Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa
File: 968332ec-c5e0-337e-84e2-d19764525274.roa (raw, json)
Hash identifier: N+0wVHbo3G2t4dq/RBNVCpRA9NWEsVcp9KhSH/xq/I8=
Subject key identifier: 15:F9:E3:86:CA:9B:5C:5B:86:ED:0A:A3:B7:EE:69:15:F6:51:FC:B5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848EF616A4C2E2E131CAD896940
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 3223
IP address blocks: 104.37.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6a:4c:2e:2e:13:1c:ad:89:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=8b1609a8-577b-4a0f-afee-713235cf5f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:ab:0b:c3:52:f1:86:61:60:6c:3c:4d:c5:
67:34:84:8a:75:14:f4:71:85:e9:2b:ea:31:59:92:
6e:ec:d8:be:0c:b0:e7:31:f3:44:f0:31:31:6a:7e:
8e:09:e1:b9:f0:bf:58:f6:f1:a6:9b:88:a7:13:55:
a6:35:c6:8c:68:98:00:ec:f7:a3:6b:e1:2b:99:43:
95:46:ef:8c:43:2f:cd:a3:64:f7:51:6e:fe:e3:5f:
94:76:73:65:61:b8:f9:38:62:75:9b:2b:d2:48:33:
b5:3a:33:86:ee:b1:e4:82:2a:66:b8:7b:f9:22:bc:
67:ae:f2:f9:ad:5b:8d:71:83:d1:9d:cf:35:db:d8:
02:d5:0e:6d:8a:07:f9:a2:c5:0e:aa:35:07:81:cc:
56:77:0b:dd:d3:35:8d:98:29:fb:c4:b5:0d:89:27:
bb:d7:b9:4a:8c:9e:51:0c:b5:12:36:b3:ae:1d:50:
c8:26:a2:99:cc:37:4d:f7:bc:f1:6e:ea:a5:91:75:
cb:0c:4c:11:2e:03:f3:2d:08:ad:c3:9f:c6:af:34:
d3:a2:6f:5b:76:bb:5a:79:df:8f:cb:b7:a9:e2:85:
3a:ae:e4:e6:66:f7:45:5f:f9:6a:13:7c:52:da:61:
ab:bc:f8:ed:c5:8e:45:7c:3c:a7:b8:a3:09:8b:47:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:E3:86:CA:9B:5C:5B:86:ED:0A:A3:B7:EE:69:15:F6:51:FC:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:06:86:84:8b:1e:f6:97:56:f7:6c:b3:57:19:ed:b3:d6:bd:
36:34:58:f1:87:f6:5d:d8:41:91:c9:6a:3a:a8:5c:69:d3:d1:
5d:4f:94:32:c8:6b:f8:02:55:49:91:2d:a3:e0:e9:ba:31:1c:
e6:09:2b:ec:17:ce:83:9f:8c:bd:70:66:a7:88:e9:ad:b9:e1:
15:17:a2:1d:1f:52:b4:2c:e7:2f:d1:ee:cb:18:8c:d1:9c:cb:
0f:01:06:32:04:a2:72:82:c5:0f:18:aa:57:01:f0:99:72:c0:
ff:6f:f0:32:21:d1:47:fa:00:77:88:11:a5:a4:f5:d8:80:eb:
aa:0c:b5:72:74:8c:12:fe:06:0d:0b:99:8d:7d:19:5c:be:bd:
28:08:31:56:11:41:91:f4:bc:1d:db:7b:86:d3:f5:a9:4e:1f:
74:f7:50:36:0d:e8:f0:52:8f:bb:0c:46:20:7f:86:2c:4c:10:
30:2f:38:08:36:44:7a:54:d1:81:03:31:30:d9:72:13:d4:d6:
54:3c:26:e9:c0:50:9f:b1:7e:ec:cb:57:7f:3d:11:31:ec:24:
2e:29:0f:4c:58:41:0e:51:64:de:92:35:d3:84:73:d8:63:fa:
45:d3:0d:2e:d5:0b:4f:e0:8b:4f:df:a9:8f:e7:4a:e3:80:8b:
3f:85:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:28:24 2025 by rpki-client