Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d44b0198-b97a-323c-a64d-5ba7ec51a675.roa
File: d44b0198-b97a-323c-a64d-5ba7ec51a675.roa (raw, json)
Hash identifier: WO7/wzg9qWc3SETqkiGMJ52fLeBXzGUbR7O3l4yUT5Y=
Subject key identifier: E2:F5:D4:C2:76:F9:D6:84:FB:60:E3:9E:61:EA:76:0F:7B:38:1B:0C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A069B31E2A973065AB2F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d44b0198-b97a-323c-a64d-5ba7ec51a675.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.123.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:b3:1e:2a:97:30:65:ab:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=30fe55c6-e4db-463b-81eb-57c1dfc042e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:85:b0:aa:ad:c2:aa:06:6f:23:aa:45:e2:
2f:6d:02:b7:22:f0:e5:4e:f1:31:fb:70:18:95:3e:
fe:c9:a9:53:4f:7a:14:15:0b:c5:45:47:e3:f3:15:
d4:4c:47:e4:1c:2e:28:e7:73:08:55:ce:fd:8f:78:
cb:f9:04:b3:a1:44:c2:9e:12:b1:5b:23:66:83:e9:
54:71:86:78:e6:ca:ca:5c:f3:26:dc:cb:e5:13:08:
cb:95:72:7f:2d:10:52:ca:7e:8b:0f:60:48:e8:f2:
90:6b:0c:4f:1d:0a:19:66:4b:e1:b3:7b:4d:b5:d6:
6c:8a:16:90:5e:d4:49:53:41:8f:5b:87:10:d5:8e:
c7:3f:0f:c6:e1:39:02:98:c0:e1:89:80:62:9d:57:
5a:bf:57:d6:22:37:6a:31:1d:98:be:ed:20:89:03:
bd:77:b8:48:1f:96:b4:d2:d1:b3:12:f5:12:aa:23:
c5:16:2e:7b:16:2a:e9:56:22:9b:99:4d:ab:c4:ac:
7f:82:2b:90:c3:c3:d2:21:c4:bb:95:45:e2:3e:be:
54:cb:ea:05:e3:8c:06:7e:aa:99:80:be:74:07:91:
2a:b2:81:62:47:8d:5d:bd:db:2d:69:b6:3b:35:c1:
fd:dd:c3:fc:ce:3f:c3:14:5b:f6:8a:7c:f0:04:05:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:D4:C2:76:F9:D6:84:FB:60:E3:9E:61:EA:76:0F:7B:38:1B:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d44b0198-b97a-323c-a64d-5ba7ec51a675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:87:41:e3:28:1f:d2:05:79:34:f6:1d:61:eb:cc:aa:7e:d7:
2f:c9:a9:28:b9:a4:1b:eb:41:5a:62:f6:5d:9b:46:54:c4:be:
f8:1b:9a:3c:cf:2c:e6:91:1d:1a:10:19:39:03:3f:e3:f9:9f:
2b:54:14:85:f4:90:08:4d:20:50:b6:3a:b8:8c:08:16:76:ba:
79:36:e5:4f:1d:aa:98:2a:66:0e:2f:55:68:67:05:61:a6:f0:
c5:d5:b1:e4:87:05:cd:18:64:5a:d0:25:93:c8:ca:2d:86:80:
78:c9:b6:e3:ea:67:09:bf:b7:9d:5e:1a:e0:9a:df:37:e7:f5:
ea:fe:f0:51:49:ca:66:73:b2:38:c7:54:24:3b:90:6d:56:4f:
aa:c1:d8:53:93:80:ee:c5:60:d1:23:b4:c0:01:b0:85:83:fd:
5f:24:30:20:a8:6b:f2:64:9b:ab:d0:4e:35:1f:a1:0c:21:2a:
c2:7a:ff:59:c3:f7:1c:bc:f8:14:89:4b:66:66:96:69:e7:a9:
56:c3:af:34:6a:d7:ca:d5:2a:13:87:a2:c6:b5:45:10:04:8c:
65:0d:ac:1f:40:23:35:d3:d1:c7:ea:85:b1:e2:0c:e1:a8:04:
9a:bb:74:35:9c:df:bc:d9:4c:4d:21:43:c8:8e:5b:57:21:2c:
24:da:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:39 2025 by rpki-client