Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed773950-9457-3598-b56f-dcbaf96e3721.roa
File: ed773950-9457-3598-b56f-dcbaf96e3721.roa (raw, json)
Hash identifier: xTh/u5wCGljvbj28HxHVpuH93DW+T/+JeLHf3h0d7dg=
Subject key identifier: 77:AC:FB:74:45:62:B1:36:96:85:2A:5A:23:A0:46:41:2C:63:75:D0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBB99D091A8A30A74FBFC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed773950-9457-3598-b56f-dcbaf96e3721.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.196.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b9:9d:09:1a:8a:30:a7:4f:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=4f97a495-326b-4f21-9f9f-e3b9285b9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:45:67:bd:fc:37:01:78:e6:ba:83:93:46:
0b:56:d0:3a:da:7a:ba:ce:a1:b8:bf:75:d3:9f:46:
ad:6b:a0:9d:12:35:14:ac:69:c0:42:60:8d:f9:0b:
76:66:88:58:62:f8:31:d5:b3:07:a9:9a:13:11:47:
9b:8c:4a:d4:f9:ad:b6:79:fe:14:d4:fe:00:68:53:
3c:ec:d9:96:2b:b2:83:11:37:ae:6f:cf:6b:9c:88:
63:16:b3:a6:b7:b4:93:be:79:0c:a9:45:a4:b9:1a:
84:87:46:bb:34:22:ff:8d:21:2e:fe:9f:f4:b6:c2:
37:3d:b0:e7:22:7b:34:ce:14:1d:e8:20:c8:33:b2:
0e:d1:2e:5a:69:88:49:a5:6f:9d:dc:d8:68:17:4f:
1b:80:11:eb:e4:b8:70:9f:51:11:4d:c7:d1:2a:0f:
ac:fa:6a:c2:94:43:ec:94:f8:98:7c:9e:97:5d:8e:
78:cd:25:4e:bb:24:68:e2:c5:48:4f:26:90:af:47:
f3:e7:bd:bc:28:09:bc:d4:bf:43:c5:91:4c:3c:81:
47:2b:ba:aa:5e:ae:47:a6:93:fd:da:4a:a6:3c:5c:
0a:d0:0b:19:cc:19:d3:a4:7d:0e:69:76:49:e5:ff:
75:e8:93:5e:82:6b:d0:07:11:f9:ff:b1:0d:67:9a:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AC:FB:74:45:62:B1:36:96:85:2A:5A:23:A0:46:41:2C:63:75:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed773950-9457-3598-b56f-dcbaf96e3721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:70:ef:4b:f0:67:7d:88:ea:fa:5c:8d:bd:69:e7:3a:d0:8e:
d6:12:6e:52:f7:9c:16:7a:1a:6f:98:35:a8:e4:8f:77:af:71:
8d:ec:ca:3b:cf:b5:50:91:f8:54:44:0f:48:5e:f0:b9:b4:2e:
29:dd:6a:16:cc:87:bd:0a:41:19:d2:7a:1e:7f:47:3b:f9:a1:
07:f0:38:14:48:dc:4e:46:c9:7c:8a:65:2c:a7:45:4b:d4:63:
77:57:23:c0:02:e2:94:62:71:62:d5:92:2b:c1:6e:f3:88:0d:
9b:f0:ae:aa:60:8f:54:f2:dd:bd:04:19:d8:94:0b:b1:a8:9e:
1e:f1:33:6d:6d:a7:89:6f:e0:77:44:1c:b4:9c:8f:b3:12:31:
97:89:88:17:57:d0:45:f6:e0:8f:31:d6:f3:6c:f3:15:2e:0a:
c2:3a:ce:ca:11:72:ef:97:43:7c:af:44:31:6e:59:b9:5d:e7:
47:af:4a:38:d0:d3:6e:55:6a:b3:a8:29:bb:9e:25:53:99:c6:
9c:41:e1:06:76:67:98:b9:e8:28:b8:9d:a4:17:72:9c:48:d2:
da:6f:e9:e0:47:4d:dc:46:a1:32:ee:4c:87:79:ca:db:fa:9d:
6a:85:c0:f0:66:6e:10:c1:91:85:c2:bd:b8:fc:ba:30:64:4b:
1c:c9:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:33 2025 by rpki-client