Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90496ec0-d349-3cbd-85ee-6fa076074c1f.roa
File: 90496ec0-d349-3cbd-85ee-6fa076074c1f.roa (raw, json)
Hash identifier: 9Xov5QF96c7ZYmOZP4z7snJ8rTiM5lCwO0h8fnd+qY8=
Subject key identifier: 0F:35:C4:C0:93:B1:51:43:48:F5:72:7D:FD:03:D3:95:45:55:99:E0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0686DD57790DBB8C3693C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90496ec0-d349-3cbd-85ee-6fa076074c1f.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.121.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:68:6d:d5:77:90:db:b8:c3:69:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=b2c4f00b-245d-4378-89ba-c830f3091ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:a3:ad:04:ef:3c:1f:38:04:5a:4d:4c:83:
52:27:29:c2:42:f9:68:ad:38:9a:12:94:07:0c:62:
46:29:3b:b6:73:0e:b6:6a:aa:59:ed:d2:59:75:6f:
64:74:5c:76:90:4b:08:02:ae:61:11:9a:36:ef:a1:
94:7e:6f:de:30:a5:13:81:f8:76:f9:13:87:16:21:
5c:5c:b4:2a:ef:1a:a4:28:a2:9c:49:84:08:1e:f3:
7f:2e:0b:b2:a4:f7:20:ae:88:61:f1:d2:85:92:5f:
7b:b4:4f:5d:34:67:ca:9c:85:2b:8c:36:56:df:1e:
b6:f8:ac:03:dc:0b:9a:72:67:71:5d:87:67:39:f4:
93:ca:98:a2:5a:02:24:8e:19:07:e1:58:43:7d:a8:
eb:89:33:66:44:69:90:ed:67:83:dd:9a:14:bf:b6:
b0:05:1e:05:92:69:cf:36:c8:79:8b:de:e7:a6:20:
87:7d:f7:28:f8:b3:66:e8:05:a7:af:9f:4d:85:ba:
ac:1a:d8:2a:b0:72:5c:26:69:03:91:e9:fe:dd:ef:
e4:91:2f:75:cf:ed:b1:47:23:53:fe:4e:5c:03:6b:
58:24:59:dd:64:ed:67:c6:44:9f:ce:9d:40:27:17:
23:e2:f2:82:97:7c:a5:9e:85:b3:bf:78:55:78:34:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:C4:C0:93:B1:51:43:48:F5:72:7D:FD:03:D3:95:45:55:99:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90496ec0-d349-3cbd-85ee-6fa076074c1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.121.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:71:64:a3:85:75:a9:fd:fa:ce:7a:cc:6c:af:13:ad:17:da:
e3:db:c3:3f:c5:01:30:df:ce:43:69:a0:3a:af:72:47:7f:2f:
c5:c8:fa:c1:f3:81:de:02:fa:9a:b0:b7:08:dc:9c:4e:e6:dc:
94:8d:7b:be:80:33:ed:95:80:07:74:64:f5:32:82:27:08:3c:
3f:c5:f1:c0:bf:1c:e2:10:34:56:4d:e6:1f:fd:5b:28:6a:b7:
f9:82:e3:d6:df:fc:f7:b6:9f:e4:73:a3:36:b2:ec:6e:87:f2:
b6:98:d2:58:fd:3a:31:b7:4e:46:5f:1d:65:fd:f1:5e:e5:90:
81:e2:05:81:37:91:c4:a7:a3:09:1f:f6:89:09:4d:01:f1:c3:
92:bc:23:7d:64:52:53:b9:0f:3a:81:5e:96:b5:54:65:d5:32:
d2:e4:07:da:dd:1c:83:ba:55:67:a0:2d:15:13:8b:4d:8d:4b:
8f:d5:ee:42:35:cb:5b:45:00:86:65:54:5e:dc:fc:fa:5d:67:
0b:b8:89:3d:7f:70:b3:42:2c:91:2f:29:cc:1a:9d:e1:55:22:
4d:b2:98:22:94:00:53:41:bb:ea:0a:c7:d0:7d:f2:8c:30:ee:
38:11:6c:b2:a8:fb:96:e7:58:c8:46:d1:a9:61:dc:ee:3a:5d:
90:85:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:42 2025 by rpki-client