Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4738aa5-f7f5-383e-88fb-13af584fbaea.roa
File: c4738aa5-f7f5-383e-88fb-13af584fbaea.roa (raw, json)
Hash identifier: nZP7r+q7DHLkYMXN5Qw2OzhoFTy7AfVsDZ0ZMPFOtUc=
Subject key identifier: 8D:9D:05:03:4D:7C:61:A7:5E:D3:8B:F1:ED:FB:AB:1B:A9:1A:01:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AABE5CFF063361B1B700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4738aa5-f7f5-383e-88fb-13af584fbaea.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 34164
IP address blocks: 104.90.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:aa:be:5c:ff:06:33:61:b1:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=b5f3b6b0-47fe-4e81-b081-f2ccd02d52b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:42:6f:70:72:1b:6a:f7:63:8b:be:ee:61:ce:
47:75:e6:b9:b8:94:15:00:d5:1d:67:17:ef:b5:41:
92:6e:c5:dd:f0:a1:bb:38:19:da:8f:3c:12:04:e1:
d2:8f:43:30:50:5f:1b:3a:32:df:42:58:ed:eb:f9:
bc:ea:88:03:f1:c6:3b:ee:8b:c6:b9:95:de:5a:ff:
65:9f:0f:6a:75:b6:2f:da:e8:c6:3e:e5:f0:96:33:
9d:ea:95:99:3e:c9:67:15:e3:e1:ce:b5:d8:11:53:
ec:a3:b4:98:8b:59:50:62:98:6d:71:8b:b3:58:43:
58:7c:1d:51:f0:bf:ab:4d:7f:f8:62:af:7d:79:09:
9f:a4:66:12:bf:92:a9:90:a4:b9:86:f6:80:5e:32:
e9:a9:53:0a:fa:4c:8a:fc:07:54:f7:87:89:a2:de:
d6:d6:76:8d:22:33:9c:e3:8b:75:e9:ae:9c:46:05:
0c:55:6b:df:cb:88:25:ed:63:72:47:80:c6:99:33:
fe:7b:8c:6e:6c:7a:43:71:dc:21:e7:dd:89:af:64:
ad:ad:f7:3b:88:f6:4f:a8:32:9b:36:73:47:d8:3e:
e0:ae:e9:ff:0d:0d:4f:3e:3f:33:57:b6:f8:36:43:
48:35:85:42:6d:5e:e1:4e:e5:e7:8d:a3:ae:aa:29:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:05:03:4D:7C:61:A7:5E:D3:8B:F1:ED:FB:AB:1B:A9:1A:01:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4738aa5-f7f5-383e-88fb-13af584fbaea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.90.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:0d:27:3f:6d:cc:6a:a2:19:77:4b:23:3d:a0:56:74:5c:61:
96:5b:28:f3:94:29:79:84:30:65:e6:9a:56:d4:9e:95:4e:48:
06:01:7c:8f:ba:13:ce:d2:dd:47:84:f5:fa:01:fc:46:c0:45:
11:bd:cf:7e:22:63:e4:7f:6f:53:cd:8e:0b:ca:6f:2a:a5:a3:
04:92:14:3b:15:98:1f:a6:b0:91:02:f8:24:1b:63:22:7a:65:
ac:e2:3a:1a:cd:44:29:74:a9:72:f0:06:4b:12:9a:16:b1:88:
0f:f4:4a:07:5d:4a:c6:e4:df:74:8c:8d:e0:7d:bb:72:76:3c:
1c:a2:e1:6c:85:40:82:4e:5e:55:b2:e9:5e:44:76:ab:6f:c9:
ac:00:4e:3c:d3:5c:fe:de:31:f7:cf:be:bf:63:d6:2c:55:aa:
c9:d2:9d:d4:a8:f6:ee:e4:a2:00:e9:fd:56:fc:1d:84:84:31:
3e:15:1b:28:25:cd:f6:f9:c4:4a:91:4e:30:aa:71:46:2f:04:
11:90:31:91:91:5b:a4:7a:21:9f:27:a3:d7:db:92:10:4e:50:
14:cb:f8:cf:72:d4:ff:24:48:18:9b:04:90:42:cb:db:da:4a:
d8:18:07:31:b1:89:b1:7a:d4:29:f0:96:ec:81:c4:79:bf:25:
f0:d3:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:58:15 2025 by rpki-client