Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d58b5a3f-761d-3d90-9df0-144814ef08e2.roa
File: d58b5a3f-761d-3d90-9df0-144814ef08e2.roa (raw, json)
Hash identifier: IWWQhHiSU58mPRxgaBsTR52HvGwWEoMnEhs7ZExndRg=
Subject key identifier: 78:58:D5:18:27:CB:6F:7C:49:62:16:DE:F2:54:00:F5:37:28:2E:16
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F65263C78F94FD4951FA650
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d58b5a3f-761d-3d90-9df0-144814ef08e2.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 104.125.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:26:3c:78:f9:4f:d4:95:1f:a6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=fe16b443-f392-4bbe-815d-42375ad161b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:1a:09:72:ca:83:95:ce:91:18:41:40:ef:
cf:88:b0:3b:59:3f:83:00:d7:a7:41:2d:b9:6b:58:
f0:31:9b:4e:27:38:45:de:0b:29:b5:e2:93:cb:2e:
dc:a5:55:68:84:04:a6:bc:c7:8b:16:55:a0:a8:c4:
71:10:d6:b0:12:dc:cf:48:b6:eb:b2:48:3f:a6:02:
b0:a7:5c:7d:d0:d9:8d:c9:5d:32:b2:21:5a:b6:8b:
e5:32:95:19:f7:f8:71:bb:a1:24:36:93:a1:a6:b4:
58:fa:83:42:95:04:8e:46:b3:47:a9:7d:8e:83:14:
9f:2a:dd:b6:e7:18:1d:29:ef:49:bc:6c:d0:c8:83:
19:86:23:7d:d6:77:71:28:e2:77:05:8d:75:0b:c7:
a5:ba:9c:61:8f:0d:a6:c0:92:61:78:ed:ba:03:67:
f3:c9:bc:b1:e1:a1:53:33:e4:ce:29:0b:24:cd:92:
8b:8b:f7:17:8f:fe:59:55:c1:a1:9b:7b:c9:c1:ad:
76:7c:5f:1c:03:3e:f4:d0:fa:b9:55:77:9d:49:43:
ee:fa:f2:88:e4:21:37:bd:ac:67:54:bc:42:da:69:
9a:87:46:50:65:b5:a0:69:cf:4d:6d:85:24:b1:6b:
fc:95:7b:22:23:18:2f:67:56:d3:07:6c:7b:c1:34:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:D5:18:27:CB:6F:7C:49:62:16:DE:F2:54:00:F5:37:28:2E:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d58b5a3f-761d-3d90-9df0-144814ef08e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.125.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:cd:19:77:fd:40:6f:e9:25:4a:6e:f8:cc:a4:df:49:60:24:
9d:42:5c:b9:29:05:1c:33:5c:7c:21:38:8b:17:66:27:f2:3e:
e2:48:17:5a:87:67:a1:28:77:03:06:ac:35:b2:f3:e7:73:71:
3b:62:72:43:f8:34:54:98:02:2a:a8:50:a5:20:fc:f9:48:1e:
11:79:26:79:46:47:41:40:ca:74:2d:90:03:ed:5f:0e:c7:22:
77:f4:d1:47:30:ab:a6:25:05:1b:f0:c4:5d:02:e3:e6:da:9a:
9f:a7:c0:77:89:8e:18:7c:67:4b:a3:33:b4:3a:c5:1b:34:ba:
77:d1:a0:cc:ac:f5:f8:8d:3f:68:f3:8c:89:a2:fb:dd:0e:fe:
03:32:16:ce:29:2f:25:89:20:8d:6f:5e:3f:00:3b:39:3b:40:
d8:1c:4b:d6:8f:00:64:74:0b:04:04:16:f5:52:a9:2e:7f:43:
25:9e:88:3f:4a:b3:61:55:83:b2:49:72:23:e8:b1:2f:ff:b7:
73:15:72:39:63:01:a0:07:e3:d8:dd:12:8d:9b:69:57:68:c7:
05:c4:ab:07:78:b3:95:a1:22:0c:8e:9b:65:88:93:81:88:60:
e6:ee:e5:a5:7b:38:ec:58:1d:16:d2:1c:2c:a3:0b:a3:5b:2d:
3b:88:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:09 2025 by rpki-client