Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75e2be0b-167a-3fc1-ae00-e6b598eecc4a.roa
File: 75e2be0b-167a-3fc1-ae00-e6b598eecc4a.roa (raw, json)
Hash identifier: zQhCx0cJKl0ViMk7gmlWIgrxPe2g5A6AVHnKWrOsUtE=
Subject key identifier: 29:3C:98:F3:0E:DE:C5:07:54:94:B5:C9:C2:21:B8:B0:AD:F9:AC:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584925B3B1AB4D539CD8B8474B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75e2be0b-167a-3fc1-ae00-e6b598eecc4a.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 16625
IP address blocks: 104.104.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:b1:ab:4d:53:9c:d8:b8:47:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=7e819610-a563-4259-a8cf-eff1b305d2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:7f:d0:30:72:aa:b2:ad:ab:56:80:9b:6d:
94:5b:c7:93:c2:16:13:dc:68:99:5c:30:77:a5:39:
86:da:f3:01:6b:ca:e0:79:17:a9:9c:ce:2c:51:a5:
11:64:f1:f4:bc:16:65:6c:e2:2b:45:16:98:9b:0c:
e2:9c:8a:bd:c3:b0:38:3e:ae:d8:32:a8:b5:e0:37:
25:84:87:3f:67:07:25:b7:66:99:44:65:30:07:2e:
e7:21:91:28:63:10:9e:a3:87:84:f4:b5:e1:d4:51:
3f:ab:c4:fd:58:d1:24:66:7d:70:0e:6e:09:05:f2:
1e:27:ca:74:e1:78:da:8d:be:35:d6:ce:64:1e:e6:
94:b3:5c:e0:fc:49:50:f6:42:a1:0e:69:b6:f8:68:
5b:50:aa:68:8a:ee:67:be:5e:9a:1f:e2:9a:a9:11:
1e:cc:2d:93:86:c0:57:f9:e6:53:d8:f4:3a:bb:02:
48:5a:49:3e:6c:9a:17:b1:66:5f:c5:e1:55:61:b7:
04:05:09:a1:06:f4:8f:b4:97:17:e8:27:93:24:88:
02:c6:da:89:19:14:48:5e:ce:a0:74:66:52:01:d2:
7d:9a:af:f5:4d:cb:96:d0:0f:ee:4f:3b:db:15:48:
bf:20:ad:ce:bf:d6:9b:d7:ae:64:14:4b:a7:1d:81:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3C:98:F3:0E:DE:C5:07:54:94:B5:C9:C2:21:B8:B0:AD:F9:AC:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75e2be0b-167a-3fc1-ae00-e6b598eecc4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.104.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:eb:49:24:08:a4:cb:eb:49:96:0d:ea:ce:c3:1c:76:ce:71:
40:25:4e:18:c8:d0:0a:11:d9:35:c4:30:aa:6b:4d:2d:0e:f2:
40:ca:ca:de:ce:ae:eb:67:f9:30:7d:39:45:f3:8a:b9:5e:77:
d4:f9:14:3a:4c:e4:0d:6e:b3:e0:00:b6:ea:3d:dd:1f:39:54:
92:dd:39:21:02:76:84:cd:9d:48:40:75:30:8d:39:d2:a2:c7:
27:11:52:cc:8e:1a:94:ac:67:32:1e:9b:55:83:a3:7b:a5:50:
46:48:f7:18:26:46:bc:43:f0:3f:9b:55:0c:6f:73:7a:6e:82:
3d:76:cb:e2:fa:4a:ac:89:b1:a9:b7:b0:28:05:79:7e:58:da:
a9:cd:37:8e:5c:bb:2a:95:99:ca:02:a7:20:9b:2d:82:2f:a0:
b0:a0:cd:a3:56:0c:d2:d9:26:8f:76:31:eb:d7:87:b7:cc:84:
e2:8f:3d:7d:4c:34:2c:df:20:93:9d:07:cb:ab:43:a1:ba:36:
9b:d1:08:b9:de:48:84:f3:60:e7:67:a0:a8:d4:47:5f:cf:bb:
d2:2b:a4:ff:8f:35:be:5a:00:6f:19:c9:64:98:a0:21:bd:c6:
41:81:7e:74:80:e8:e4:00:1f:c4:17:49:8b:21:02:0a:c1:c1:
66:24:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:27 2025 by rpki-client