Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa
File: 730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa (raw, json)
Hash identifier: LFnuUHxbYJgMuyF1P6JzkYRd6Lvkf4L2KsBoeFzwjYw=
Subject key identifier: C1:8A:F9:C7:26:5D:D6:73:CD:07:5F:CF:F0:A7:62:D3:23:F6:E9:CE
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848DEA116B0ADFF50989EA8A280
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 1239
IP address blocks: 104.218.198.0/24 maxlen: 24
104.218.199.0/24 maxlen: 24
104.251.93.0/24 maxlen: 24
104.251.94.0/24 maxlen: 24
207.230.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:16:b0:ad:ff:50:98:9e:a8:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=766f9369-b4c3-45e3-9341-204711c484c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:7b:0e:17:f5:52:78:9e:68:45:ff:3a:f2:
99:67:b2:90:82:f1:ce:18:5a:5b:a7:0b:5a:4d:33:
58:5d:a4:a5:9e:94:ad:70:c9:ce:5c:88:44:34:e5:
78:ae:8c:73:55:ca:d9:dd:4e:19:5f:11:aa:0b:e4:
35:34:52:df:ae:5d:28:0a:98:c5:4b:85:d6:99:79:
36:55:9e:b9:13:a1:55:a7:16:e3:7a:1e:39:4d:44:
42:ce:90:0d:f2:90:c2:f3:31:af:e5:72:42:23:28:
78:2d:f0:98:f2:4a:66:ed:15:47:3c:33:e9:3e:89:
06:9c:1d:d4:be:b6:04:fa:41:e3:05:65:56:ce:86:
df:a4:0b:02:3c:a5:45:23:a2:3f:a6:23:81:21:1e:
d4:f2:c7:4c:77:d5:05:5a:90:07:cf:2a:08:f0:e6:
51:d0:5c:78:3f:90:33:c9:03:93:c4:e6:b2:e8:69:
62:0f:bb:42:36:68:9d:11:27:02:cc:c9:47:11:8a:
06:78:2f:2c:24:f2:8e:dc:70:ea:36:55:e5:6a:ad:
72:41:e5:70:5e:3e:74:5b:a7:9a:4c:3a:19:c4:61:
b7:68:41:2c:44:dd:51:e6:d9:7f:d5:d1:21:93:60:
d9:26:e7:f4:28:1f:c6:7c:39:3d:70:b1:3f:44:89:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:F9:C7:26:5D:D6:73:CD:07:5F:CF:F0:A7:62:D3:23:F6:E9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.198.0/23
104.251.93.0-104.251.94.255
207.230.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:72:78:a4:f7:8e:9b:d9:17:d8:96:bc:97:c4:ef:af:66:79:
77:d7:b5:b9:47:a1:82:b8:cd:18:41:4d:64:42:02:39:b4:4e:
bb:fe:3a:07:82:10:59:e9:09:6f:04:be:78:d2:67:95:0d:08:
02:49:7e:b6:8b:6e:0f:91:8a:9f:be:db:13:f7:86:d0:e7:ba:
ad:62:0b:82:c3:1b:2d:ff:cf:cf:6b:35:ab:eb:2d:a0:1a:e9:
ad:5c:2d:a4:b5:4c:8a:39:6e:ba:af:29:d3:79:3f:45:8a:a7:
2a:09:3d:24:c0:9d:5f:68:7b:67:d6:4f:e3:93:51:26:2c:00:
0e:27:14:47:89:8d:9d:58:28:12:bc:24:f8:da:c5:44:b8:22:
82:f6:ea:86:25:a5:06:08:11:cf:45:3c:ab:e9:68:4e:64:a2:
82:d6:d4:34:83:ac:30:fe:3e:22:6f:94:8e:6f:25:78:ef:d4:
53:29:0a:34:52:a8:42:ea:26:c2:3f:19:ea:0c:af:35:85:9c:
bd:57:0d:33:e6:8f:b9:a5:6d:6f:12:80:03:28:09:f4:00:17:
81:d5:db:cd:87:8a:24:3f:22:c1:04:4e:b7:ba:94:9f:a3:e3:
19:5e:0a:c9:4c:56:39:40:12:13:3a:72:92:a4:ee:72:9c:18:
60:cb:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:18 2025 by rpki-client