Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f2ecdc2f-de93-3a39-9660-b320ace592e0.roa
File: f2ecdc2f-de93-3a39-9660-b320ace592e0.roa (raw, json)
Hash identifier: jG/xyd1XTN87Ym7wFtMP5/cedh9zpH9jNailz4tU4w0=
Subject key identifier: FE:C2:F0:52:5F:48:AB:93:1C:13:91:2F:DC:7B:AF:0C:2F:CD:F4:53
Certificate issuer: /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial: 010D0C9F432858487B85B32DA97158861EA81540
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f2ecdc2f-de93-3a39-9660-b320ace592e0.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 209242
IP address blocks: 104.36.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b3:2d:a9:71:58:86:1e:a8:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=096f9a4e-9021-4c4f-869b-830ca0db6337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:bf:7b:3f:c5:9b:07:51:79:62:9d:a5:3e:
6a:32:ae:e5:a5:22:5c:97:1a:95:a7:5e:a0:db:6e:
65:6f:30:d8:c7:77:4e:83:30:8b:ef:ca:33:10:42:
b4:79:fb:6a:d2:86:4c:51:bd:f4:03:9c:3f:e1:6c:
9b:0c:69:34:8a:e7:50:8f:bc:e2:2c:60:98:7c:9f:
5f:ae:11:79:f8:c9:c8:cd:75:ec:c8:35:02:a2:f9:
b7:80:56:f1:b2:60:ec:ed:c1:99:40:6e:d1:5f:d6:
a4:65:c7:6a:b7:3a:05:89:55:d0:88:80:ba:09:54:
08:42:93:78:c8:0b:98:a9:60:b9:93:b2:4e:e3:87:
8d:9f:e6:af:3e:97:af:6b:59:31:3a:d6:e2:e8:d0:
f0:df:b0:62:e8:1c:16:29:df:8e:6a:3c:a6:02:f5:
de:24:a9:7f:b6:e1:55:ce:7a:f6:1d:97:69:3e:37:
90:fe:df:1f:6f:cc:02:1f:43:a7:c0:02:65:25:b3:
0b:f1:82:39:03:05:07:af:a8:b8:71:6a:9a:dd:2e:
63:1a:4f:ec:0c:a8:7a:81:ed:19:34:58:d6:22:34:
ba:1b:50:f0:6a:cb:14:df:12:ea:86:9c:77:1a:0e:
ba:a4:48:41:2e:e8:ec:52:ac:81:34:31:a2:a4:b1:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:F0:52:5F:48:AB:93:1C:13:91:2F:DC:7B:AF:0C:2F:CD:F4:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f2ecdc2f-de93-3a39-9660-b320ace592e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
X509v3 Authority Key Identifier:
keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:de:d8:7e:d8:8f:52:4e:88:ab:44:6e:1e:c2:bf:db:16:e2:
a3:ce:d2:14:2b:a2:1c:e6:7e:47:56:3d:ad:c3:92:91:f4:cd:
b1:20:a1:70:b0:c8:fe:01:90:26:c1:70:e6:76:ae:32:53:83:
b6:b4:2a:76:c3:c4:a1:0b:37:36:81:67:b5:27:d6:9c:f7:db:
89:72:24:92:7a:1d:28:0d:63:19:af:90:58:05:77:fb:16:7f:
58:cc:89:29:5c:f2:12:c0:01:30:e2:a7:eb:6c:1f:2c:e2:bf:
38:c9:92:e1:47:40:35:50:d3:c0:5b:13:c5:05:5f:ab:21:e7:
c5:15:12:f1:cb:d5:54:fa:d3:22:79:47:f3:be:3c:2f:a4:07:
37:a4:f2:a4:57:88:23:f4:c1:46:d3:4f:52:c1:0d:12:0c:fe:
21:1d:d7:da:e4:fb:fb:62:e1:d5:7d:01:2c:dd:f5:04:47:ed:
6c:23:30:42:31:f7:37:fd:00:22:53:f3:74:09:80:d6:0b:75:
d2:78:e3:a3:ef:3c:4d:6a:4a:98:86:84:c2:b8:2f:b2:ee:98:
5b:04:ce:15:ab:81:1c:cf:39:27:36:fa:a0:c0:3f:81:df:33:
12:b7:aa:5e:25:66:8b:cc:e3:a0:92:d1:9a:bd:8b:29:75:33:
af:9e:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:09 2025 by rpki-client