Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa
File: 1414f136-8e5f-33be-a48e-615e862a5b02.roa (raw, json)
Hash identifier: yNqAY97LPm4pKG9lhVgeY9HlyFLKT8ExfHrHbke/Yvs=
Subject key identifier: 34:37:1A:75:39:3A:02:5A:32:63:09:1F:8C:F0:A5:B7:45:05:7F:22
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584819CFDD2A91D36A8E80F70700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 9009
IP address blocks: 104.250.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:dd:2a:91:d3:6a:8e:80:f7:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=1b9fff9d-d26f-4863-8714-85787d53acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:75:65:d0:19:c1:02:0a:a2:e8:49:f5:38:
bf:83:78:a6:63:d9:af:c3:85:c1:12:ac:d9:d8:b3:
e8:97:de:5a:46:d2:e3:11:4c:60:ad:65:fb:07:ca:
a5:8a:4a:af:eb:f4:5d:6d:cf:f3:7c:a6:d7:e4:68:
ff:60:e5:22:2c:e8:9a:dc:21:2f:98:d4:3a:43:00:
85:4a:65:ca:c6:1f:b0:33:96:2e:28:5a:40:0b:3c:
00:35:3c:aa:2b:83:e2:de:d8:23:ce:13:47:a8:c6:
49:b4:07:af:0e:c9:e7:9a:d8:57:ed:03:40:6c:4e:
71:13:65:a1:74:c7:b6:0d:95:50:5b:b0:c8:6d:9c:
32:b2:ac:28:1c:53:08:08:cc:a1:71:31:ba:35:ed:
b8:82:f0:b8:b2:98:d7:d1:4e:83:f7:e4:39:db:1a:
a4:36:f5:90:b8:96:29:55:18:3e:4e:ed:87:9a:65:
b9:c3:86:31:42:18:9b:d5:5e:c6:fd:2d:94:34:a0:
84:74:6c:54:32:63:22:7e:b0:b7:fc:1a:e2:ca:7c:
7a:f0:37:c3:77:6e:6d:34:56:26:dc:eb:61:ac:1f:
d1:ee:fb:22:fe:9c:b0:b6:cb:dd:f7:74:be:13:df:
96:12:07:b5:ec:96:d0:27:d1:1a:c4:5f:b7:df:ca:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:37:1A:75:39:3A:02:5A:32:63:09:1F:8C:F0:A5:B7:45:05:7F:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f6:80:99:87:f1:00:b6:94:09:a8:ba:88:55:1d:7b:70:16:
2b:30:05:8d:59:7e:e5:4a:a4:3e:d8:cc:66:ff:24:86:07:ce:
d8:14:61:55:2c:66:96:79:ee:50:68:25:51:9a:cb:c7:c0:8d:
97:e3:9f:a0:47:ab:1f:b0:3b:0a:50:2d:60:33:1f:c8:9e:c6:
c4:f9:73:80:a7:69:04:91:ee:48:cf:a9:a0:b6:51:cf:2f:57:
df:ad:56:86:f3:de:14:47:88:4c:79:34:27:ce:07:55:33:f3:
88:b2:06:07:4c:16:8d:15:01:49:dc:ea:a5:e7:ff:e2:9a:65:
e4:91:7e:78:b7:88:c2:6b:f1:57:9e:62:46:0f:da:a3:9a:78:
e7:c5:84:c0:9f:5c:74:62:6c:96:21:ca:54:95:fb:68:98:6a:
38:3d:a5:86:de:72:94:04:1a:3d:d8:c6:6a:d3:1e:19:c8:33:
05:41:51:6d:f3:35:23:34:ce:e8:0a:3c:3c:35:1f:fc:3b:40:
f1:0c:e9:d8:87:cb:4d:a9:bf:b8:40:5c:57:b1:25:5a:f8:3d:
d0:5d:27:fe:9f:d5:41:7f:4d:6d:9b:54:f6:df:32:ac:a8:ef:
5f:a2:9f:eb:b4:d6:a6:10:71:3e:b5:9d:f2:c2:e9:05:9b:b3:
ab:bc:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:33 2025 by rpki-client