Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/3274fec9-887e-3929-b8ed-52b3f177b4bc.roa
File: 3274fec9-887e-3929-b8ed-52b3f177b4bc.roa (raw, json)
Hash identifier: PFeGZ+Wnesqx7fzCwQHRfrPb07SNlwxPOb4UI+h2jzk=
Subject key identifier: 33:8E:D6:46:98:3F:11:A2:13:05:FC:07:F8:C3:7B:C1:BA:3C:C2:69
Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial: 010D0C9F432858495ABEDD3A17CD3CE217AB9A00
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/3274fec9-887e-3929-b8ed-52b3f177b4bc.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 40788
IP address blocks: 104.153.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:dd:3a:17:cd:3c:e2:17:ab:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=887ffc80-2dd6-408f-a03f-33ba9d905117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:70:d6:82:58:6f:67:6a:c5:b9:df:1c:f3:
b7:6d:e1:7f:f6:c8:0d:5c:4e:55:09:bb:5c:72:e4:
03:4a:ec:ad:9b:a7:37:0a:f0:2e:50:10:4a:d9:f5:
e9:1e:98:10:4a:45:9a:7f:28:f2:e0:14:6a:cb:6b:
5b:e2:44:10:67:ba:cb:8e:ab:76:3b:48:4b:f6:77:
c3:7d:a5:90:bb:d2:b1:c1:c9:03:84:f6:d1:a7:d6:
e1:95:4a:47:a0:16:13:b7:97:c3:97:72:8e:84:19:
d0:41:df:d8:75:b7:b8:bf:92:99:ed:06:11:19:86:
08:5d:8e:b1:e4:6f:74:e2:d5:cf:76:da:fe:2e:25:
ad:fd:30:f7:c7:e3:b5:07:4e:4b:ae:d2:82:c1:c5:
72:d6:e9:62:de:cc:08:9a:e6:bf:31:61:8d:bc:d0:
12:e8:bd:90:0b:f0:7f:74:2a:12:2a:df:b2:29:01:
e3:61:09:2f:c5:12:8d:b6:1e:dd:13:e1:da:ac:5f:
72:cb:26:4e:14:f9:7f:f5:b5:74:43:71:5f:98:58:
8a:02:e4:35:cf:cd:73:8a:60:9f:bb:bd:c8:8a:17:
ae:18:98:57:32:27:60:27:6f:12:fd:a8:af:af:a0:
04:fc:18:13:94:06:3f:fa:f9:4e:77:3d:22:f1:d1:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:D6:46:98:3F:11:A2:13:05:FC:07:F8:C3:7B:C1:BA:3C:C2:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/3274fec9-887e-3929-b8ed-52b3f177b4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
X509v3 Authority Key Identifier:
keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d5:b6:b6:2a:7b:57:e2:c5:ca:c2:e2:24:ae:cd:60:ec:f3:
fc:e8:e8:23:bd:71:c3:92:07:ec:e2:57:e3:74:dc:5f:3b:cd:
b2:f8:e5:61:a7:b4:9a:ca:6d:dc:2f:7d:37:5a:4f:29:2a:db:
b2:f7:81:3d:f2:48:6d:45:e6:cf:1b:a1:3d:bd:19:c4:d7:50:
3f:76:a2:4a:d8:5d:bb:b7:1f:71:84:66:e1:bb:50:19:e1:03:
42:40:67:d3:d6:65:1b:55:89:ad:9e:de:21:ff:af:df:c1:33:
76:2d:96:19:81:b9:32:42:6e:1f:f0:6a:23:c1:d4:0d:a7:8b:
1e:ab:d2:39:dd:b0:be:70:1d:d0:80:c6:05:bd:aa:33:bd:4a:
40:ac:1b:d2:ab:46:5e:c4:5f:83:b6:5e:cb:56:cb:f1:c7:f4:
a6:be:09:5a:85:ec:b3:c9:e5:db:d5:5b:c5:58:7e:37:af:e9:
bb:1d:59:f8:76:fd:75:e3:d3:0c:d1:d6:c7:9c:83:47:9d:32:
bd:79:6d:19:19:7a:55:fb:88:01:3b:ba:91:76:f8:3d:82:41:
57:b0:39:86:e8:c7:0e:f1:37:f2:ae:f5:54:1f:2a:60:64:71:
e9:c4:70:ab:5b:ca:84:ae:37:f0:cf:44:1b:33:7a:10:27:d7:
56:69:44:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:27 2025 by rpki-client on console.sobornost.net