Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3adbee7f-d4f9-3442-b1f6-acc706934feb.roa
File: 3adbee7f-d4f9-3442-b1f6-acc706934feb.roa (raw, json)
Hash identifier: /LWwovmXkyeOePYSnXH1nT7ieDvfdkoOL2cko0K17mU=
Subject key identifier: 4E:B6:AB:A6:FC:BB:74:74:E7:D6:AB:C5:FC:D8:72:94:06:69:57:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D0ABBAA9233D7E798A2CCF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3adbee7f-d4f9-3442-b1f6-acc706934feb.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 21342
IP address blocks: 104.103.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:ba:a9:23:3d:7e:79:8a:2c:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=fa990535-2f9d-4d47-a58d-e746f5eca2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:e1:a0:f2:71:a4:8d:7b:45:a1:4b:68:d5:
ca:7b:19:12:ba:24:ab:ca:2e:e9:b7:8a:c9:48:13:
99:0c:72:fb:d6:6d:c9:3f:9a:73:24:5a:c9:da:45:
7e:c7:ce:27:66:f2:40:b7:fc:b4:76:12:c8:1c:38:
e5:20:fb:38:3e:a9:5c:1d:f5:e3:f7:3b:e1:3a:12:
de:6d:fe:56:d2:94:08:db:0a:c5:db:e7:69:28:bf:
73:57:11:fb:c7:1e:cd:10:8b:cf:26:51:34:3d:e6:
fc:5d:b9:18:f9:44:14:17:c4:d3:f1:26:0d:0e:2f:
d0:ed:8c:c5:58:2a:21:5c:94:23:c7:3a:c1:47:ce:
8b:2c:ff:f9:36:b2:0e:60:b8:54:43:67:37:fb:9a:
29:fa:99:ab:b3:48:b2:97:19:e1:52:9c:43:5d:a2:
bf:7e:eb:a1:9c:d7:30:30:4d:06:71:89:1c:bb:ee:
f8:6b:16:1c:60:2f:2a:95:41:13:f4:27:5b:a3:d5:
52:1c:e5:19:dd:c0:f3:51:d0:37:42:d3:8d:ff:f2:
84:28:77:f4:24:33:bd:00:99:e2:39:22:c0:58:84:
75:1d:ab:07:ff:f9:dc:62:00:97:37:0b:ee:60:e3:
bf:a5:b2:93:26:eb:49:9b:9a:c0:d0:07:f2:19:53:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:AB:A6:FC:BB:74:74:E7:D6:AB:C5:FC:D8:72:94:06:69:57:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3adbee7f-d4f9-3442-b1f6-acc706934feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.103.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:21:a9:1f:14:58:8f:80:17:92:61:f9:4d:62:fe:df:68:03:
d3:0b:cd:36:ed:94:bc:38:86:17:cb:aa:71:66:8e:c2:8f:fd:
43:a0:ba:49:7d:34:3f:22:07:f5:d5:57:8b:d4:00:29:1d:08:
f8:e1:7f:8d:83:5d:be:19:fc:9f:4a:6e:38:76:69:ce:ad:f9:
05:d3:89:74:69:b1:77:44:ff:0b:6d:04:4b:76:b4:32:f9:20:
fe:e8:b7:a6:ad:46:51:11:c4:01:ef:94:26:40:cc:8e:e4:53:
ba:4c:b0:c0:42:7d:45:c1:e3:b6:93:54:93:ea:97:86:cd:b8:
7d:55:a6:ad:0b:cd:ff:a9:66:91:c2:bb:b3:d5:cd:c9:58:0f:
5d:55:7e:d7:e4:50:d5:e0:3f:ba:d7:d5:7a:ba:e6:e1:22:57:
57:a5:0e:79:8f:ab:85:5b:0e:1b:93:5e:a1:73:6e:92:48:c0:
71:b7:6f:4f:47:ff:dc:bf:75:56:3f:bc:d7:90:78:e2:9d:82:
13:85:85:de:d2:97:7a:0d:6b:50:32:80:1b:e6:18:bb:17:f2:
4c:9f:81:7a:06:e0:b1:18:97:b5:43:a5:d0:c1:fa:f9:07:35:
e9:d4:4a:f2:d8:60:16:1b:51:f8:4a:d9:0d:29:73:75:92:10:
bb:03:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:36 2025 by rpki-client