Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514c4c96-4351-3a5a-a910-41c5ed5dd971.roa
File: 514c4c96-4351-3a5a-a910-41c5ed5dd971.roa (raw, json)
Hash identifier: ZB2ytqqAL1aqRwT/fQHuBNji1DUaUGHqWWHT/8eFUjM=
Subject key identifier: 7F:7C:EC:F2:A6:A8:D4:2F:0C:0E:FF:1C:49:DD:8A:03:F5:B7:A9:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AFCB95173FA2342E6A200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514c4c96-4351-3a5a-a910-41c5ed5dd971.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.78.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fc:b9:51:73:fa:23:42:e6:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=bc340d9b-18e2-4ad2-9fc0-02eeab02128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:c7:9a:df:c9:f7:c5:22:0a:f8:c8:aa:03:
40:0d:44:7c:c6:35:ee:a4:c4:b7:0d:b8:97:8c:51:
13:fe:5f:71:71:7f:3d:9d:ce:8f:22:9e:ad:36:8f:
ac:0e:64:91:01:8e:db:b2:61:74:65:56:0a:09:8e:
45:26:80:0c:83:16:72:e3:90:92:46:4f:47:63:44:
82:d3:eb:50:9a:6a:0b:f1:6e:e9:82:af:7a:c4:01:
fa:b6:4b:5d:66:d6:1e:5f:a6:a0:71:bb:3f:41:40:
62:40:99:f6:4d:de:a2:6f:6c:13:e5:44:03:ec:5f:
7b:a5:52:8a:4b:76:7b:16:1a:4a:32:71:c3:9e:ff:
9b:71:2a:9e:27:5e:c5:45:07:76:82:38:f1:84:c1:
4b:47:57:62:87:49:db:dd:11:c0:cc:46:9c:aa:09:
80:d3:ce:7b:1b:8f:46:39:83:40:4d:16:c8:f0:bf:
88:65:f0:f8:39:29:8f:69:94:ff:e8:d5:74:87:8b:
1d:49:dd:65:0b:24:1c:ad:5a:a5:42:de:09:62:25:
f3:a4:b6:78:05:9d:17:c4:83:89:c2:43:56:ae:e6:
36:b0:9f:98:94:80:df:c3:d6:a6:11:56:79:48:34:
1c:75:5f:a0:6c:bf:4c:73:81:ee:54:c4:9f:ca:9e:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:EC:F2:A6:A8:D4:2F:0C:0E:FF:1C:49:DD:8A:03:F5:B7:A9:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514c4c96-4351-3a5a-a910-41c5ed5dd971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.78.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:59:3f:03:c5:41:c5:d7:da:35:6a:7e:8f:60:5b:09:30:b4:
a5:b9:94:e2:4c:a9:05:59:1f:04:f7:7e:6a:c4:ea:64:08:28:
82:3a:63:d7:eb:96:4a:ae:49:ef:8d:9b:a5:85:a5:a3:a8:56:
70:cb:33:35:5f:23:87:1f:a3:33:34:14:07:d3:48:ab:bf:9a:
50:93:dd:da:61:06:12:14:54:ff:8b:90:18:5b:d1:4d:00:eb:
f4:6f:68:3c:52:26:8f:e6:89:b8:79:4f:c3:87:96:2e:dd:03:
be:22:47:bf:1a:6c:bf:3f:f9:f2:bf:00:06:34:4d:69:43:5b:
fd:a2:9e:a6:81:18:c7:9e:41:da:60:81:8a:71:1e:a9:2c:09:
af:b8:d0:1c:cf:48:95:10:fe:9b:96:ec:00:56:19:84:49:74:
66:7f:21:b2:cc:e9:bd:0c:7e:ed:a6:12:27:24:32:f2:a6:2f:
31:9a:b7:dc:d0:32:ae:67:cf:8b:f4:cf:28:48:50:2b:15:c1:
e5:a8:c4:b7:b8:b7:0b:14:89:7d:61:47:db:08:c3:68:42:4e:
97:e8:72:86:25:fc:5f:ab:82:15:bc:12:c4:75:5a:60:41:85:
80:5d:38:d5:ba:f1:07:b0:c3:15:da:ad:a3:12:a3:72:59:12:
65:d4:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:53 2025 by rpki-client