Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29753f56-7d30-3f05-930d-6c5528002ff1.roa
File: 29753f56-7d30-3f05-930d-6c5528002ff1.roa (raw, json)
Hash identifier: YGSRCNHi4DiPPfjbQxDQQ/BGEeDKk4pZ6ay/pMNA2nE=
Subject key identifier: 92:96:92:18:AE:CC:CB:7D:B4:CF:13:E9:C9:BD:79:36:A2:F3:22:18
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E87355777E064DF866500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29753f56-7d30-3f05-930d-6c5528002ff1.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 20940
IP address blocks: 104.117.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:87:35:57:77:e0:64:df:86:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=3a764f0e-d3b1-453e-89f4-5310712e25fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:7f:84:7c:4b:08:03:e5:de:fb:30:5f:cc:
85:d5:ec:04:0d:2a:f5:94:4a:7f:49:95:92:97:ec:
8b:c9:fc:00:d9:61:42:96:a2:40:c6:7e:b4:72:2b:
c9:04:1b:32:84:1b:29:a0:01:b9:ff:68:cf:ce:49:
3d:86:3b:bb:78:09:78:b5:16:b3:f3:7b:cf:70:a8:
a4:b4:8c:34:7a:ca:de:60:47:43:98:8d:7e:a0:31:
e0:ca:8a:48:c2:05:d4:c0:f9:a9:3a:bc:2d:3e:2c:
10:a5:7d:ea:66:61:8d:06:5b:b7:c5:bd:c4:da:71:
7d:42:80:45:12:d8:43:d7:86:76:d2:d6:2f:ca:fa:
68:0d:76:16:01:e2:fe:c0:fa:51:86:b1:6d:d7:83:
59:fe:4b:28:84:54:87:83:77:64:b2:d1:c9:e3:3a:
76:f5:6d:60:5f:94:84:7f:26:84:1c:2e:36:94:34:
b6:0e:e5:9a:ac:46:03:bc:63:22:a0:3a:4e:1b:50:
9d:0b:7c:61:aa:5d:8a:36:82:26:c4:a3:b1:f9:da:
c8:9e:e5:4e:4a:67:ff:e0:de:6a:d6:e8:d0:30:cd:
1c:b1:2d:18:69:25:4d:48:d8:fd:6a:42:86:22:41:
1c:26:25:a1:dc:c1:d7:fd:12:8f:4f:cf:b0:f6:33:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:92:18:AE:CC:CB:7D:B4:CF:13:E9:C9:BD:79:36:A2:F3:22:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29753f56-7d30-3f05-930d-6c5528002ff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.117.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:6f:6f:3f:f2:94:97:c4:47:e2:4e:f3:db:ca:58:0e:f1:ad:
fe:f9:4f:67:43:ae:31:6c:33:98:0c:38:e8:cb:4b:62:ac:fe:
f7:4b:c4:52:83:2b:5b:85:4d:49:4f:e1:e8:d4:2c:14:60:33:
85:c1:aa:35:7f:00:02:1d:0e:11:51:9c:65:7d:4c:5f:0d:5a:
59:cf:bb:59:17:8b:e2:13:4c:4d:90:5f:34:52:28:bd:d3:15:
50:b8:8e:4d:bc:1c:2a:21:5b:31:9d:87:f7:ab:68:49:90:0d:
ed:a1:d8:38:64:40:01:1f:f7:45:01:e8:72:ca:62:ac:74:8a:
ec:a1:3b:d7:31:ff:42:52:31:e2:64:57:4c:4d:09:1c:f0:90:
76:d5:da:da:93:c5:c2:b1:49:9e:22:c9:bc:67:e2:d5:b8:f8:
cf:23:d2:f9:be:1c:e8:22:fb:43:54:e9:98:05:aa:78:f0:47:
08:0a:e4:f2:5c:4b:2e:78:ce:de:1e:39:d3:7b:8b:8d:61:4c:
d5:df:c9:89:92:1a:2d:6c:30:ee:5b:63:29:e6:8b:ae:d3:eb:
9c:90:e8:51:c1:fd:ac:21:53:39:d1:33:3e:7e:4e:ac:91:11:
3e:08:29:1c:90:37:37:81:a1:55:a8:6c:13:48:f0:af:00:ca:
c2:4f:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:32 2025 by rpki-client