Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa
File: 47f6e568-69dc-343f-b596-bf5bc2189e57.roa (raw, json)
Hash identifier: ksfrTJzRzv/zQQnoOiCxkWxDeCvBeq/7nckTkpUlVns=
Subject key identifier: 5D:76:21:67:A4:30:23:5D:C3:1D:7D:FC:E0:DB:05:17:5E:0C:06:0E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584849457A11F366ECB8B3C82000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.89.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:7a:11:f3:66:ec:b8:b3:c8:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=6b020445-cef2-4adf-992e-48b7cfe2df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:60:2a:1e:16:ba:c4:ec:24:a1:ec:4a:f7:
ac:87:e8:da:86:53:37:ad:4d:e1:33:34:39:b5:5e:
0e:0f:dd:a3:9b:35:88:ef:12:70:24:00:4e:83:a0:
34:b5:ad:60:8e:94:28:42:58:7c:ef:0c:d3:b3:f3:
89:10:35:cb:d5:04:0b:40:54:f4:00:1e:10:67:72:
2e:2b:90:d3:f5:eb:86:8f:5e:27:90:ea:b9:d0:75:
50:00:b8:71:a6:91:6c:fe:16:60:54:d0:06:e6:ea:
e5:fa:d2:42:d3:b8:cc:64:a3:c6:0f:f8:d0:9a:7d:
d5:a0:55:a7:e5:4c:b4:9c:ef:58:e6:2a:d9:81:95:
77:56:3e:f4:44:c9:e5:d5:ac:84:87:bc:19:a9:77:
94:82:77:06:6b:27:e2:e5:5b:26:e0:1d:a8:06:cd:
0b:91:97:8b:8c:42:2d:ac:33:6a:91:3c:b5:d7:8a:
75:c7:dc:6f:cc:30:e2:d0:d6:8a:2d:3e:94:c2:59:
ee:bd:a5:b4:2c:af:9c:9e:4d:0e:79:e9:6d:53:14:
b8:98:28:a4:3f:c1:ee:68:42:e8:2c:4c:49:7b:25:
f3:09:38:b4:c4:ef:d5:6c:aa:35:fb:1d:8a:73:42:
c2:4a:83:ac:8f:df:56:f0:d6:1f:75:0b:c7:b3:7c:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:21:67:A4:30:23:5D:C3:1D:7D:FC:E0:DB:05:17:5E:0C:06:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.89.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:54:e6:b6:ed:75:ef:42:ca:f9:82:c6:0b:17:0a:cc:a7:55:
98:ee:39:c4:b6:3c:1b:2d:26:b1:1a:a8:73:b0:99:ce:3b:37:
42:f9:b7:71:0a:f6:30:c3:2d:42:aa:fb:c9:28:41:50:1e:bb:
e2:9b:36:42:0f:90:a9:44:6a:86:35:8b:a8:2a:45:ef:ab:a1:
11:e1:fd:69:6c:2e:99:b4:af:3e:1e:e8:a3:1c:ee:dd:d2:a4:
b2:e4:18:0d:ba:e9:d9:0b:d6:04:06:82:d2:65:01:b3:1a:28:
2e:33:f8:c7:25:c4:90:3d:e4:c8:7b:d4:16:ad:02:cc:42:78:
13:27:cd:16:7d:15:1a:db:d3:f4:c1:32:ee:9d:f0:1d:d2:3c:
59:63:66:48:24:b9:b7:93:87:1a:33:bb:71:15:02:94:40:b0:
82:4c:76:0e:55:f1:d4:17:aa:8d:a7:b7:4a:75:35:2b:af:6d:
7a:3d:66:bc:14:93:6a:c3:c8:0e:fd:d4:24:53:ee:8e:de:eb:
e8:0b:02:60:b2:41:4c:17:df:e8:e3:52:15:89:bb:35:57:b9:
8a:16:7f:3d:99:68:1a:49:d4:be:aa:ba:f6:37:50:6f:d8:94:
4b:ec:05:7a:76:0b:25:1b:d1:a0:46:47:99:48:0e:08:27:9c:
23:9a:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:22 2025 by rpki-client