Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7a1a8b2-c620-3c04-9320-9b392c9828cb.roa
File: d7a1a8b2-c620-3c04-9320-9b392c9828cb.roa (raw, json)
Hash identifier: aM187SEC2nbcH9l3+rb8iNmaasTdCsSf9acxmjX0bz4=
Subject key identifier: 83:8E:F0:BB:F4:85:43:FB:9D:8B:79:87:E1:02:2C:31:44:CE:D1:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFC78DE324B2F1655C9B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7a1a8b2-c620-3c04-9320-9b392c9828cb.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 33905
IP address blocks: 104.107.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c7:8d:e3:24:b2:f1:65:5c:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=88a10bc5-fcb6-4a57-8e60-a6618303f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:b7:23:c7:31:2e:e1:4a:aa:18:44:e4:91:
d0:92:23:cb:09:6e:ec:b3:63:38:6c:18:6b:93:3e:
bb:7a:df:c2:9a:b7:a3:09:03:cd:93:a0:fd:e2:21:
7e:4f:57:97:1d:f1:a9:d3:ce:cb:2b:01:79:0b:71:
c6:cd:36:9d:0a:94:86:8c:5b:f2:bf:9c:1b:61:5e:
92:b2:66:95:91:56:0b:ca:d2:b5:53:f5:a8:e9:c4:
9d:ce:22:54:aa:40:90:31:6b:e4:fa:89:fb:62:18:
fa:b9:51:0c:8d:97:ff:d6:2e:b8:f7:27:74:f6:4e:
4f:1f:38:a2:2c:16:da:eb:01:77:ae:84:a8:7e:cf:
3d:6d:00:c6:5b:9e:0c:8d:49:9d:d8:18:88:18:9e:
62:ec:d2:89:8b:d0:26:0a:e0:17:0d:8a:1d:df:82:
65:b3:43:19:30:bc:5a:40:5c:ac:47:54:40:5b:95:
09:d8:90:0d:d0:26:8b:22:1c:41:31:ed:75:fd:77:
e2:62:07:41:e5:8c:22:cc:13:d1:9d:1b:2b:b9:6e:
c7:db:e8:a1:4d:4b:f5:3a:6a:db:30:03:8e:6a:a6:
4d:47:c2:4a:f2:9a:00:3a:15:43:23:a5:88:d2:78:
4c:65:0e:99:0e:02:44:42:a2:2f:2f:2a:65:df:73:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8E:F0:BB:F4:85:43:FB:9D:8B:79:87:E1:02:2C:31:44:CE:D1:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7a1a8b2-c620-3c04-9320-9b392c9828cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.107.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:62:1b:9c:29:11:b2:de:d0:f8:99:54:1e:b4:73:20:bd:cc:
58:1e:b8:72:58:b0:4d:4a:45:32:bd:49:4a:23:db:a0:b8:87:
05:55:ca:0e:00:ee:d7:c2:10:9f:d6:f7:cc:49:5b:4b:0e:97:
d4:6a:b7:0d:54:e4:c0:d8:9e:e6:a5:e8:a7:a1:9b:06:c6:7d:
56:f1:a4:0f:0c:3b:31:3d:29:82:30:e0:9b:2b:14:14:5f:cf:
8a:ee:84:93:47:17:e9:ed:b3:7d:45:9f:aa:09:c3:37:b8:88:
1d:05:21:67:48:8f:08:20:e0:9b:92:0e:38:35:8d:e4:76:10:
90:b1:af:4a:d7:05:b4:37:16:19:cd:5a:3e:a5:03:c9:73:22:
44:c1:c9:a5:6d:fe:73:41:9c:4b:2d:45:2d:b5:ec:52:be:73:
4e:8b:dd:bc:60:21:64:8d:73:52:5a:61:d5:70:08:ec:d4:22:
e3:7f:53:20:03:0a:fe:2d:3e:fb:5f:d6:c8:9e:00:4e:0a:56:
6d:fd:e0:8f:f3:aa:49:30:52:42:18:0a:b5:bc:63:1d:e3:15:
39:0a:32:c1:92:5d:f4:d5:87:b2:37:f3:08:63:f9:c8:88:50:
4b:7e:0c:fe:a4:02:11:1a:f5:0a:08:85:39:23:90:f9:c7:66:
d3:d0:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:08:02 2025 by rpki-client