Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa
File: 371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa (raw, json)
Hash identifier: 5EZy3GH20YwgCpNcSGnZoj+6jdZ1HY0jtsxNQUmKr+I=
Subject key identifier: 06:45:39:62:A3:16:78:D8:B7:12:1F:76:1D:A0:E6:76:88:9A:6F:D7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C5438E96DC7A6826F9B700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 12222
IP address blocks: 104.101.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:43:8e:96:dc:7a:68:26:f9:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=7edd3cbc-ed08-4a22-9379-0a010251f83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:5a:2c:10:e2:6e:d1:ff:ac:47:cf:40:f5:
c3:4d:38:91:c1:f0:2e:2a:3d:5e:c3:b8:86:b2:27:
9b:cb:43:92:6d:a4:a9:d2:7c:c1:34:8e:e7:7a:af:
89:c5:2b:50:bd:53:67:04:a4:54:4d:15:d1:9d:6e:
9f:1d:1b:89:d1:43:27:92:a2:ea:7a:eb:ad:47:43:
87:9d:a4:9d:3c:83:bb:57:d8:f9:78:aa:f1:0e:ba:
85:dc:11:65:83:81:9f:c9:35:e6:c4:c0:f4:3e:de:
ff:e3:47:29:7b:40:c8:54:1f:70:40:6d:f3:bc:42:
1c:89:56:4a:5d:19:ae:c9:82:63:c0:f6:bb:0b:ce:
2d:de:1e:0b:eb:e6:a2:9c:27:19:76:c1:ef:e1:ea:
18:8a:56:81:68:fe:3a:a9:a5:54:3c:82:51:57:e9:
ec:ca:d1:91:07:77:cd:2a:c7:0f:84:fa:d6:30:db:
90:91:33:77:18:6d:84:6c:0b:8a:08:d2:6e:82:ad:
03:36:5b:98:fa:99:e2:da:6e:0d:c7:c2:76:4b:fc:
1b:11:7a:a9:96:b5:12:33:c6:42:c2:f2:30:58:4c:
f5:ab:2e:8b:6e:3b:e6:58:f8:95:5b:39:dd:74:27:
5c:da:b0:c9:e1:ed:41:a2:b1:9e:56:62:c1:e1:91:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:39:62:A3:16:78:D8:B7:12:1F:76:1D:A0:E6:76:88:9A:6F:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371d8d59-d00f-3f08-8933-01ae8bbeb9c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.101.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5f:c3:f1:f8:1f:46:bb:33:80:8e:9e:ec:3d:4c:1a:90:e4:
b0:4a:28:57:28:35:5d:e1:8b:2e:65:3b:02:69:00:81:31:fe:
e6:d6:c9:a9:85:d7:cc:72:65:c9:6d:0e:e4:2c:ae:c9:36:91:
8a:eb:99:73:41:d4:9e:5b:8d:86:a3:4a:dd:1a:54:4e:c2:af:
a9:33:5d:af:c0:f8:92:e6:14:f9:f2:00:ab:ad:31:b2:6e:ae:
30:8a:9b:23:c1:b7:9a:2d:ba:4f:a9:44:f9:00:8c:f2:25:0c:
a0:8a:1e:92:85:c6:30:5d:b3:cb:cf:77:40:58:05:cb:ac:dd:
a3:d8:2d:b5:69:80:91:bf:f1:13:6b:7e:52:c6:46:f9:0d:50:
0e:15:62:e6:6d:9a:ab:8d:71:b0:7a:04:c3:43:c2:7c:52:92:
8d:2b:ff:49:92:2a:14:a7:6a:db:f6:21:ad:50:64:c8:ae:21:
05:e3:e0:1e:03:ec:04:e3:8e:cd:8f:41:b6:b7:ed:eb:48:0e:
60:14:22:2d:1a:71:ea:af:a6:1a:2e:40:9c:80:ad:77:f0:23:
91:32:10:ef:90:b3:74:c6:bd:63:77:c4:b4:3b:ee:32:d1:35:
3b:dd:cc:45:20:7e:5f:3a:01:00:78:23:a3:8f:ad:60:69:a4:
66:1b:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:06 2025 by rpki-client