Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa
File: 0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa (raw, json)
Hash identifier: zjFtKN3bEgI0RUp0Ot3pC2KEjr8uu5hnpGSKXGGjnEg=
Subject key identifier: 22:97:31:F5:D1:DF:8C:DA:7C:08:1A:73:9D:FC:07:AD:87:4C:71:0B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB0F84BF05497044DAC900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 137409
IP address blocks: 104.37.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0f:84:bf:05:49:70:44:da:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=e6be7228-f030-45c3-ae94-52d5642148fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e0:47:5b:9b:30:cc:e9:38:dd:47:54:f7:16:
6c:65:19:53:d9:3b:0f:52:35:05:f3:24:71:29:fb:
35:d9:64:dc:3f:4a:7a:da:de:56:93:9f:aa:98:b6:
42:48:b1:63:03:6e:c5:86:b3:b5:47:65:95:03:0e:
15:f5:4b:7e:43:0a:50:79:1f:62:47:bd:8c:2f:43:
4b:b3:d1:0c:40:65:d3:12:c4:6b:de:93:79:a3:7f:
28:b3:db:0f:12:0a:6c:73:95:53:e8:bd:15:87:ef:
88:28:06:17:3a:70:ae:cb:53:5f:a2:71:fb:05:45:
d4:fc:c1:97:15:69:95:df:0a:b9:b3:11:89:d1:6f:
ea:54:9b:87:3e:23:f9:eb:34:2f:00:88:bb:75:83:
e4:d3:a7:9b:57:46:d8:ea:10:cb:f6:29:4c:3e:14:
66:77:16:be:62:6e:df:e5:04:f6:71:19:6e:ba:1c:
70:7a:a4:8e:0b:f1:60:6d:3c:9c:b4:a3:b3:42:22:
49:87:77:7b:54:b3:4d:46:56:ef:7c:cf:b2:0f:49:
64:32:3d:84:60:0a:9c:55:e6:05:c1:46:e0:9d:95:
ef:1c:91:23:91:36:58:da:84:ff:af:b5:7e:99:e3:
55:b4:48:0b:6e:c7:ea:44:7e:32:ff:9f:a9:5e:e3:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:31:F5:D1:DF:8C:DA:7C:08:1A:73:9D:FC:07:AD:87:4C:71:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:d7:38:bd:1d:6f:57:b8:38:54:70:77:4a:27:b1:55:b7:70:
14:78:af:02:63:7a:ee:6b:4c:92:24:0b:88:44:b1:40:6c:8d:
9e:5f:64:cd:39:45:1b:af:9f:db:3e:56:3f:08:d6:06:cf:2a:
dc:41:0e:37:e9:43:9f:36:c6:b5:b8:d0:6d:26:3b:7f:b1:7b:
ec:e7:f8:11:9a:66:38:4e:4c:16:1d:28:ea:0d:7d:8d:70:3c:
12:ad:cf:74:69:be:92:98:ef:25:7d:df:1e:40:e6:be:b5:08:
06:77:50:b6:99:b9:2a:d0:4b:d5:a0:ff:59:73:59:51:bd:95:
38:f3:5b:c9:50:87:77:33:ef:27:97:e4:40:86:5f:a9:ee:14:
7e:6b:04:cd:05:fa:bd:e4:43:a2:e0:88:a3:d9:3f:96:79:0a:
46:b0:c5:2a:d3:56:03:eb:40:05:fa:61:65:2e:34:e8:39:b6:
70:f6:1d:d0:a2:4b:4e:9c:8e:ea:e3:f0:6b:3c:22:db:f2:91:
83:bc:c5:5c:81:17:4a:fd:4a:72:7e:c6:c9:e9:cd:9e:fd:da:
b3:e2:ba:df:76:d7:fd:22:53:3f:ae:90:b0:9d:1c:dc:fe:8c:
77:da:70:8d:35:bb:97:12:22:8c:e0:46:59:8d:54:52:c0:37:
f9:af:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:59:27 2025 by rpki-client