Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4caed1-e92f-3ece-a993-2c374f472a75.roa
File: 2f4caed1-e92f-3ece-a993-2c374f472a75.roa (raw, json)
Hash identifier: 9JHurrpb7G85cCqD1kTIm/oZR+zlENAaWFSZMYQdYy0=
Subject key identifier: 8F:37:43:8F:86:F6:83:DC:73:B9:5B:2C:F3:D7:0F:E7:82:EF:96:14
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AF97ACE698CFDF07F7A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4caed1-e92f-3ece-a993-2c374f472a75.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.71.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f9:7a:ce:69:8c:fd:f0:7f:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=267ca910-82bc-4abc-b120-cf93d15081e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:6b:bb:95:74:e8:3e:bf:1b:34:e2:af:4d:
ad:7f:9b:60:fc:f4:03:26:33:06:34:7d:86:6c:bf:
04:95:22:1c:3e:4a:7b:75:ac:ac:ec:37:ab:0b:7c:
18:f0:88:72:26:31:20:a4:53:e2:4b:f0:c9:7e:de:
5e:23:da:51:62:03:83:14:da:89:6e:e0:88:2a:ab:
55:65:7a:14:b6:50:e2:23:6b:67:d8:76:ec:25:35:
25:a1:6d:00:74:d1:20:f5:f8:d9:f1:5e:1f:bd:12:
8d:f2:ca:f9:24:7d:1b:e2:f6:50:07:ca:f9:41:30:
95:70:15:96:ae:84:a6:74:73:15:ff:64:58:aa:1d:
ba:cf:63:f6:2c:76:00:08:c5:3e:4e:b4:66:d1:69:
4c:de:b1:4a:8c:09:96:4e:48:d9:65:62:f7:79:47:
63:d9:c7:21:f7:de:b1:ec:63:b9:cc:13:5d:14:65:
ed:b0:f6:60:a2:f7:7a:a4:c2:58:d8:75:d3:cb:7e:
da:0b:4d:53:90:e8:bc:c4:19:14:e5:65:54:2c:ac:
ad:d3:95:d5:d1:f6:9e:8e:c0:80:bb:85:6b:3d:bc:
1f:ee:5e:03:65:39:19:a1:61:20:c0:8b:4e:02:4d:
5b:47:27:47:39:92:8d:86:63:3d:9a:4d:2e:99:a6:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:43:8F:86:F6:83:DC:73:B9:5B:2C:F3:D7:0F:E7:82:EF:96:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f4caed1-e92f-3ece-a993-2c374f472a75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:1f:fa:29:20:9c:3d:d8:71:f6:ee:ec:0e:d7:4a:3b:c9:56:
b5:d4:0b:a0:69:26:03:d7:c6:9a:45:76:24:2b:c4:62:a0:c4:
ff:f6:da:97:d9:e9:39:c4:89:c1:78:8f:6b:2b:ea:af:94:8c:
80:08:1e:78:f6:e9:7c:95:68:99:c7:9c:f9:66:2b:dc:ff:c9:
90:67:19:31:26:69:54:c3:f3:a4:4c:13:80:0e:d6:c6:3e:6f:
48:99:c2:7e:c1:6d:75:2c:e5:d3:a3:2e:7b:04:d7:e2:d8:0f:
05:1a:fa:e7:34:22:65:d5:b8:80:b1:60:de:02:b0:f7:e2:69:
e0:df:b0:92:5d:6c:17:38:b1:52:d0:8d:a4:f9:04:2c:42:4a:
a4:e8:08:61:94:ae:b4:18:ae:d8:dc:e9:99:b8:9d:f1:1f:61:
ba:17:51:ad:a7:ed:b2:7b:98:66:b6:0a:1e:e1:b4:08:fd:0b:
a6:5a:2c:fb:4d:ef:7f:e8:de:69:dd:ba:44:77:17:c9:27:c3:
33:63:3f:83:f5:fb:e6:b1:c3:bb:01:b1:8d:7f:e6:0f:57:24:
d9:ed:81:69:1a:ae:fd:cf:83:67:18:94:3f:21:88:f5:48:39:
c3:89:06:42:fd:63:f5:a0:2e:bd:ae:32:5f:09:16:de:ec:c1:
09:0a:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:39:59 2025 by rpki-client