Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa
File: c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa (raw, json)
Hash identifier: vk6+SCDaBFLrTDgPEa9UnLEA0R5frsNcZxBTutWBnbE=
Subject key identifier: 2A:B4:89:0B:B7:25:DB:3E:47:C1:04:0B:62:63:E8:2C:65:DF:33:03
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06A8464E8A8AC23802E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.125.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:6a:84:64:e8:a8:ac:23:80:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=022fce35-a2c5-44f1-8159-4f5addfc3f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:da:69:ef:77:41:da:b9:85:d7:5b:66:ae:12:
b6:60:ec:54:dc:cb:82:0f:3c:88:91:77:c9:6a:93:
96:79:0a:3e:d9:85:ab:0c:a4:d6:eb:a1:96:43:1f:
97:20:1e:8b:77:e6:dd:42:f2:1c:e2:c0:99:c7:74:
7e:0c:87:5d:7a:80:4f:1c:1c:7e:ba:ae:85:16:13:
42:69:1e:77:5b:80:dc:f2:e4:a1:de:8e:f9:2f:2b:
7c:61:72:de:09:3e:1d:0d:e0:c7:ac:98:e1:af:fa:
3f:d4:91:0f:6b:87:75:83:87:31:05:0c:b5:f8:ec:
95:20:53:bf:84:58:1c:48:18:5b:21:5a:4f:0e:50:
9c:f9:ea:63:4a:05:63:e7:b0:f2:9b:99:03:6a:83:
15:e2:ba:c4:e1:e1:3a:5f:f5:0a:52:fb:ef:75:2a:
64:08:83:7c:5c:8b:b0:94:b7:73:b8:3d:29:ee:12:
d9:41:7d:cb:0e:18:36:fc:6f:14:bd:2e:c1:20:8a:
40:13:1d:72:46:eb:9e:02:13:0d:c4:1a:80:8e:78:
43:5d:21:fa:6c:47:f9:7b:4a:68:ba:24:87:fa:7b:
63:fd:b4:e3:89:87:c9:c2:a6:18:c7:f5:b2:54:8e:
f3:a3:30:a4:9a:bd:82:5d:48:21:ce:e1:34:74:13:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:89:0B:B7:25:DB:3E:47:C1:04:0B:62:63:E8:2C:65:DF:33:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.125.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:fe:89:25:40:13:cf:5a:25:1e:92:c5:06:76:0a:4d:f0:7c:
44:c2:66:02:7e:4a:35:1f:30:ea:02:6e:ff:24:93:14:14:cd:
1e:6d:79:d7:ce:4c:48:39:f3:3f:01:de:ea:13:b0:47:00:69:
0d:a9:72:a9:64:f8:2d:91:09:f5:c6:0c:00:8b:0a:19:cc:35:
9d:1c:d6:ea:66:f6:96:ab:67:7b:7f:aa:b1:00:89:54:64:22:
1e:41:0d:17:19:f2:0a:a0:98:13:a8:54:f3:fb:28:14:23:9d:
96:67:1d:2b:bd:90:06:fa:c5:a0:08:cc:5c:49:a8:8b:2c:61:
79:87:92:d6:f0:58:ca:59:90:0e:7b:83:45:8c:37:f8:c4:80:
90:51:aa:ac:a9:7f:5b:78:3d:b7:66:b2:1b:e4:13:03:a2:53:
10:d9:40:99:6b:e4:4c:22:b1:56:9d:35:61:ea:89:6e:45:14:
2c:f7:b2:ca:2b:52:98:17:bc:ea:06:f0:6b:84:af:b7:b6:8d:
54:77:fa:2e:23:c5:b0:fb:9f:b4:72:53:d3:b8:0b:07:73:8c:
99:59:1f:c3:eb:ec:99:29:58:52:ff:0f:ee:2c:96:dd:66:86:
c2:19:c9:fc:9d:2a:4c:21:3f:da:4e:ec:86:28:a2:1e:66:d7:
f6:90:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:19 2025 by rpki-client