Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa
File: 839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa (raw, json)
Hash identifier: gOuSh0+mirNhrL93gKtzI/TZMZmQ33s79GdaBPNBOzA=
Subject key identifier: 38:E3:7D:22:7E:DF:37:A8:D4:FA:64:AE:D4:3E:13:05:F4:AA:08:39
Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial: 010D0C9F43285848C9B0DB54A83A9D6FA9FDC580
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 6507
IP address blocks: 104.160.128.0/19 maxlen: 19
104.160.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:db:54:a8:3a:9d:6f:a9:fd:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=bb4e2653-7763-47c4-bb89-991bb8509dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:d4:d8:ed:b8:e2:ea:13:06:a9:10:da:59:
91:3a:a4:85:0e:d5:06:cf:b8:aa:6a:18:db:9e:46:
14:c5:23:e1:1a:ee:39:65:de:1d:0f:e7:29:ce:ab:
ae:cd:29:89:34:97:77:b3:41:8e:99:49:d9:7e:55:
17:85:bd:25:c3:84:10:02:42:f0:14:8a:6e:2e:8d:
3d:79:a3:4e:e9:40:1b:03:98:bf:81:f4:8f:a2:c0:
b4:59:5d:8e:1c:c4:9c:1d:1f:01:2d:e7:bc:57:d7:
7c:06:29:68:1f:47:d1:a9:cc:8b:9d:21:3f:b7:81:
4e:7c:c3:45:23:45:b3:7e:04:4c:8e:95:fc:d0:01:
12:56:e2:f5:4d:18:93:ca:de:fd:2c:6b:b9:0e:8a:
4f:03:06:fc:d9:36:d0:21:56:7d:72:c8:ec:ee:d3:
d9:05:1c:c3:dd:14:d0:f1:36:3d:77:e3:ab:d4:02:
6b:29:b7:4e:29:5a:76:f1:28:b7:d8:2b:52:b1:0e:
8d:f9:90:ac:63:e1:37:69:5f:a7:6c:9e:d6:51:64:
65:75:57:5c:d6:92:b6:4c:85:53:7c:42:93:6d:d3:
4e:e5:f6:5f:fd:bb:20:25:a0:5c:b8:69:fe:10:48:
0c:25:75:cc:23:44:58:75:7c:4a:21:78:6c:f7:27:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:7D:22:7E:DF:37:A8:D4:FA:64:AE:D4:3E:13:05:F4:AA:08:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
X509v3 Authority Key Identifier:
keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
sbgp-ipAddrBlock: critical
IPv4:
104.160.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:21:70:8c:d2:b1:0e:e2:91:0d:f7:03:96:51:d0:65:fa:42:
0a:9b:db:7b:0a:2e:69:77:64:ff:bc:81:d0:f9:cc:64:f9:3c:
7a:55:05:8c:95:88:d8:bf:78:43:dc:59:21:91:37:90:76:e7:
a1:e8:8e:a1:71:58:2a:d0:a2:58:38:29:7c:90:2e:f1:a9:17:
2e:59:cb:85:4d:cd:1c:3e:a6:96:b7:8a:6b:03:fd:12:3b:3b:
9f:6a:f0:96:fa:42:35:9f:51:7b:18:79:8b:70:04:81:b6:39:
b9:1e:a4:ad:5e:b1:5e:b5:aa:37:27:c4:fb:ed:69:57:22:18:
ba:10:06:26:c4:04:17:80:4a:f2:e0:1d:8c:ce:33:3a:d6:e6:
21:3e:32:3e:80:2e:fc:90:16:ec:51:dc:ca:0c:02:b7:de:e1:
7d:e3:e1:ef:74:0b:82:1f:5a:2a:61:18:f9:86:8c:43:23:87:
86:f7:b8:d2:59:40:ca:24:65:cd:f9:7e:b5:1a:0e:ff:ee:4a:
bd:e7:64:d0:d4:ba:5f:67:56:ea:0f:f4:c3:8a:65:48:f7:99:
c4:78:4e:6b:4f:a4:28:4b:f3:86:b2:92:f5:9b:d5:b4:0c:cf:
18:a6:41:cf:76:05:8a:b1:70:f5:34:36:cb:79:cb:c3:9b:5e:
b0:76:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:16 2025 by rpki-client