
3e:76:6a:6b:b4:d1:f3:d9:f9:95:42:11:92:60:91:c2:3f:60:
cb:76:35:5f:1d:71:1d:60:c6:d8:de:3f:af:40:81:85:b3:b9:
b5:db:65:b3:54:25:a2:59:cf:93:c1:a3:0c:6d:bb:be:1e:cc:
b9:de:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:21 2025 by rpki-client