Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa
File: 0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa (raw, json)
Hash identifier: GDzJuO8BmGtoEfssvzGaGaSREg37Cs6nv9DFAz6TteI=
Subject key identifier: 48:44:88:26:9B:DE:A0:FD:4E:DA:18:43:9E:26:40:33:99:3F:A3:17
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B075CD0FAC6DAA2AF3FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.68.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:07:5c:d0:fa:c6:da:a2:af:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a3b92382-71c7-477e-b861-73bd069be2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:1d:95:a9:a4:7e:32:33:e9:a0:23:34:cf:
cb:df:cc:e2:98:f9:27:f7:6f:a9:9a:fe:01:c6:c8:
63:77:63:4a:23:dd:6b:aa:99:71:c8:e3:51:43:d4:
8f:41:bc:ca:4a:1b:9c:0f:e1:f7:a4:ed:d0:b9:50:
29:ee:57:3c:a4:f7:93:3c:70:15:5c:76:20:5c:9a:
ea:d3:c9:82:e7:24:07:01:b5:f1:4b:63:05:35:61:
6a:ca:25:5d:ae:3c:47:8a:d8:6e:5e:e0:5c:5d:23:
aa:3d:20:ba:c6:48:d4:0f:96:54:a7:c5:91:c3:ab:
34:9b:43:27:f2:af:a3:de:bc:7e:97:1c:33:8e:b0:
db:cf:fe:25:ed:44:eb:0c:e9:67:a3:6d:fe:d1:30:
ed:53:29:3c:cc:96:28:f5:47:81:c8:c7:99:5f:fb:
df:65:a6:f8:82:dd:c4:98:e8:34:ef:20:a1:f6:33:
05:f0:c8:54:2d:10:e9:0b:b5:9e:6c:22:bd:fe:0d:
80:7d:9c:26:9b:3a:22:c0:e4:db:9d:80:7b:cc:e5:
8e:38:ae:31:3c:3c:30:6a:30:cb:cb:61:50:65:20:
83:d4:d9:d2:6e:c4:59:72:c3:55:c7:4e:da:e7:b7:
ad:51:31:41:5f:f4:fc:2c:61:83:87:c3:15:7f:2a:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:88:26:9B:DE:A0:FD:4E:DA:18:43:9E:26:40:33:99:3F:A3:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.68.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b0:78:de:a1:a7:a9:42:c9:db:c3:28:f9:6c:8c:a1:8b:94:
99:5b:cc:f4:3b:56:b1:b1:0e:90:4f:00:77:62:20:8b:7a:86:
e6:ec:ae:28:7e:b8:3d:36:a3:5f:77:31:64:36:24:9a:4d:88:
1c:91:39:09:f1:76:c1:9c:fb:46:32:43:0b:b1:9a:0a:b3:88:
fd:8b:42:4a:39:c4:23:2f:a0:eb:bc:e0:a0:f0:6f:5a:60:de:
d4:d9:9e:1f:05:d2:8e:11:a1:b0:1a:16:fb:af:fb:7e:fc:78:
7f:a1:01:eb:8f:6b:93:fa:08:25:aa:4d:01:d1:2d:1f:a4:6e:
6c:36:ef:ee:61:d0:7f:0a:3b:91:f6:21:7d:75:57:5b:1e:be:
9c:00:1c:e9:a1:ea:87:22:66:45:47:76:cc:a2:d1:74:46:83:
c0:4c:3d:b7:d5:6b:f6:1f:93:a8:01:bc:eb:1e:4d:01:6c:2d:
2c:f7:1e:78:8d:5c:ab:3d:b1:11:e6:33:d9:a8:ae:f8:50:c6:
af:03:57:b4:0f:18:7a:21:7d:c6:46:7a:4c:f8:b7:84:fd:1f:
ea:2e:3c:3f:c5:7f:34:86:a1:16:bf:26:9d:bd:22:48:cd:be:
70:5a:b6:b8:73:a0:0b:8b:95:f9:4d:52:4b:24:b1:fc:8d:6c:
33:55:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:25 2025 by rpki-client