Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa
File: 0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa (raw, json)
Hash identifier: 63JLcE3U/YS4LfXpqNXZR/INkCCQnmVMrxF/3810o+M=
Subject key identifier: 0E:7D:66:EA:1D:1E:52:AA:8D:95:B7:E2:05:17:70:61:A1:BB:0B:F8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5A58472DF74C92BA03380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.83.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a5:84:72:df:74:c9:2b:a0:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=f27dd77a-5511-4067-9a0d-10e541d0b967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:c6:e9:90:44:c2:98:36:ef:12:8c:ba:36:
a2:20:9a:b6:6d:86:34:5e:45:83:b4:2e:72:68:3d:
09:99:7e:57:08:b8:92:94:35:f1:64:90:88:b9:e5:
ec:ad:6f:e7:29:ca:69:7b:54:7f:31:3a:03:8f:33:
3b:ef:6e:fb:76:8c:12:16:42:d9:ca:cd:e4:ec:25:
a7:fb:d2:82:f7:fb:e9:2b:2a:35:09:f1:72:61:1d:
f5:37:7a:86:8a:65:32:5c:1f:68:51:b9:34:12:2c:
dc:ed:01:69:1b:78:a0:b3:c3:63:ba:0c:95:1e:df:
29:5e:22:5e:7e:83:42:b6:4c:1f:8a:d0:1b:ab:c1:
bd:01:c7:e9:2c:00:eb:01:8b:87:14:aa:f8:a1:8a:
73:7a:3d:60:d7:00:42:79:b6:09:28:42:6b:6c:98:
9f:a3:89:b6:72:23:92:51:d1:74:6b:67:24:16:3a:
14:b7:b9:6c:11:fe:67:76:6b:fc:74:2d:76:44:0d:
2a:05:dc:32:b6:7d:89:47:12:91:a3:20:65:d3:35:
0b:85:39:69:60:83:ed:24:f1:88:6c:8a:7b:d9:8e:
1e:3b:13:4c:c0:fa:12:e3:0d:05:fb:b3:c7:d3:4e:
4d:91:48:d8:31:00:a2:72:60:c0:7f:59:b8:95:87:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:66:EA:1D:1E:52:AA:8D:95:B7:E2:05:17:70:61:A1:BB:0B:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e290f5e-d6ba-33d3-9a1c-a55583a2aea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.83.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:0e:21:8c:f5:84:d0:7e:fb:28:c3:9b:77:29:19:49:e8:cd:
c4:66:30:23:95:02:48:24:1f:22:00:02:e8:bb:40:fa:8e:db:
2b:18:13:7b:e4:ce:f1:06:93:5a:29:33:60:a9:2c:1b:79:0c:
ab:7c:ba:14:50:ba:90:bf:4f:da:e3:78:a8:c7:f4:d0:d0:95:
6f:dc:16:5a:d7:80:e6:17:95:2d:f7:38:1b:be:5f:f6:4b:ce:
31:22:e6:1e:9b:66:18:21:e6:b9:72:db:ba:94:7b:7c:e6:17:
fc:41:c1:56:50:08:3c:35:08:ce:e5:09:a7:5e:b2:2d:40:f4:
d5:3c:f4:e5:4e:b3:bf:23:f8:82:cc:f0:ec:03:2c:5f:46:57:
ca:7c:0c:70:23:c8:49:12:77:7a:82:87:37:1c:5d:d6:e0:8c:
e7:e5:d6:e6:8d:06:e6:e6:96:a3:66:b4:1d:fd:01:db:69:10:
9f:a3:02:05:83:89:43:7a:fa:7d:46:20:96:23:d3:d3:6a:5e:
b1:bf:ce:9f:4a:ec:df:bf:c5:f2:78:af:87:35:18:e5:61:fd:
56:6c:1e:5b:94:8e:e4:d1:ff:16:30:f4:6a:a8:e4:7a:1d:61:
b2:24:81:69:a4:51:1f:32:b0:7c:77:d0:a7:2a:de:a5:6d:94:
b5:b9:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:51 2025 by rpki-client