Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e67b803e-ce21-392c-8dc7-391a1f4c3a32.roa
File: e67b803e-ce21-392c-8dc7-391a1f4c3a32.roa (raw, json)
Hash identifier: ZFF5J9B6gqZhInyHxnWmiv8HRFj6CEO7pAE0+CUPReA=
Subject key identifier: BA:46:54:11:A5:7E:D0:A9:87:C3:EA:DF:41:94:FF:A4:7A:B6:F5:E1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06764CA6B68746CEBEF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e67b803e-ce21-392c-8dc7-391a1f4c3a32.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.119.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:67:64:ca:6b:68:74:6c:eb:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=ac3aea7a-1669-4da7-863f-7c6ac6c86eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:e8:b8:58:ac:61:64:c9:bb:af:7b:60:86:
53:cf:d6:b0:76:44:e0:eb:3e:a3:15:2e:61:ae:df:
cf:0f:04:ee:4f:88:96:0b:03:b9:e5:b0:1f:96:46:
62:b7:b4:13:71:f2:07:1d:db:ed:40:db:f5:76:a5:
78:31:81:de:60:e1:7d:f6:ae:e8:a1:bf:d4:09:5a:
65:0e:18:70:05:5d:aa:21:0b:af:cc:1b:cf:14:77:
c1:a7:3d:e6:42:af:40:b2:6c:48:c3:dc:72:7e:fe:
97:bd:7a:63:c2:17:b9:59:d4:37:77:e2:fc:da:60:
7c:35:e2:c6:3e:41:28:20:07:6e:83:c7:40:e1:d4:
ea:9c:2b:a5:08:99:98:6f:06:19:88:ef:34:cf:b8:
92:2d:72:98:6e:78:f6:49:1c:ae:3e:3d:00:91:d6:
29:74:5e:6b:40:9c:58:da:89:6c:ee:a6:e0:db:21:
a8:94:76:a8:e0:11:06:e1:cb:5b:8d:b6:ff:7a:30:
51:1d:9b:0c:ed:6b:55:63:a1:66:91:53:aa:a7:2b:
4c:fe:18:23:06:de:e3:e5:dd:5c:1d:6f:36:f3:ab:
ca:8b:03:ff:c7:33:7d:85:94:5a:35:28:b7:03:1e:
e0:b8:6e:df:f4:76:ab:c1:1b:46:0f:f6:29:fd:da:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:54:11:A5:7E:D0:A9:87:C3:EA:DF:41:94:FF:A4:7A:B6:F5:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e67b803e-ce21-392c-8dc7-391a1f4c3a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.119.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b9:4b:d1:dd:0c:7a:34:d8:27:32:fd:25:05:1a:c3:af:d8:
f3:18:4a:cf:76:40:94:f3:39:17:44:76:e2:12:a9:a4:2a:84:
da:f7:d4:8b:4b:1c:f8:d6:15:bb:6e:ea:43:63:23:51:41:7c:
d5:37:88:44:cb:c6:d4:a3:c4:f7:d5:c1:69:5c:6c:d8:fd:ad:
23:c1:1e:5c:71:5c:2e:c3:23:0d:bc:55:72:41:75:c6:1c:d6:
2e:a8:e1:91:d8:cb:0c:4e:90:c1:c8:c8:87:75:29:b0:19:7d:
76:45:76:7d:68:29:df:72:de:bb:b4:cc:17:4c:4d:64:26:88:
82:aa:b2:12:29:7f:4b:77:df:e2:16:a0:29:64:91:92:27:50:
70:a7:ae:df:32:59:7a:9a:64:56:7a:63:42:eb:bd:45:a2:66:
5e:78:2c:06:85:15:51:2c:bf:fc:2a:d0:a5:8f:55:eb:be:71:
7c:fd:ff:6c:6c:54:c2:cd:b5:06:5a:14:ba:6a:cd:e5:03:4d:
6d:9c:da:2f:75:45:59:12:69:6f:9b:d2:28:13:8d:4c:35:4a:
79:c4:f5:3c:6a:4b:46:af:1f:08:41:ce:c5:82:23:36:65:82:
4f:4d:41:b4:21:e7:17:f9:aa:9a:d2:2b:23:1b:52:54:7a:b3:
72:63:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:47 2025 by rpki-client