Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92aaf5b6-4954-3f71-acda-67b2fbccc00c.roa
File: 92aaf5b6-4954-3f71-acda-67b2fbccc00c.roa (raw, json)
Hash identifier: B1V0Y+OoJ+YgyJzMNbsSljRwCKNejUzpAlNoDA+sGs8=
Subject key identifier: C3:F8:FE:61:19:DF:DA:D4:29:F3:87:58:54:42:12:58:9A:D8:5E:30
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243F96B81B95BC6932868C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92aaf5b6-4954-3f71-acda-67b2fbccc00c.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.73.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f9:6b:81:b9:5b:c6:93:28:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=5ee7c43f-8876-412a-bff7-8d7a7668dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:7c:33:64:65:c5:2d:46:b6:89:54:f5:f5:
75:e1:5e:0d:2d:2c:fc:03:18:c6:77:de:7a:bf:4a:
fe:09:b6:53:02:4b:f7:a4:b4:c9:79:c9:62:55:bc:
14:fb:1a:48:e9:41:15:84:a6:dd:ce:e1:84:ed:17:
b8:36:ee:39:fa:12:56:1b:18:90:ba:01:70:da:d5:
42:ee:c6:8a:e7:33:c0:c9:19:6e:c1:8a:cb:24:d6:
2a:e5:46:41:f8:fe:57:aa:61:9b:83:15:ff:bc:4d:
e0:20:30:00:c8:2b:b1:37:04:93:00:a1:a4:23:96:
22:50:c5:54:f4:7f:b3:02:a1:67:54:0c:69:c8:a2:
eb:63:43:f8:95:0a:27:d1:dd:3f:94:73:cf:a1:b2:
cb:06:cc:23:d1:d0:cc:44:cb:fa:93:70:3c:b6:91:
e3:44:9c:d7:d3:58:91:2b:bb:e0:38:e0:52:e8:e6:
d0:d4:7a:ad:ca:f2:7f:2f:80:08:d4:42:cf:4f:d9:
aa:89:24:d8:0e:91:5c:71:2c:68:9e:03:f1:fa:1a:
f2:89:d1:b3:a0:0e:b7:21:2b:8c:3a:01:08:b1:c4:
10:7c:9f:dc:41:85:ff:2d:0f:ef:a5:33:0b:55:e3:
4d:4d:96:d3:86:1e:3b:2d:72:5a:d1:7d:af:8c:1a:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:FE:61:19:DF:DA:D4:29:F3:87:58:54:42:12:58:9A:D8:5E:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92aaf5b6-4954-3f71-acda-67b2fbccc00c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.73.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:bf:22:44:94:b2:3b:2c:c6:a0:9d:94:34:9b:36:a3:75:b7:
e1:02:dc:a8:10:a4:3d:96:0c:15:3e:2c:b6:61:b8:7c:e9:0c:
42:af:34:73:b4:04:cf:36:03:71:ec:20:08:c5:0e:b6:87:7d:
7a:da:24:39:93:1a:f4:fb:63:20:e4:06:05:43:06:0b:54:11:
52:93:90:fe:ae:4b:d6:ca:ca:f9:c0:4f:8f:ea:39:21:4e:a2:
b7:0d:cd:c1:fc:47:b7:7e:d1:45:ab:bf:ec:28:65:9c:ee:b0:
84:35:3c:ef:ac:5e:1e:45:d8:2b:e2:60:c1:c3:50:c9:9e:2c:
01:ab:a2:26:8e:25:e8:7d:5c:a6:83:d1:09:1c:c9:c1:53:8a:
13:bb:eb:c3:4e:8e:0f:16:28:ba:83:2f:b5:fe:d1:bf:42:90:
3c:44:e2:8e:5e:51:7f:ba:f1:8a:df:4e:2d:03:44:af:e0:2b:
6e:32:df:b6:50:35:75:3a:e2:1c:c3:db:d6:ce:91:d4:1f:74:
e4:7d:49:d7:4e:59:bc:5d:dc:17:b0:45:d9:66:6c:e3:06:cb:
ec:2f:89:85:db:8c:6e:61:01:f6:47:a5:4d:0e:59:e3:9a:a2:
72:6b:0f:f0:d6:19:57:a0:8b:10:41:db:2b:a4:3b:ac:77:7e:
6e:3d:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:18 2025 by rpki-client