Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa
File: 339c5c96-40cd-3f6f-902d-498bcefc3987.roa (raw, json)
Hash identifier: Ev1n+UaZEqZN0pIZC1gtaAsd95YlNzjEH6cuWgr8HlI=
Subject key identifier: 06:71:7F:B3:22:A1:6A:E4:1A:7A:E2:1F:BC:C0:04:E6:A3:95:97:8B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848F4F97274B49948C26DE10B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54004
IP address blocks: 104.37.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:72:74:b4:99:48:c2:6d:e1:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=17103201-d56b-4f2f-82da-ec005752fa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d7:55:72:99:26:e1:36:03:0a:6a:83:9c:44:
c4:90:d9:73:9c:9d:76:8b:02:c9:23:ad:03:21:07:
6b:ea:d8:d2:df:83:4f:2f:d0:28:a6:a6:01:57:ca:
3b:16:7b:4e:88:bb:00:f4:c9:a4:41:55:74:49:8b:
ad:a7:5f:80:71:ea:46:a6:41:bc:52:15:aa:fc:7a:
cd:7f:87:67:01:f1:43:49:c8:bb:70:49:a9:ff:8f:
85:a5:fe:3c:04:52:4e:ca:a7:d8:9f:4c:5c:b5:52:
ab:d3:1f:b0:63:7d:c1:c6:27:c7:d4:51:f1:19:9f:
74:d4:36:c2:c1:2f:d9:f3:fa:00:d8:5f:35:a7:9e:
dc:da:a0:18:8f:99:ef:16:7e:59:72:c4:1b:f9:a7:
2b:7a:5a:f4:7c:36:cd:18:b9:aa:1b:87:c5:2c:e7:
02:50:09:b0:42:a7:5b:1b:8d:f0:11:b0:b8:6a:cf:
a2:b1:94:63:86:ca:18:17:25:22:52:9a:05:49:9c:
a3:ed:c4:f3:43:10:d6:87:62:3a:02:ad:6e:63:dc:
fd:c5:58:1b:ee:02:58:37:3d:31:41:e8:1b:e5:e4:
d7:98:c8:59:db:b0:17:c4:7b:c4:ee:bd:1c:5e:f3:
06:23:56:f9:02:01:22:f1:13:3d:6a:00:82:ff:01:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:7F:B3:22:A1:6A:E4:1A:7A:E2:1F:BC:C0:04:E6:A3:95:97:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339c5c96-40cd-3f6f-902d-498bcefc3987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:a2:59:4f:bb:44:fd:19:ab:a9:45:39:50:85:aa:99:bb:ec:
05:c8:e1:a8:d2:bf:e9:d5:16:39:a4:06:eb:c2:c0:56:22:7a:
8b:ab:7c:ad:58:10:59:16:42:8b:b7:a7:cc:f6:d5:d6:3d:4a:
d7:08:57:60:d9:8f:fc:55:20:5d:39:8b:91:46:26:dc:ed:04:
cc:31:82:1e:6e:70:c4:c3:44:15:ef:ca:78:1b:59:44:5e:d4:
23:f6:73:ac:59:00:48:5d:ca:9c:f8:53:33:85:ad:0a:4b:1f:
de:9a:01:0e:02:ad:01:74:05:df:30:0b:24:2d:be:e2:54:7b:
a5:9e:05:5d:be:07:82:b6:cd:66:93:c8:12:26:1e:0f:10:fc:
b4:1a:e7:1d:78:9f:01:9d:8c:77:e0:9b:bb:fb:76:ea:22:fd:
ac:ab:2e:13:5d:25:30:71:db:7b:9e:61:02:8d:55:fd:8c:a6:
ac:26:03:66:5d:48:c3:78:a6:80:42:5e:e3:c8:60:24:18:2e:
c5:1c:0b:a7:c5:05:a7:4f:5d:98:e8:1c:4e:89:a7:a7:ca:41:
73:73:2e:cd:4b:c7:e6:23:b9:96:50:12:59:31:91:08:e6:bf:
ef:42:0b:36:1c:84:2d:fa:09:f3:9c:7e:a3:02:6a:51:55:ae:
34:9c:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:54 2025 by rpki-client