Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa
File: f21189fb-e23d-3eb9-89ca-2076fda69f76.roa (raw, json)
Hash identifier: zSlOOaFEYaynPhv4ge3B3OC9dRVF2s1Pgoh0klmnvnk=
Subject key identifier: 08:48:F1:47:41:40:7A:4D:5A:F8:AA:87:F6:23:02:D7:FF:D7:F6:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBBC27027BDAE182F29EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.154.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bc:27:02:7b:da:e1:82:f2:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=00a6738d-3efc-49d4-b9fd-9f10f8e6c74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:22:1c:4b:38:35:23:5f:83:f1:27:41:77:
1a:fc:fc:13:17:99:9f:f2:a8:17:86:d2:5a:c9:8a:
82:2a:45:c9:04:83:fb:b2:4d:1e:53:e9:6c:5e:5b:
6d:c1:dd:50:7f:dc:e9:c9:9d:05:6c:4f:be:02:43:
4e:a8:19:2d:f7:72:c4:20:e2:73:a0:55:c0:3d:b9:
85:16:f5:f9:db:12:6e:2a:4a:8a:a7:15:37:4b:2c:
e3:99:01:79:d3:bb:9a:82:7a:0f:53:21:af:e7:06:
3c:5a:fc:89:e0:28:c0:21:f1:da:b1:57:f3:8e:02:
b6:53:41:e2:f0:ec:dc:73:64:36:1d:1b:74:51:79:
a0:e2:38:4a:8f:b7:08:8b:b8:19:c8:c6:78:91:c1:
eb:6d:d2:c8:60:65:00:09:dc:2a:21:5f:39:7e:9c:
6a:99:c6:3b:3d:90:d6:5c:c8:ad:b1:12:b1:a6:3f:
c9:c6:2a:e8:a5:ac:8c:d4:f2:43:33:c1:65:27:6d:
b9:6a:65:66:a7:11:c7:2a:e2:71:92:89:84:1e:57:
e9:3c:2b:a7:66:db:24:4f:f7:a4:a8:1d:33:d9:b2:
4e:d6:23:cf:e2:85:2a:4b:c7:96:11:ba:8a:60:70:
4d:ae:8a:3a:ba:47:43:28:d3:a8:31:20:c6:0b:2f:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:48:F1:47:41:40:7A:4D:5A:F8:AA:87:F6:23:02:D7:FF:D7:F6:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:59:41:eb:57:17:2b:3d:1b:9a:06:ce:6a:27:cf:d0:23:9f:
ac:0d:82:80:c8:c4:d7:55:56:60:f5:9d:81:70:1a:79:aa:d0:
c0:5c:82:a7:33:ef:3b:b2:cb:f9:7f:f2:5d:78:c1:61:7b:bb:
1a:7e:30:92:80:ce:4d:ba:f1:48:93:b2:af:8a:10:86:7d:6d:
d1:39:7b:5d:65:d4:7c:e8:ce:86:f9:6a:d2:0b:f0:f3:99:5f:
5c:ff:9f:43:e5:88:37:c3:57:f1:40:e8:ed:72:a7:de:f9:a1:
52:a5:20:60:c7:a2:58:db:d7:23:67:3f:d3:3f:0d:81:0a:c0:
53:61:e2:24:13:31:24:87:6e:f9:99:f3:34:d2:bc:93:ab:a3:
00:cb:d4:43:46:64:f2:fc:26:8a:89:28:a2:62:c5:06:63:96:
99:32:e2:5a:b3:9d:30:18:93:14:e1:79:0b:d4:e7:90:36:d0:
fd:94:8c:16:a5:49:17:35:11:bf:06:75:96:70:f4:bc:50:eb:
d7:f8:4e:a5:93:ac:e0:6d:a6:70:ed:31:b2:e8:9a:ef:a2:56:
60:4a:90:5b:80:5d:06:30:71:ad:9c:a4:f6:31:51:9b:a2:2e:
59:7b:f4:64:6f:18:24:6b:a0:ef:33:af:16:18:ac:d7:a9:d8:
e1:dd:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:43 2025 by rpki-client