Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f42034c-b838-3173-9b19-f5befa457d93.roa
File: 1f42034c-b838-3173-9b19-f5befa457d93.roa (raw, json)
Hash identifier: gSGy1nNOsTmcfQJ/hIrFnetWwHt8hSOGgrFxFHFJ54k=
Subject key identifier: 8E:C8:2E:20:AC:2D:17:54:09:42:BE:38:D7:28:17:87:03:F4:5F:3C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFD12ED182CC96BAF06A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f42034c-b838-3173-9b19-f5befa457d93.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 33905
IP address blocks: 104.94.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d1:2e:d1:82:cc:96:ba:f0:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b0bf1143-d518-421a-9167-dc0db58b7e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:16:80:90:49:af:f6:1c:ea:d7:c5:99:fb:
5a:1f:88:10:5c:69:de:f5:d5:2e:3c:43:cd:76:32:
8f:c9:31:49:20:f1:2e:c0:f3:43:17:fd:ad:70:41:
fd:65:23:00:2e:44:cd:44:90:b5:7f:9c:ca:8e:46:
75:8d:c7:69:3a:37:69:a8:2e:05:ed:1e:b3:f1:72:
7e:c4:07:2d:7c:91:5c:57:94:4f:33:d9:95:26:0e:
54:52:49:b3:06:46:9b:59:08:79:97:5f:66:cf:04:
f5:81:d4:2a:d4:d9:fc:ec:79:07:01:0d:81:6e:bc:
a6:b2:b6:3d:b0:f7:a0:e6:6c:f7:24:b6:61:12:14:
5c:86:23:f3:77:3a:0d:f6:4a:5c:25:36:31:3d:d0:
0f:ca:8a:af:cb:18:1d:f7:68:dd:ec:d9:89:07:bf:
ed:0e:26:cf:dc:02:13:83:20:fc:f7:7a:f4:83:62:
1a:85:ec:ca:69:1a:2f:eb:ad:fe:9a:77:03:3b:b5:
a5:04:5c:58:17:d2:c9:32:ae:e9:05:ce:08:0a:99:
c4:c7:97:82:6a:cd:15:d1:9a:29:c8:df:a6:03:76:
42:f1:68:21:90:ca:8c:3a:74:4b:0a:6a:e7:0e:65:
d1:36:a1:2c:86:ce:3c:79:16:01:3c:b5:06:97:63:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:2E:20:AC:2D:17:54:09:42:BE:38:D7:28:17:87:03:F4:5F:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f42034c-b838-3173-9b19-f5befa457d93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.94.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:6f:cc:65:25:b3:c4:df:03:3f:c3:44:6d:e6:f5:42:25:7d:
9b:b1:dc:5d:1a:d1:bc:59:ca:b1:cd:d6:06:a1:44:27:12:74:
84:f1:02:26:4b:5f:93:a8:f6:17:39:f6:7f:e6:1f:93:60:a2:
47:37:92:a4:6c:71:44:1f:dd:b8:81:5e:80:4b:a9:82:fc:04:
d0:e5:50:74:a3:5a:ff:a5:51:ee:18:0b:0c:15:9f:8c:2f:71:
8b:fe:c1:6f:66:00:7e:49:aa:b4:a7:1b:fb:3e:85:93:f6:fa:
42:dc:5a:fb:ae:2e:99:e6:e8:2f:6b:8a:2d:19:48:7d:5c:d3:
d6:6d:d5:fe:63:44:a3:06:a5:b7:37:78:fe:a9:9b:0b:cd:b7:
7e:1d:7d:45:a9:70:8e:4c:a6:0e:80:dd:6c:2f:01:8b:2c:f1:
4b:05:2f:ac:11:2d:7e:51:e6:b5:40:65:22:03:68:5a:d3:e6:
d2:b1:8d:8a:21:0d:fa:75:05:03:d7:aa:de:a3:65:78:ed:96:
83:b7:ef:76:93:d9:20:95:48:b3:4c:3e:fb:2a:0a:07:0a:45:
18:36:5d:63:d5:85:fc:33:3b:34:9c:30:1d:5d:98:0c:cd:e9:
70:e3:58:e3:48:6a:9e:4a:99:29:d5:14:78:eb:65:bd:56:61:
b0:45:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:39 2025 by rpki-client