Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa
File: e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa (raw, json)
Hash identifier: EZ5mE1kAb0wFiSHItsdqw4LauOAHxUnH/9UFxiKBlis=
Subject key identifier: 30:7D:54:F9:C6:C0:42:5D:05:B7:79:37:CC:07:22:17:78:06:F7:51
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EBE1DF4C80C22E38F1F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.81.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:be:1d:f4:c8:0c:22:e3:8f:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=dfc494c0-60ac-4e94-b298-855af4870bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:60:9c:bd:98:14:f8:16:20:12:50:e2:30:
3d:6a:86:76:fd:82:24:82:38:4b:39:41:90:fb:20:
be:66:38:4d:1a:48:d8:97:9c:a7:42:18:0f:58:56:
db:eb:57:92:2f:2f:01:56:c9:0f:83:60:ea:5f:16:
82:fc:b1:da:28:50:50:b4:5e:81:f8:e8:19:db:5e:
d6:0f:a6:50:39:a2:d3:5a:42:fc:36:b3:b1:82:5b:
d9:4b:a4:f3:47:76:43:74:6d:87:98:58:d6:78:68:
f8:3b:5c:72:0b:f0:b7:30:a3:36:19:3b:43:45:2a:
27:13:d6:79:c8:36:30:3c:22:b9:cf:06:5e:64:eb:
99:01:cc:eb:e9:ed:2a:83:47:6d:4a:fa:12:9d:fe:
9c:50:28:89:35:1f:21:19:c7:58:94:9b:62:8e:40:
89:65:55:48:92:2e:1f:d6:20:e1:24:ff:e6:62:ba:
80:61:e5:c2:97:fc:9d:eb:fc:9e:a3:67:1e:fb:45:
4a:96:9a:fd:49:69:ee:76:73:39:69:d9:3b:e0:26:
8c:67:07:73:bb:dc:68:12:24:ad:8d:b8:bb:e9:97:
7c:7d:88:24:29:c7:86:14:47:82:6f:9d:9a:87:4d:
72:59:5c:ac:70:6c:f0:1e:86:0b:07:7d:df:af:37:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:54:F9:C6:C0:42:5D:05:B7:79:37:CC:07:22:17:78:06:F7:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e89ab32c-63fe-39e5-ac9f-39a83fdb6d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.81.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:56:3b:07:32:17:4c:07:6e:c6:df:2d:c9:fd:46:36:a9:71:
94:cc:d2:db:e5:ea:b6:8e:37:22:cc:17:e1:53:fd:14:e0:bd:
e4:5d:15:6c:31:38:d7:96:6b:7d:d7:9d:c1:5a:ad:f5:17:0b:
b2:f3:c9:fd:b4:83:b4:f9:14:b3:6c:55:be:c5:ab:4a:62:92:
87:b5:2e:14:af:ee:58:46:8a:79:78:9c:ba:f2:aa:42:de:6c:
4f:be:e6:f8:a1:7e:98:95:0e:a8:25:bd:ec:a1:f3:0c:ae:24:
d2:ae:27:ac:57:5f:6d:74:cd:b5:1b:d7:92:8f:2e:b2:c5:62:
0d:62:3d:e2:d3:5d:18:af:a5:28:5b:05:81:73:31:4d:67:5b:
82:7b:be:ef:45:77:7c:b3:b0:9a:61:6d:dc:7d:10:15:df:af:
95:ae:af:f0:60:44:d0:7d:94:c9:09:e0:c7:8f:94:4a:de:fb:
ae:8b:51:df:44:56:01:95:7d:dc:7b:19:26:1f:3a:67:fd:2a:
66:50:6a:ee:ad:29:c9:0e:ca:8b:c8:55:5c:f4:42:50:c5:4c:
f1:3a:08:09:1d:e6:de:5c:09:8e:f8:54:0b:c1:1e:8d:6c:70:
9d:5b:f2:7a:e0:25:f8:aa:73:ca:a1:32:37:34:3c:0d:48:12:
01:01:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:03 2025 by rpki-client