Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa
File: d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa (raw, json)
Hash identifier: WNSboG8bYfhWZ5/pzU1VTBzF8ybXCYWBDkDS5M3plbA=
Subject key identifier: 7F:55:E4:EE:58:C0:D5:6A:62:1C:6D:A8:2A:B0:C0:9F:35:6B:D5:52
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243E7E747FA424FB0C87500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.68.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e7:e7:47:fa:42:4f:b0:c8:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=19d606d1-552d-468a-96b1-e20fd348f744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:36:e1:9d:ee:19:96:aa:77:ac:d5:04:0b:
f6:1c:43:f1:f8:be:72:78:c0:b7:bc:df:01:01:4b:
cb:75:9f:fb:69:1a:f5:ff:76:c9:c4:cd:7d:67:bb:
2b:1c:f6:55:ca:6c:03:dc:c3:c0:ff:39:e8:64:6d:
e5:eb:53:67:91:d1:7d:4f:e6:59:5b:79:b2:d7:e4:
de:5f:71:02:1b:5f:a2:27:f9:44:c5:85:d8:6f:10:
9f:2b:99:61:f1:71:26:6f:ab:48:c7:4b:c5:e0:2c:
73:01:57:cd:b2:a0:ca:2a:fb:98:11:db:38:bf:2a:
8b:d5:10:21:e4:8d:88:24:17:c6:db:4f:5d:39:d2:
b5:8f:3f:5b:f0:4c:be:c4:4b:bf:cb:7f:fb:98:40:
52:75:be:14:d6:48:9a:c5:67:c0:4a:e3:5f:49:1e:
01:3a:96:d5:ff:3e:e2:b4:23:d2:7b:9c:d5:2b:3e:
82:a3:17:5e:d2:fb:6b:ec:7c:b0:b3:0e:57:ac:74:
22:a9:61:74:e1:0a:f7:0f:2f:1a:63:da:6d:ec:17:
7a:41:b4:c7:f5:e8:5a:9e:0d:fb:ed:e5:a5:c5:ca:
79:18:40:ff:c4:6b:c0:a4:4a:99:4c:c7:a1:04:2e:
6b:ca:be:da:8a:42:ef:09:e3:79:68:32:c0:26:93:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:E4:EE:58:C0:D5:6A:62:1C:6D:A8:2A:B0:C0:9F:35:6B:D5:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ab79fa-48c2-346c-b817-52e7b2cc8fd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.68.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:2e:90:86:2c:14:c3:24:1a:26:98:14:1e:9f:37:2c:20:3d:
83:07:e9:dc:30:0e:67:d8:b7:f3:dd:70:a8:30:b1:2e:c0:14:
63:8d:2c:7e:ee:71:51:05:48:fc:fd:6e:23:44:b3:01:89:b9:
af:2a:14:05:6f:8f:06:93:98:98:03:63:b2:95:9c:ca:90:5c:
47:fa:ba:09:0c:1e:d5:4a:da:fc:ca:04:93:39:b7:d4:cd:1e:
f1:aa:b4:e9:b5:47:cf:5e:bc:c1:3d:9a:87:55:f9:ec:51:b9:
9e:ff:4a:f4:0d:fc:08:14:0f:b8:8c:25:df:75:52:e7:f5:52:
ab:0d:7a:f9:c3:33:65:6a:cb:a7:87:49:15:e4:9f:b4:9b:c3:
46:d9:9d:31:ba:e3:f9:09:db:7d:24:05:5a:64:46:a1:c5:3d:
a5:8c:e1:02:26:5c:9d:9a:dd:ad:9b:c1:e7:68:f0:39:74:47:
eb:eb:14:d4:39:5c:40:c7:4b:4c:81:fe:c7:3a:ae:4c:9b:19:
a8:c7:78:b0:a8:84:41:c3:9a:07:86:84:d8:de:e7:43:4d:d1:
84:a5:ee:09:ac:32:84:d3:1f:d4:2c:4a:40:87:d8:95:e2:38:
1a:02:a5:ad:e0:4a:bf:51:c9:34:b1:35:77:cf:7b:fa:e2:99:
3b:da:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:22 2025 by rpki-client