Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa
File: f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa (raw, json)
Hash identifier: QBBl8wOC9PjEjJqI7ypQv8i5+pDuGlU62Tu2sCPTrBo=
Subject key identifier: 07:02:07:D3:9B:0F:F0:F4:FD:57:98:82:C8:6E:05:E5:9C:F1:CC:EC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06370AE1F9D8E1BC6D900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.126.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:63:70:ae:1f:9d:8e:1b:c6:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=4d1b2557-5557-4993-b43e-b17b821b6e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:db:ff:12:e2:6d:da:e8:44:04:ee:35:ee:
6a:3a:05:a0:e4:53:6d:9c:91:04:94:cb:2c:34:d5:
7c:b2:e0:bf:23:c5:c1:7a:67:7c:01:71:b0:2a:41:
fa:ce:96:d4:6d:13:f7:cc:35:7c:3c:91:0e:06:3a:
cc:84:f0:7f:06:0e:8f:ba:b9:6d:2c:bb:c6:5c:6b:
28:36:32:4a:d4:76:8f:b4:43:3b:e7:f1:6f:07:35:
e7:54:04:57:86:76:a7:b9:b0:21:47:34:d1:d4:52:
ef:ac:7a:67:ee:b8:e1:aa:1e:da:97:90:65:d2:75:
ba:af:6a:01:c1:42:fd:8b:eb:33:61:2c:74:2d:c8:
25:ef:b1:e6:03:f5:01:07:3c:54:a5:f1:22:62:34:
f6:73:82:6f:db:3a:8f:1e:bd:11:46:a5:2c:70:f2:
a6:e4:db:4a:40:ac:c0:84:a8:0d:2f:44:fe:e0:c1:
db:29:20:28:24:de:91:b2:37:d1:b5:eb:c1:7d:04:
f8:34:b0:43:6f:1f:79:ca:5a:e8:27:57:56:ee:22:
43:cb:14:41:2f:89:ea:33:d7:97:3f:92:01:e5:2c:
56:2c:eb:9b:62:9b:5c:7b:01:3b:db:e2:9c:b7:a2:
cc:39:48:26:84:c8:f4:13:cd:ca:96:c2:57:de:0c:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:07:D3:9B:0F:F0:F4:FD:57:98:82:C8:6E:05:E5:9C:F1:CC:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.126.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:87:b5:90:0b:29:93:b5:c2:0c:8e:a3:43:2c:9e:80:de:93:
93:98:f6:75:08:b5:05:81:d5:3f:b4:35:7a:57:33:f3:0a:6e:
80:8b:74:06:2f:cc:63:cd:75:49:4d:44:7f:16:00:e3:a6:71:
f6:3d:cb:c9:f9:4a:5a:e0:02:6f:c0:fa:e0:a1:bc:4b:3b:13:
f4:d6:fb:92:9e:be:e4:1e:dd:05:be:57:10:6d:c1:c2:0e:62:
5d:57:fc:a6:86:4d:6d:d9:e2:35:67:52:63:a5:a6:96:33:2c:
91:75:61:e1:aa:31:ab:c9:9b:0d:6e:28:01:11:af:27:3c:c3:
8d:9c:68:7f:3d:a0:a4:29:df:47:2f:74:8c:65:47:14:b1:23:
12:e7:00:b8:58:5a:86:65:e0:27:a8:b2:e9:4a:46:db:2e:41:
1a:b6:cc:53:86:e0:a1:48:26:46:a0:68:4b:41:4f:cd:57:f6:
9c:53:ec:b2:44:a1:8a:e3:73:97:4c:71:a3:8b:91:fe:6c:30:
6f:76:2e:12:d1:c0:b8:77:21:50:df:4c:ab:f6:6b:2c:65:e2:
f1:e9:45:bf:2b:8f:05:38:b5:6d:18:12:fe:ed:c5:36:9b:7b:
f6:fc:39:05:30:8f:a0:4f:b3:dd:1f:f5:f8:80:95:22:cf:10:
4d:53:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:19 2025 by rpki-client