Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa
File: dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa (raw, json)
Hash identifier: BHRTj31PAwBOxh1a9yKbFEOf+vUMFJm8/Jj8i8o9YnE=
Subject key identifier: 7E:C8:D3:EA:18:69:61:9E:59:E4:40:13:5C:21:28:54:7F:3C:A6:92
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584981D45FD4F61BB6FFF3D82680
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 398478
IP address blocks: 104.233.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5f:d4:f6:1b:b6:ff:f3:d8:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=9c2b67e5-3750-4fcb-aa2e-449943525728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:4b:c8:94:5a:97:ea:07:7e:1b:11:94:55:
d7:fd:9c:47:a4:bc:42:7a:bb:0d:04:de:46:ef:34:
00:fa:3a:b8:f1:77:66:2b:2f:5f:28:23:4e:39:58:
46:9b:85:3c:ac:66:6a:19:9d:d6:bd:92:47:f8:89:
8b:2a:b2:db:5c:81:38:c8:80:1b:b8:d4:8f:1f:ee:
ab:89:3d:0c:11:bb:af:e6:c1:47:cd:db:12:bb:eb:
31:6c:1b:78:2e:85:cd:7a:be:47:21:bc:cd:f0:1b:
49:76:29:9c:0f:eb:ca:61:6b:c5:d5:90:90:90:bb:
68:80:92:ef:ec:86:4c:d1:33:9a:a4:d7:d1:a1:43:
f2:f2:cf:25:ef:71:ff:0b:af:e5:8f:6b:90:d3:2d:
93:fa:cc:0b:83:39:fa:58:b6:af:5f:1b:0b:7d:eb:
3f:49:f2:df:fe:4a:cc:28:a4:d2:64:fb:d2:10:72:
3f:b9:02:98:fc:70:e7:08:de:11:58:2a:13:e6:a0:
fb:9e:24:87:2c:bd:20:c8:df:03:ff:a0:e9:d4:0b:
8c:55:c6:26:2b:e7:e1:f0:9b:50:6f:db:b6:fa:ac:
63:b7:77:c5:30:0b:cd:4b:1e:c7:61:29:95:ef:6e:
2d:6b:e4:32:b9:81:9a:17:d2:7e:bf:e4:38:f6:13:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:D3:EA:18:69:61:9E:59:E4:40:13:5C:21:28:54:7F:3C:A6:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.233.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f1:eb:ff:0e:50:41:31:f0:0e:f2:1d:11:40:36:78:28:cd:
47:a8:8d:15:86:ef:d7:18:e4:0f:e2:c7:53:dc:89:f0:db:f6:
58:f7:cb:00:7d:a9:1e:cc:f5:1e:57:1d:70:24:20:1a:c4:7c:
61:80:4b:1f:43:26:05:02:59:9e:da:f7:a6:50:38:ea:43:cb:
a0:f2:1b:d3:d0:e9:58:06:cc:42:05:0b:a5:7c:cc:aa:cc:46:
87:c8:66:0b:ce:b9:b6:27:b6:9a:06:cd:cb:91:22:d8:12:15:
29:58:99:71:68:81:f2:c7:c0:6f:13:63:22:14:44:39:f7:99:
69:24:3a:16:14:9d:11:08:71:8b:26:cf:ff:ab:1b:19:e3:91:
47:f2:49:1c:74:32:0e:76:50:5f:54:9f:a1:5c:98:20:06:d5:
f8:88:82:5b:fb:6f:c3:65:82:e3:ba:d0:f0:68:35:34:4d:64:
14:7d:04:ca:5c:fe:1f:fe:99:cb:08:90:23:8c:fc:1a:ee:69:
39:98:12:bd:5b:27:ce:0e:e2:19:66:21:e8:69:fc:89:39:3d:
cb:15:34:8f:c5:3a:d8:02:45:9b:3b:df:7c:ef:b8:e6:3b:7f:
12:11:54:3b:18:b9:9c:c3:02:ac:62:e4:d0:21:02:8d:c7:eb:
90:2b:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net