Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c8b7a6-5624-3fab-ad68-b7316de9a866.roa
File: 90c8b7a6-5624-3fab-ad68-b7316de9a866.roa (raw, json)
Hash identifier: +mClEEke9xOOt9SYH2MZI/HdDmbooMdfuVCNi41wVb4=
Subject key identifier: D3:FC:AC:8D:40:6C:03:F9:10:7F:7D:88:B8:1C:E7:BE:E2:2D:87:42
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EBAC7105975B039DB1480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c8b7a6-5624-3fab-ad68-b7316de9a866.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 577
IP address blocks: 104.98.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ba:c7:10:59:75:b0:39:db:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=650885b5-5186-4f6d-a4d1-b6e91313c05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cd:4b:a9:d6:e1:52:15:63:61:06:7d:66:b3:
e6:47:9d:c9:5e:b1:68:e9:dc:3c:31:13:80:7d:36:
1c:23:7e:9c:23:35:2c:7a:88:0b:bf:5f:e0:68:43:
33:3a:f3:08:80:9d:ea:4b:69:31:94:55:aa:f9:e9:
8c:31:65:50:b7:74:3e:ab:43:89:f9:2b:e0:9b:30:
69:7d:1b:9d:c4:19:15:c1:77:69:b6:26:cf:95:75:
fe:a1:c3:ca:17:4f:ca:ae:7b:74:91:e7:be:3d:39:
72:bb:30:5d:a9:73:2d:6e:20:44:82:83:4e:e6:15:
e4:1e:18:9b:9e:7c:ff:3a:a6:f8:86:0a:b5:8b:38:
0b:78:69:11:0c:41:fa:87:b2:70:65:ef:0b:40:05:
57:59:7a:86:26:65:dd:00:54:47:4b:1a:bc:fa:6d:
53:7e:03:2c:ee:a7:d6:11:93:53:13:f8:aa:50:13:
00:29:fb:69:42:d2:a2:d2:b8:97:ad:28:71:3d:86:
2b:ac:65:e5:67:de:0b:37:b8:e6:f1:ca:d2:d8:80:
0f:fa:fd:6e:df:72:9e:df:e0:02:ee:67:ae:70:aa:
43:98:62:79:4b:63:99:39:56:86:c8:70:85:86:17:
22:28:78:a1:70:5d:b8:9c:e4:59:cd:42:be:77:da:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:AC:8D:40:6C:03:F9:10:7F:7D:88:B8:1C:E7:BE:E2:2D:87:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c8b7a6-5624-3fab-ad68-b7316de9a866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.98.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:92:36:32:c8:d3:06:61:81:3f:33:36:ca:93:17:03:68:9f:
a6:e8:21:81:35:c3:6b:c0:57:63:2e:08:63:ee:c9:68:2c:e1:
d3:3f:4c:99:e0:da:3a:3b:30:6a:22:9f:50:67:33:4a:7e:bc:
33:ed:44:8d:8a:cf:24:18:f1:f7:8b:9d:c5:28:85:85:15:67:
f0:f6:7d:51:84:a5:f1:1a:f3:6b:b6:95:e3:58:1a:1d:a0:ca:
6b:b6:ca:54:98:30:d5:17:7e:4d:59:63:eb:df:db:07:5c:68:
99:0b:64:64:58:ee:f6:68:cf:ac:51:74:4a:6d:24:f4:6c:04:
e1:90:b9:a9:61:0c:27:d1:9f:e0:76:32:92:a9:36:28:42:4b:
b1:74:ae:39:43:1f:eb:50:1a:9c:9b:49:77:f5:2e:65:12:9e:
f6:f7:32:63:53:08:e6:66:d1:04:6e:6c:b7:37:88:4d:6f:55:
41:1a:f7:7d:72:2b:3f:76:0d:50:e2:61:02:71:16:ca:cb:f5:
38:eb:76:68:d8:e1:75:51:b0:3d:50:a7:ee:84:ee:9f:42:a8:
d6:39:d7:cc:4e:97:ae:a8:42:9d:e6:76:8c:e3:e2:86:79:67:
22:31:ed:0e:7d:a3:29:7f:f1:ca:11:14:04:fe:29:d8:f1:46:
0c:f5:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:46 2025 by rpki-client