Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa
File: 29ee82f2-26f5-3427-b2a3-e130b3600811.roa (raw, json)
Hash identifier: fF4HMkm5x/vNzEwmPROQNIlDo76skY1Z8HaVjpPhHVY=
Subject key identifier: 93:C5:2B:1B:21:4F:C2:C7:91:96:BD:A1:C4:EE:E4:55:AD:24:6D:3B
Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial: 010D0C9F43285848B8F0C7517B97F0A4865D2F40
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 14445
IP address blocks: 104.249.137.0/24 maxlen: 24
104.249.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c7:51:7b:97:f0:a4:86:5d:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=b67afa51-bfea-4114-a3b7-7596ccee7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:64:fd:30:20:3a:69:b0:5c:a6:7e:90:a5:
17:bc:5f:f3:b7:9f:0b:5a:49:18:64:90:3b:23:6b:
27:03:00:82:57:f8:e5:78:c2:07:e6:46:e2:e4:f6:
c0:01:0c:d4:ff:2d:c8:d6:e1:f5:54:07:13:dc:6a:
5c:6f:61:f0:e6:47:ba:f9:22:61:e6:5a:5c:de:b9:
6c:b5:91:4d:c5:a6:8a:14:a6:b5:68:36:58:bf:64:
58:b6:0d:83:b8:fa:d9:0e:21:be:82:28:f4:29:e7:
d7:10:24:bd:6a:9b:9d:15:5a:71:a1:8d:0d:30:54:
e4:87:36:4f:0d:3d:74:eb:ab:cc:36:46:da:5f:a5:
c2:e1:e8:73:43:e8:08:e7:9a:43:6c:56:f3:b2:ab:
a9:11:6a:70:9c:11:d5:d5:bf:21:af:8b:f0:2b:4c:
98:b3:0e:03:51:16:b0:77:4c:42:af:cb:e2:77:af:
0b:8a:25:d0:3a:1e:0a:ad:24:7a:90:d8:40:18:4b:
8b:c3:b3:dc:fb:86:5e:4b:49:61:f4:75:57:94:51:
91:6e:40:c9:01:89:0c:ae:b5:42:fb:30:30:d0:af:
1c:d0:8a:b9:35:7f:dc:39:ce:4d:19:ed:2c:94:c0:
e8:bd:85:0e:f2:c3:8f:a6:ed:06:f9:47:10:18:fd:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:2B:1B:21:4F:C2:C7:91:96:BD:A1:C4:EE:E4:55:AD:24:6D:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
X509v3 Authority Key Identifier:
keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.137.0-104.249.138.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f0:14:37:83:95:07:35:85:62:6e:0e:9d:3f:29:ec:d6:8d:
1f:30:f8:89:df:5d:e6:f9:62:d9:42:89:0e:c8:48:44:9c:e4:
0c:4c:4a:5a:64:87:e8:6b:52:dc:20:cd:94:d1:0d:24:d5:c3:
69:f7:8a:0a:12:f1:30:6c:0f:e0:9d:45:d6:cb:ba:d0:70:5c:
da:2b:17:a2:26:7f:dd:0a:d8:09:b1:3a:0b:8c:41:a9:98:31:
67:20:68:ba:3e:a8:7a:a1:f1:fa:50:80:f2:8a:60:e5:84:43:
75:1e:3c:d1:2f:10:fb:91:00:0c:64:71:e1:4f:e7:77:29:f1:
95:ac:6d:90:e5:ec:99:aa:2e:20:b1:6f:c5:13:22:b3:c6:68:
aa:4e:17:6d:2b:cd:0f:73:b5:a3:8d:77:93:0b:40:79:df:b4:
38:72:8b:94:8d:1e:48:1e:c7:04:77:48:fe:a9:16:fa:31:07:
30:95:71:58:22:7e:99:27:08:ae:74:36:a2:62:0c:69:d7:24:
d3:91:d4:e5:d9:c9:e8:6e:32:7f:3b:a7:14:d0:8a:38:48:19:
79:bb:4a:a2:79:3e:fa:07:b4:3d:57:cf:f9:89:fe:4a:ae:7e:
54:7c:26:2c:28:f6:cc:f8:2b:9f:4a:12:af:c2:b7:93:b6:53:
46:31:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:16 2025 by rpki-client