Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a275497a-f481-3130-ab79-11cf4501b128.roa
File: a275497a-f481-3130-ab79-11cf4501b128.roa (raw, json)
Hash identifier: b1kgkntG24FKlYPdC8zDEYs5z6OU6zv7t4cChr23wlg=
Subject key identifier: 48:78:BF:C3:B9:AD:26:3F:27:24:D3:6A:01:F5:E7:32:58:2A:58:E0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C53DE725CE36AE1081EEE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a275497a-f481-3130-ab79-11cf4501b128.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 24319
IP address blocks: 104.96.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3d:e7:25:ce:36:ae:10:81:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=a1d8d906-9136-42e8-ae31-123e1f06fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:57:6d:e0:61:81:d1:40:02:51:6a:35:16:
7d:b5:55:d7:9d:a6:21:21:d2:53:97:dc:4b:50:97:
2f:41:29:8a:47:01:03:02:3d:85:bb:16:de:f5:86:
c2:ce:20:22:b4:13:7a:28:dc:62:c8:6e:4a:6b:d9:
c8:d3:64:26:98:65:58:7c:1c:ad:88:52:f8:72:5f:
97:d9:ed:d1:5b:d3:aa:af:b2:0d:49:34:77:0d:0e:
ba:a9:fe:0c:d5:7d:18:61:e2:f9:79:95:e6:ec:2b:
30:a1:d8:2c:1a:ff:f0:e9:bc:b9:81:e5:b1:06:09:
67:e7:53:e5:24:3d:d8:e7:63:38:72:6c:e2:18:f2:
d0:55:d2:26:52:66:16:b9:c6:04:2c:23:5a:b2:3e:
87:e7:85:c1:35:72:f8:6e:50:e0:86:4c:6f:c2:b5:
52:71:61:78:0e:33:65:a6:1e:b6:f7:82:41:3f:88:
9e:f6:0a:1a:43:fc:6d:a4:0e:63:af:68:89:43:05:
a3:dd:63:fa:61:83:82:cc:9b:84:b9:93:85:4a:da:
93:70:97:49:c3:29:5e:6a:9c:80:e2:d6:da:e0:72:
f1:bd:55:3b:45:a8:8b:75:b0:28:a2:8a:89:eb:b7:
26:04:7e:df:e7:be:3a:22:55:e0:e1:2f:30:aa:3d:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:78:BF:C3:B9:AD:26:3F:27:24:D3:6A:01:F5:E7:32:58:2A:58:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a275497a-f481-3130-ab79-11cf4501b128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:69:6e:c0:f3:ad:73:c0:d3:d4:2e:43:3c:5a:4e:af:2c:6a:
b3:8a:be:9d:97:b9:d6:b1:48:fb:b4:44:24:42:a2:f8:79:b2:
f5:b4:0b:c3:42:84:ce:1c:f3:08:83:f9:db:b2:ef:cb:d0:1b:
5e:9a:4c:7e:89:02:25:aa:c8:db:b8:6d:16:85:0e:4c:3d:0c:
2b:7b:d0:cc:37:06:1c:2b:ca:2f:f1:dd:ca:b8:d7:1b:10:40:
66:33:f8:4b:96:00:2e:ce:89:cd:57:b1:fb:09:65:96:17:92:
7a:f1:a0:a2:ea:25:cd:76:95:e1:cd:f3:02:9c:bf:b7:44:8e:
e0:75:ff:c4:cd:8c:b3:87:22:df:2f:e9:62:e0:d2:f4:b2:9d:
e0:dd:fe:07:66:43:a6:2e:82:d1:b3:ce:61:26:1c:26:f1:f8:
14:8d:3b:f0:91:ce:45:04:27:f9:ed:a8:98:46:09:32:67:30:
eb:47:3a:50:cd:97:a7:5a:33:ef:d0:11:f7:6e:25:8f:41:72:
a8:a4:20:ec:0e:ec:00:bb:29:71:0e:c9:1b:9e:c1:fa:be:5c:
6d:7b:22:9c:5b:d8:ce:ed:e3:82:c6:2b:47:d3:12:85:1c:7c:
cf:aa:b5:8c:a9:cd:e2:ca:fe:ad:b2:8a:a3:9c:e5:1f:c4:f2:
03:f5:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:54 2025 by rpki-client