Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19c4072-3e37-34cc-8546-7e22c3dbb489.roa
File: d19c4072-3e37-34cc-8546-7e22c3dbb489.roa (raw, json)
Hash identifier: 2YD5n5puQj4CROY8cYfQIXtCQ8URD6UEc1xw9IgD14I=
Subject key identifier: C3:48:9C:6A:F4:44:2C:1B:67:BE:F5:9F:6E:10:13:64:99:7A:61:BC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E1476A107DA79B4855289140
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19c4072-3e37-34cc-8546-7e22c3dbb489.roa
Signing time: Fri 14 Feb 2025 12:47:39 +0000
ROA not before: Fri 14 Feb 2025 12:47:39 +0000
ROA not after: Thu 15 May 2025 11:47:39 +0000
asID: 213676
IP address blocks: 104.250.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:47:6a:10:7d:a7:9b:48:55:28:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 14 12:47:39 2025 GMT
Not After : May 15 11:47:39 2025 GMT
Subject: CN=7703816c-a119-4ff5-8e05-9aa1aec3a922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:be:be:80:c9:63:a9:04:7d:81:19:22:97:
0c:4c:d1:be:dc:85:4a:ee:5b:aa:11:35:52:cf:f6:
d2:58:03:e8:6a:8c:aa:2d:3f:e9:f9:df:e3:57:2d:
88:d0:cd:0b:be:42:d3:9f:7b:cc:e8:97:07:41:d1:
f2:cf:96:d8:4e:c8:d6:6b:37:4a:20:b1:e2:79:54:
0a:00:02:15:4d:52:be:9c:b8:7b:54:de:79:2d:7d:
dc:67:d3:98:fd:9d:6a:45:8c:a2:53:42:fc:c0:fa:
ee:af:66:fb:eb:95:91:ec:41:ec:b2:27:06:fe:9c:
75:85:38:37:e5:0a:8f:30:b0:c6:ba:43:a8:9a:e7:
71:3a:9b:86:07:a1:49:10:8f:dd:b3:f6:ab:14:70:
17:d6:b6:d0:6e:b9:2c:48:8c:eb:f3:ce:2d:d5:88:
bc:d9:bc:59:d7:42:9a:23:a7:1d:59:0d:a8:51:69:
85:38:ab:22:3b:57:c8:9d:63:46:93:90:6d:ba:0c:
f7:34:e6:2c:05:13:7c:4e:30:ab:8e:f7:72:b9:2b:
61:ad:23:9a:e8:eb:61:a2:61:cd:9b:a4:e5:60:79:
78:46:69:ca:cc:0d:50:92:e9:00:55:fb:5b:24:5c:
08:63:9d:60:8b:72:20:4e:59:91:bc:d5:ab:a3:3c:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:9C:6A:F4:44:2C:1B:67:BE:F5:9F:6E:10:13:64:99:7A:61:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19c4072-3e37-34cc-8546-7e22c3dbb489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e7:88:8d:ef:6b:7d:d3:e5:df:2b:33:ed:3c:43:c6:a6:ed:
f7:96:70:54:6f:ae:1f:7f:36:6e:8a:46:65:48:a7:17:44:2a:
53:f2:54:00:f7:8d:98:1e:b4:99:7a:ce:16:f1:d2:a0:b7:b1:
62:c8:3f:31:8c:f2:61:a7:3a:d5:c2:88:87:1f:38:40:37:9f:
da:5c:aa:71:e1:24:19:dc:0d:1b:ba:6b:aa:a9:08:b5:95:0e:
29:37:9f:ac:83:50:dd:39:cd:2d:09:2e:e0:62:86:04:63:18:
f7:12:fe:a5:70:c5:a4:92:d4:4c:c9:50:ce:9a:8b:3f:b3:62:
33:55:69:1f:47:f7:6f:3b:7e:96:8b:9b:cd:1e:a4:eb:b3:f1:
ba:25:ea:a6:96:57:35:1c:6e:87:1e:31:9e:76:e6:e3:7e:f5:
be:f3:1d:d7:5f:35:4b:f0:db:fa:0c:11:4a:bd:cb:95:5c:6f:
eb:b2:f0:e5:52:98:05:22:7e:81:e8:33:95:a0:df:f1:6a:64:
0d:94:7d:d5:41:17:6d:5e:d0:3e:b1:d5:e2:cb:1c:be:5b:89:
15:64:82:51:92:c6:b9:54:78:cd:09:81:c0:86:e7:55:73:09:
cb:0f:a7:af:a0:7b:0b:27:cb:18:7d:45:94:9d:b6:a6:23:ce:
e5:e4:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:47:44 2025 by rpki-client