Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fb73a45-04e1-37bc-934c-841f8b214121.roa
File: 1fb73a45-04e1-37bc-934c-841f8b214121.roa (raw, json)
Hash identifier: Q2Ij+RbVD3QBD4hdDByUz5Bvm8/njOZjE6zlaELvunw=
Subject key identifier: 67:9D:06:EE:E7:3A:E1:56:73:E8:9B:9C:8E:12:EA:79:99:D5:69:37
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0699916E6907C20278340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fb73a45-04e1-37bc-934c-841f8b214121.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.123.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:99:16:e6:90:7c:20:27:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=678223b0-fa6f-4bb5-bd13-9a10449b2fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:85:50:f0:18:63:a2:f6:65:db:94:9d:f4:
2b:a7:00:d7:10:74:64:15:14:ba:93:ad:fa:e7:db:
b1:89:69:c8:10:4e:dc:05:ae:4d:57:29:89:ce:6f:
c4:5e:fb:de:9c:7b:67:5c:9f:dc:78:dd:87:53:7e:
93:96:0d:67:d0:8c:be:7d:94:1b:df:80:60:d8:5f:
d9:62:c6:ab:26:53:d5:f4:77:10:fd:da:7d:52:a6:
93:eb:16:a6:d2:5b:08:f4:90:52:5a:2f:82:9a:fc:
5b:dd:40:2d:ed:f2:fb:de:ca:b4:09:e8:af:c5:de:
7b:fc:32:ee:e0:9b:5c:85:54:bc:bb:52:89:dc:03:
42:f4:c6:db:9c:7e:87:33:1b:71:a4:b9:d9:26:8c:
09:70:50:e3:ce:0a:7c:ee:5a:7e:0a:a2:4d:40:65:
52:81:ad:2a:3f:ca:bc:71:ba:d2:d7:2a:bd:c4:82:
60:42:9c:01:0b:b9:4f:89:89:3c:0f:d2:ff:86:22:
5a:24:a3:0c:25:a3:17:fa:0d:35:cd:bd:8a:ee:74:
2e:92:fb:85:0e:0a:24:13:58:f7:1b:2c:46:d6:27:
2b:cb:5f:75:0d:40:ba:8c:b4:b8:ff:7f:db:69:44:
b6:ea:c7:93:2f:88:2f:1e:89:97:6c:39:b9:14:e7:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:06:EE:E7:3A:E1:56:73:E8:9B:9C:8E:12:EA:79:99:D5:69:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fb73a45-04e1-37bc-934c-841f8b214121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:1a:79:43:18:cd:59:b7:2f:36:c0:26:99:06:26:2b:ae:66:
2c:92:a2:1d:57:64:3a:71:6f:b6:0a:34:31:18:4c:65:05:78:
7c:ee:bc:bf:df:43:a2:b8:b8:f7:14:bc:48:f0:a1:d1:fc:1f:
4d:3e:30:93:bb:05:57:99:1f:69:90:59:b1:73:43:30:a2:9a:
bd:8c:98:38:ec:11:66:ee:3f:90:3a:50:d2:f4:c2:5b:07:8c:
65:c0:87:cd:87:0a:65:1e:a1:e2:e8:69:80:42:21:c5:63:21:
44:d9:8b:e3:87:a0:5a:8f:29:c4:50:d5:d9:8f:20:51:bf:a7:
51:63:62:94:e8:96:c2:f5:73:b3:31:d5:69:ec:1f:ff:0d:97:
ee:b3:44:c8:4f:1f:e3:6e:78:36:86:72:72:3a:af:4e:13:05:
f3:39:2d:92:88:76:7d:cd:c9:aa:de:47:c9:16:69:3a:aa:69:
42:c7:e3:d6:1e:f0:95:46:d7:3d:c6:57:cd:91:67:22:b4:00:
89:62:4e:ab:b4:17:d7:3f:8d:c6:5a:9d:72:1c:af:1c:94:44:
98:3f:ff:c9:5c:19:45:9a:31:3e:19:b4:3a:a9:00:fb:ab:69:
5d:7a:c3:93:e1:87:3c:3f:6e:01:e0:82:9a:35:bd:d9:cd:d3:
dd:b0:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:03 2025 by rpki-client