Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f906a37-c6d3-341c-a94a-9c3b40682244.roa
File: 5f906a37-c6d3-341c-a94a-9c3b40682244.roa (raw, json)
Hash identifier: HtHOtEreZ7mU+henYvm1Lx/6XyqvKYgt3E8tXQnuGaE=
Subject key identifier: 0A:1C:69:2A:92:DE:1C:8C:88:DF:30:43:07:08:E9:BA:4B:8D:E3:1E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AFD4301C0366FCA2C0500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f906a37-c6d3-341c-a94a-9c3b40682244.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 24319
IP address blocks: 104.79.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fd:43:01:c0:36:6f:ca:2c:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=658e1d5e-c56b-40db-b875-e5e7018b0b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:b8:e7:15:a7:94:47:a4:c4:b9:95:aa:33:
27:14:68:bd:a6:00:08:aa:4c:a3:aa:d8:fa:29:a3:
d1:f0:18:09:98:cb:42:f5:43:a2:a8:e2:90:98:bc:
bb:86:0f:58:0a:8b:88:f3:3e:90:c1:e5:cf:37:98:
ef:5a:a8:4e:0c:1c:2f:30:19:3b:36:13:4a:34:df:
59:58:64:84:ef:5f:82:0d:1e:0f:32:b6:67:6d:d8:
fe:ba:35:48:c4:9a:37:06:6b:23:f4:6a:fa:a0:96:
a8:fc:09:8d:b2:d2:d0:ee:46:1b:8d:b5:92:2c:74:
34:20:71:72:a0:fe:01:c0:31:34:cc:49:0a:e5:43:
1f:dc:7f:cc:c8:ce:3d:89:5c:40:25:56:11:1a:0b:
1c:92:46:c4:21:d4:ff:cc:8f:2d:97:29:38:1e:bb:
f7:1d:11:07:47:cb:58:4e:c9:ba:13:43:21:4e:3a:
ae:59:8a:f4:4f:5b:97:da:fb:4b:2d:e4:be:cf:07:
92:86:c7:ad:0a:d2:51:3b:7e:d9:1b:4b:db:12:47:
08:38:18:6c:ba:22:55:7a:52:c3:24:8c:8b:47:3f:
58:ac:2f:c1:3c:38:fc:1a:70:0e:9c:a7:5e:3c:71:
30:ed:0f:b3:1c:6b:86:06:70:05:de:4d:33:2a:f8:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:69:2A:92:DE:1C:8C:88:DF:30:43:07:08:E9:BA:4B:8D:E3:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f906a37-c6d3-341c-a94a-9c3b40682244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.79.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:d1:25:05:ca:85:fb:d1:57:eb:d9:94:6f:2b:1a:d9:7f:e0:
a0:e8:a3:b5:b1:04:34:c3:94:ed:89:4c:1d:32:5a:5a:82:29:
61:70:84:ba:d3:df:4f:72:3e:73:c6:f0:aa:d5:b7:b6:03:e1:
a1:12:ce:b2:d6:6e:55:a3:2e:79:f3:ff:fc:06:5b:63:2c:cd:
b7:3c:2f:db:dc:f0:61:ec:99:80:e4:45:ce:9a:d2:68:e1:9a:
27:b4:3b:a7:73:ab:5e:31:16:03:00:f2:10:ce:94:72:7a:2d:
05:cb:65:16:ac:e1:8d:5c:63:e5:a2:7d:a8:6c:30:cc:ec:41:
a2:93:20:e2:62:c1:68:d2:77:75:5c:2b:71:3e:fd:ea:6a:0b:
6f:ed:39:e7:de:e2:31:76:af:01:fb:9a:b8:af:ac:27:33:0a:
cb:6e:fe:3b:a4:ab:7e:76:ea:a4:39:d6:8c:30:81:3c:49:86:
7c:bc:20:68:1e:6b:a9:1d:c4:21:b1:5f:74:36:cf:29:de:e9:
35:fc:e2:73:4a:ed:49:85:d7:ac:8e:f6:f4:33:ad:6d:0e:9a:
ca:2b:5a:91:8d:71:b7:cf:84:ab:87:d8:8f:1f:dd:c5:4e:ff:
a9:2f:06:6a:bd:0b:d5:64:65:64:c9:1b:d6:a7:5c:de:fa:e5:
b9:09:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:38 2025 by rpki-client