Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa
File: d55b35e9-c386-375b-a25f-baf47ef2f095.roa (raw, json)
Hash identifier: Vfp/A+eGs71dngGLU5c/RS7azajr8GoYc1GXN+Q2sJY=
Subject key identifier: 2B:66:9F:E2:BE:34:64:2B:86:AF:0E:DC:6A:04:65:B4:69:BE:47:26
Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial: 010D0C9F432858487DD13B5D7C2382C17D81CF40
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa
Signing time: Thu 09 Jan 2025 21:44:30 +0000
ROA not before: Thu 09 Jan 2025 21:44:30 +0000
ROA not after: Wed 09 Apr 2025 20:44:30 +0000
asID: 26548
IP address blocks: 104.218.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:d1:3b:5d:7c:23:82:c1:7d:81:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Validity
Not Before: Jan 9 21:44:30 2025 GMT
Not After : Apr 9 20:44:30 2025 GMT
Subject: CN=eac709c8-c260-4909-9212-b96fb39e5c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:92:e6:d8:a0:c2:cf:1f:2c:c5:29:1b:86:
51:f6:2e:22:9f:d9:df:c5:00:fe:71:02:61:07:43:
c5:72:69:ff:f0:41:e4:b1:f3:7d:1d:ff:b2:f3:31:
09:9a:2d:74:61:f4:22:13:16:e0:99:9f:f5:6a:fc:
74:64:83:10:92:cf:75:33:21:02:81:04:aa:26:77:
8b:ef:31:55:57:27:4a:a7:e2:88:b3:c9:af:7d:a8:
cd:62:25:a2:22:58:00:7c:52:9c:48:b9:87:16:c2:
97:2f:d1:6a:83:46:ea:95:e5:f6:ea:2b:3f:57:62:
6c:6b:07:a9:86:01:d5:33:46:e1:e3:ab:99:8c:39:
7e:1e:3d:e0:bf:a6:df:ff:e3:f8:76:91:49:66:b2:
24:0f:16:ca:6f:2f:b0:c9:59:b6:4d:03:2b:80:a9:
74:d9:9e:d4:8d:a6:03:5c:02:f9:8d:4b:ab:13:3e:
45:b6:5d:f4:4f:08:be:c9:b4:ca:fc:d1:4f:7d:06:
b2:05:e4:91:c3:1f:af:b8:f2:eb:e0:cc:fb:bb:d5:
e7:22:8f:fc:8f:4d:c4:33:8c:df:70:e1:04:36:75:
5a:34:98:22:ce:c8:a4:60:f0:ed:c1:1e:b7:9c:a9:
bb:e1:4a:5b:ac:e8:24:ec:91:9e:3f:fa:5a:64:97:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:9F:E2:BE:34:64:2B:86:AF:0E:DC:6A:04:65:B4:69:BE:47:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d55b35e9-c386-375b-a25f-baf47ef2f095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
X509v3 Authority Key Identifier:
keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.218.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:db:de:17:e4:0c:10:62:30:cd:12:90:35:2a:a8:01:f5:70:
70:57:36:f4:ea:ee:4d:a0:82:5e:48:98:c7:9a:a5:3e:9c:6f:
d1:1a:f5:3e:69:46:fb:6e:0a:56:9f:f1:dc:71:9a:41:78:c8:
0d:f1:8d:d8:c0:1f:24:1d:99:f5:f3:dd:c0:7d:14:75:c4:5f:
a5:07:d6:a7:19:37:f6:a8:bd:cd:d0:08:f2:f8:e5:f5:b3:f4:
7a:96:c6:e0:ac:84:3f:e5:70:f5:fb:b5:49:9f:5c:e3:17:d6:
6e:62:3e:93:96:8d:a3:7f:6c:a6:41:1f:1f:c3:01:6d:2e:4d:
85:f2:9e:4c:d3:ec:ad:3e:80:b2:ef:ee:e8:b2:46:44:27:81:
e0:f3:b6:b0:74:c9:06:be:68:24:35:9d:94:0a:c4:7c:49:a5:
aa:b7:82:ea:8d:8a:60:a9:f0:09:8c:8b:f4:65:99:38:d5:84:
20:d0:ef:b6:5b:d9:2c:5d:ea:36:19:a1:03:eb:01:d4:b0:f7:
76:14:46:4f:a7:c3:76:42:b5:c0:9f:00:c5:46:da:32:5e:37:
1c:2a:30:18:95:e1:ca:4b:68:fe:21:c4:1e:7c:19:72:57:3b:
f3:c7:f0:9f:b6:6f:10:05:17:e0:17:80:c1:89:39:65:a5:94:
3a:9a:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:48 2025 by rpki-client