Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa
File: f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa (raw, json)
Hash identifier: G01w8YhVPcG/UvRb5dILebBlO+oG5k3vQES7AAZEzBw=
Subject key identifier: 6A:6D:17:E0:2F:0E:CC:3C:90:CB:30:D8:31:37:A3:B6:7B:87:5E:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBD5F1CFC15747D82CE380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 104.154.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d5:f1:cf:c1:57:47:d8:2c:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=9fc15aa0-df9c-49ca-8cd6-8abf99589a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:50:09:53:ea:2f:25:bd:22:cb:ad:cc:fe:
08:36:58:0d:a1:07:44:79:49:8f:65:4a:86:69:24:
82:f0:ae:34:00:7e:0d:0c:cf:ab:03:22:ef:19:1b:
13:10:49:c4:04:b9:34:5f:fc:b7:93:fd:40:ce:ce:
46:05:ee:af:94:46:52:d9:b0:5e:8a:b9:a9:ee:7d:
dc:5c:bd:41:fd:b9:06:cf:69:3c:63:f4:03:32:85:
fd:8e:91:dd:72:b2:82:87:53:05:64:ee:1b:18:e2:
c8:d0:10:18:1b:64:4e:24:ce:61:70:f5:84:27:f5:
43:12:08:9f:4a:e8:6c:0a:32:bb:10:c0:be:6d:18:
0e:1e:01:74:bf:ff:7c:98:02:ab:f6:11:ae:72:03:
d6:dc:42:67:33:cb:6a:84:5a:c4:bb:2f:3b:b4:6a:
2b:aa:d4:61:d7:77:9a:d3:88:92:03:f4:87:f8:d6:
7f:e2:f7:93:ad:c1:47:c3:9d:27:36:fb:e0:10:7d:
d8:ec:fa:cb:5e:5c:a4:46:c7:b4:4e:06:ef:5a:f0:
99:a3:c5:5f:74:ee:78:dc:73:d4:b0:5c:35:b5:d0:
f6:4a:79:af:8e:15:2a:93:53:6d:e8:f1:cb:f0:61:
54:ad:01:ac:c0:b7:90:82:bc:dc:ef:e8:15:fc:59:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:17:E0:2F:0E:CC:3C:90:CB:30:D8:31:37:A3:B6:7B:87:5E:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9f6f308-2c24-3b84-b4bc-00e1c2f0e5b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:77:fb:80:52:e6:d2:d1:4b:d2:46:76:23:d6:82:0d:c2:7f:
e1:f9:bd:47:ac:58:49:15:9a:6a:9e:45:8f:2a:85:25:43:4f:
bb:32:3c:4c:cc:d4:66:8e:e6:98:df:36:6b:de:4e:31:1b:5b:
35:38:18:c2:68:cd:0d:be:08:3a:29:fc:0d:57:e0:67:0e:99:
02:b2:30:dc:0a:cb:b9:c3:5e:97:60:9c:b1:63:ff:0a:28:40:
4c:81:e9:d2:70:d1:43:2e:da:d9:33:a6:b7:d7:77:63:91:6d:
34:0c:23:bd:5e:e7:52:75:99:18:71:d5:2e:eb:0d:d8:02:62:
55:6b:8c:a3:e5:6e:ea:9e:88:05:bc:eb:27:56:c6:02:e6:af:
b6:ab:00:4b:c0:2a:1b:ce:5f:ac:e4:87:a4:1d:87:4b:4c:88:
c3:68:90:d3:38:7a:28:7e:bb:59:28:ee:05:ee:33:de:df:47:
0b:c3:0a:c2:d1:02:2f:8f:bb:00:e0:d4:ce:fa:f6:80:09:ef:
c0:b8:97:a8:94:f7:e0:db:b6:0d:dc:51:bc:15:dd:00:a7:e2:
07:09:fe:8c:ff:de:2d:82:2f:e5:bf:eb:41:74:2d:ee:39:cc:
2c:fa:b5:cc:1c:ec:45:dd:5d:06:09:5e:a8:1d:c3:52:07:ce:
b5:05:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:48 2025 by rpki-client