Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64f56f22-3ae8-3707-b230-dd1c16b1292c.roa
File: 64f56f22-3ae8-3707-b230-dd1c16b1292c.roa (raw, json)
Hash identifier: t/yemIGmFmm1oFhQvRhV+BFE/v53+G3aOWzlRrNNYOc=
Subject key identifier: 20:B4:8F:DD:8C:EB:78:40:46:34:03:17:44:EE:65:95:2B:DD:B5:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584937D9417B70F105F8A40C4B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64f56f22-3ae8-3707-b230-dd1c16b1292c.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.107.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:41:7b:70:f1:05:f8:a4:0c:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=35813720-e0a4-4d6a-958c-a726b4e6e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:38:ba:f7:61:1e:5b:fd:a0:13:2c:f6:d2:
fa:fc:7c:40:fd:0a:9e:27:9c:70:48:9a:1e:f0:ec:
9e:aa:a3:37:b9:81:90:8b:7c:b6:a1:f1:5b:57:52:
9d:79:a3:44:fa:fa:8b:2a:71:6e:cc:93:71:51:9f:
d7:39:a8:95:84:8f:e0:8d:71:bc:1b:37:cf:99:6d:
94:19:45:d7:19:34:41:4c:25:bd:4f:7e:75:65:6f:
e8:3b:cd:f9:7b:3a:37:5f:e8:c2:1b:e1:ef:81:a9:
07:0f:23:3d:92:5a:fc:ea:22:db:74:5d:50:b6:a4:
34:32:dc:07:b2:b1:ca:03:7e:52:54:7f:1f:aa:5d:
7f:f2:dc:ba:26:f9:e1:e9:7f:ee:e9:da:34:c2:0b:
65:45:62:3a:08:5a:1b:66:44:ef:05:db:0b:5a:10:
05:09:c0:9d:c4:e2:16:ad:b8:99:94:d9:ad:08:f3:
3a:95:82:0d:92:6d:76:00:24:70:b5:a3:55:c2:08:
6c:41:c2:d7:0a:45:c8:6e:44:4f:4c:11:89:8d:3d:
ab:b5:44:c2:1b:6c:d0:f7:01:71:df:f7:99:63:81:
3c:7e:d0:25:f4:bd:9b:67:7e:8e:d7:c4:57:10:98:
95:e9:55:23:93:7f:8d:92:0f:0f:de:86:cf:85:29:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:8F:DD:8C:EB:78:40:46:34:03:17:44:EE:65:95:2B:DD:B5:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64f56f22-3ae8-3707-b230-dd1c16b1292c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.107.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ce:b7:ea:9a:3f:58:e0:8a:b1:97:21:a2:a7:e0:35:51:69:
2c:44:ce:6d:62:60:7f:21:91:2b:19:cb:e9:21:13:01:0b:19:
27:47:45:1f:f5:d0:77:d7:b8:74:a0:38:c1:fd:0f:a4:30:7b:
82:72:42:ad:21:50:c1:b1:83:ea:1f:02:ed:fe:a4:53:1d:e1:
b5:b7:97:71:b7:1c:eb:93:da:7b:56:f4:d0:a8:4b:e7:b4:42:
ad:19:5a:1d:19:31:ea:a0:58:14:5e:c2:df:ee:4f:84:6e:49:
f7:ff:76:ab:22:ba:a3:ec:b1:a1:90:e5:ee:40:4b:5f:3b:31:
0a:39:5d:83:8b:c6:f7:ca:4c:52:0c:2d:7f:f3:91:b0:96:20:
6a:50:a6:b0:6d:68:09:b9:6a:87:cf:c4:0a:29:05:de:d0:10:
7a:38:57:c6:be:11:9e:5c:32:d0:7d:3d:14:55:c2:be:4c:e4:
d4:fa:8a:30:62:a2:a3:9a:07:b2:3e:64:54:33:8b:e2:6b:d7:
15:d0:67:e9:91:f9:1c:a6:cb:49:1d:3b:ec:26:91:d9:1f:a6:
8c:76:c9:ac:b8:bd:03:86:0f:bb:8c:36:34:3c:64:aa:69:d4:
da:6f:e2:4a:80:de:a7:35:3a:db:a1:e7:21:84:e6:6f:6c:ec:
85:75:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:19 2025 by rpki-client