Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2d5c68-05cf-3542-9213-59dc1164b018.roa
File: cf2d5c68-05cf-3542-9213-59dc1164b018.roa (raw, json)
Hash identifier: 2vTIsVhl1R72/l9eFPTIsW3kcTepgbOCWUU4VVzaIfA=
Subject key identifier: 9A:40:36:00:02:AE:C8:BA:CD:20:1B:10:8B:E2:28:D0:04:97:A2:24
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02E2AB9643F55CDB25080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2d5c68-05cf-3542-9213-59dc1164b018.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 7713
IP address blocks: 104.118.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2e:2a:b9:64:3f:55:cd:b2:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=c397f4a7-e3fa-4c22-be3f-8e7e68d18627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:2f:db:a4:eb:0c:6c:66:6a:cb:68:70:b0:
61:21:fc:39:84:1b:d6:82:ff:cd:60:e4:e8:91:f7:
ce:bf:9f:92:32:68:a8:96:77:60:5b:47:e8:ea:f7:
d0:95:80:70:1d:22:ac:9c:af:7c:66:3f:cc:d4:4f:
ea:e5:d8:02:10:42:ef:79:83:51:cc:27:b8:0d:66:
c9:cc:1a:1c:ce:c6:6d:6c:04:d7:4e:40:bd:e6:66:
98:25:e9:52:e9:14:2c:3a:17:42:54:7f:42:32:0b:
43:55:53:a4:f4:74:67:3b:a5:8d:ae:09:7c:ae:fa:
94:b1:b1:67:54:bc:31:91:1e:cc:ab:09:f5:75:ff:
d4:ef:fc:43:9a:d4:e2:1a:c4:d7:5b:ea:39:a8:0c:
4c:22:06:15:23:e2:bd:d6:6d:2f:30:05:29:51:2c:
79:43:34:d3:02:e8:91:f9:1f:60:eb:c3:e4:54:21:
21:f5:9d:02:b9:28:65:a9:75:9d:e9:93:20:5b:f2:
bf:00:72:66:e7:e7:3d:16:f3:55:0b:bf:ba:c1:c5:
d1:be:f5:03:20:d2:53:fc:3c:e0:bd:a3:d3:d0:66:
91:35:b3:1c:ef:8d:77:b8:e9:e0:09:69:96:11:b9:
45:c9:d0:2d:c9:c8:3b:88:30:e5:7e:7f:3f:52:32:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:36:00:02:AE:C8:BA:CD:20:1B:10:8B:E2:28:D0:04:97:A2:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2d5c68-05cf-3542-9213-59dc1164b018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.118.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c1:c7:e5:48:85:4e:b4:c2:e8:62:58:6b:c3:26:64:6c:1d:
b8:4a:79:7d:4e:a3:00:8e:bb:ff:8f:07:1b:eb:3d:1b:98:61:
f2:f1:e8:b6:ba:66:96:7b:f7:7e:f4:34:df:f6:14:78:b2:1f:
ae:e8:5b:82:d4:35:a7:82:7f:d5:a3:ac:70:1b:57:c9:9d:6f:
76:06:71:2b:c6:ea:bd:5b:94:9a:2e:6e:69:c7:a8:d8:ec:b8:
70:75:52:5e:29:d6:c0:9b:50:09:dd:8f:aa:3b:84:e5:c3:61:
4d:dc:62:03:04:90:af:76:ef:f1:a7:d0:49:92:48:e8:2e:4d:
09:d5:80:67:03:39:97:92:1e:ff:b4:04:f7:3e:75:55:71:75:
f7:10:43:82:c3:ff:12:a7:1a:f1:e7:17:89:3c:a1:3d:a6:5b:
63:89:6f:ad:e8:03:7b:26:fc:1c:9a:4a:6f:89:54:e8:17:29:
3e:42:fc:0d:bc:4f:23:38:11:e7:63:76:99:24:f9:5f:8d:00:
11:a4:0d:55:73:97:be:31:61:00:da:b9:8a:6a:00:4a:3c:9a:
0c:69:1c:ab:30:3e:96:0c:cd:16:d4:85:e1:f3:7e:bf:4b:e3:
9c:1a:5b:09:38:18:38:06:96:86:06:4d:ad:6d:7f:d3:05:62:
57:a9:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:32:00 2025 by rpki-client