Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c071458-d62e-319c-a981-5c002a7803e3.roa
File: 5c071458-d62e-319c-a981-5c002a7803e3.roa (raw, json)
Hash identifier: jFLsPhLheTwSwwq74Akr1rjYWVXKOthI506uIwJ3TlI=
Subject key identifier: 0C:E8:42:E3:09:FC:E2:CC:9E:5C:52:10:4A:CF:D4:A5:DC:34:58:CE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E86782025A61EB763D480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c071458-d62e-319c-a981-5c002a7803e3.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 2519
IP address blocks: 104.115.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:86:78:20:25:a6:1e:b7:63:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=7c8433a0-7d3c-46d1-9708-e076605992ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:b8:f3:d8:78:f9:3e:ae:fd:b0:c8:a9:46:
a4:8d:9a:33:57:ae:61:dd:29:86:a5:51:24:37:8e:
85:bc:7d:ed:98:0d:ea:bc:27:ea:f1:e5:38:8e:25:
7b:30:c0:2a:92:34:38:52:cb:04:4f:fd:3a:09:54:
51:fd:fd:9f:a2:29:0f:03:dd:e5:a1:cc:12:a7:71:
f2:1e:bc:ee:e6:85:34:90:b6:5f:65:46:06:0a:4a:
59:74:5a:6d:13:8b:6d:0f:5a:97:a2:e8:57:ba:25:
89:46:51:d7:04:6d:14:ec:64:26:e9:06:9e:89:4b:
18:f3:08:04:38:8a:22:59:8d:37:f3:4c:ef:50:2c:
96:0b:5f:53:a4:8b:d6:7d:f2:e5:46:b0:6d:57:aa:
dd:6b:7c:6d:10:ee:52:5b:36:fa:dd:17:66:6c:70:
b6:e5:aa:1c:50:8f:f6:ef:92:55:90:51:37:34:db:
bd:cb:2f:8c:10:46:a3:6c:13:f2:8f:bf:ec:31:ff:
f4:fe:61:ed:b3:1c:0e:b5:30:8a:78:b6:cc:77:81:
5a:7a:f2:54:79:28:d9:cd:73:42:14:25:b9:fc:07:
62:3d:af:d1:32:6e:23:e3:16:ca:17:76:de:31:0a:
a1:02:f0:81:c5:f3:31:11:ed:ab:39:aa:76:3a:1b:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:42:E3:09:FC:E2:CC:9E:5C:52:10:4A:CF:D4:A5:DC:34:58:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c071458-d62e-319c-a981-5c002a7803e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.115.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:cb:27:01:2b:a9:bd:d9:d2:a2:64:bb:5b:46:03:57:b2:d7:
e6:3b:dd:40:98:f3:2f:69:c9:5b:50:23:7c:f0:13:6e:9d:5f:
f0:ee:bd:69:45:af:6c:be:23:12:b8:23:2b:a7:96:4e:4f:a3:
29:b4:01:61:3c:07:8d:64:79:30:15:b6:6b:ee:ef:6c:2c:ea:
51:fe:cd:23:04:3a:1a:c9:f3:cd:09:f0:bd:9d:80:f4:fb:e5:
91:bf:1b:3f:5e:ae:54:cf:25:26:9c:f7:6b:bc:02:0a:c0:d3:
bf:c7:50:e5:dd:de:db:5d:bf:3b:eb:12:a5:25:21:bd:8c:69:
f8:0c:bf:d2:3b:a6:44:58:45:86:26:ef:d7:fa:d6:15:ec:76:
a0:43:5b:e5:43:6b:bc:8c:54:93:3d:e5:df:9c:0e:96:fd:34:
74:d6:f5:51:ad:5c:e5:cc:93:f4:bd:f9:07:e0:52:2f:37:2c:
b3:c7:35:2e:bf:65:ca:f1:9e:f6:fc:d5:15:47:93:eb:e5:a9:
08:4c:e7:5c:cf:d5:5b:b3:e5:58:31:23:d3:da:04:9e:62:ca:
86:ff:ec:04:4c:ac:b1:83:f4:93:d5:45:bd:3d:83:36:0f:07:
a2:84:49:01:c4:55:78:e6:e0:8e:05:74:e1:3c:11:95:5d:10:
6d:ff:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:31 2025 by rpki-client