Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4b0070c-a34b-3d25-a571-663a1c0671be.roa
File: f4b0070c-a34b-3d25-a571-663a1c0671be.roa (raw, json)
Hash identifier: f17oB8F1bIKLHbKjb94OFwjdZBLNu97+gdEBBSdRZrw=
Subject key identifier: 9F:A3:63:E0:53:90:84:0E:E4:65:67:07:D1:47:37:68:9F:90:EC:D0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243F9A476BE90104474AF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4b0070c-a34b-3d25-a571-663a1c0671be.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.74.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f9:a4:76:be:90:10:44:74:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=f316da58-f266-4383-a575-e6d234dca579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:f0:73:3c:87:c3:3a:dc:63:ef:8b:ee:60:
8e:f8:36:38:ed:ce:7e:ec:0c:be:c4:2e:c2:b1:87:
41:b9:5c:9c:ad:f6:1a:f6:e9:7b:62:a2:66:af:fb:
75:97:ec:29:db:2e:ca:af:bf:6b:9b:fc:e8:24:32:
29:0d:e7:0d:66:7a:da:d7:3d:36:af:52:c4:11:46:
a2:0d:c4:8b:5b:35:af:dc:37:a3:66:95:4c:b3:a8:
16:6f:20:82:c8:0d:99:43:fa:b5:ee:f0:3e:d3:c1:
71:19:80:e0:7c:fa:de:ae:52:6e:bc:dc:13:40:b8:
b5:ee:9f:27:b4:28:6b:55:3f:2b:43:8e:1d:a1:99:
31:2d:09:d3:f7:be:52:55:fb:ad:a0:ab:4f:00:97:
fd:e5:21:05:45:35:d4:6b:e0:47:af:22:be:17:9e:
ca:99:da:f8:57:64:ae:53:5e:bf:18:dc:7a:1a:3d:
9d:fb:2e:88:17:8a:4f:da:67:b4:40:16:fd:fa:91:
eb:a8:f4:f3:4a:04:7b:71:60:12:85:3d:91:52:52:
2c:d1:77:e5:21:15:29:ec:2d:94:d8:97:0d:a9:ed:
42:ac:81:8a:51:62:64:47:35:58:24:a7:e0:90:4c:
46:ce:f6:e5:1d:ac:ae:63:c0:69:c1:da:53:92:cb:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:63:E0:53:90:84:0E:E4:65:67:07:D1:47:37:68:9F:90:EC:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4b0070c-a34b-3d25-a571-663a1c0671be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.74.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:eb:56:bb:09:f7:17:6b:ec:8d:0b:f0:c4:b3:44:38:50:74:
52:d1:e1:7c:73:53:3a:bf:19:40:22:89:3b:33:b2:d8:23:49:
62:91:f0:6e:23:fd:1a:ea:1e:b4:e7:6c:4d:fd:4d:af:4a:d3:
ee:78:36:10:6e:c4:f9:42:1f:a5:7f:0b:9b:93:56:ef:26:76:
51:9a:43:9f:e0:a3:d2:d9:99:6a:3f:36:b0:16:05:01:2f:81:
1d:99:d6:34:1e:33:7a:df:68:7f:20:05:7e:db:bc:52:31:49:
7a:f1:9a:33:05:d1:ad:c4:4c:75:d4:a0:ac:05:da:cc:ec:d9:
16:27:23:4e:ec:44:98:ce:00:39:c9:a8:4e:62:d3:b5:53:20:
90:00:38:fc:b8:a7:33:b2:9f:db:dd:cb:34:96:c9:63:b1:a5:
b3:32:c3:c0:90:cd:31:6a:4d:63:b1:2f:c1:62:05:e1:fe:cf:
3a:68:af:31:d5:ba:9b:16:bf:2e:bc:b9:32:83:c6:b0:f2:e8:
c4:a2:09:37:a0:4a:99:5a:e8:02:e8:eb:02:21:f5:7b:28:6a:
6b:47:b1:d5:e6:c0:eb:46:1d:56:a6:04:aa:d9:3b:d2:b5:f2:
80:39:46:28:53:f1:a0:f7:a5:df:3c:e4:cf:65:98:7e:2a:c7:
64:1c:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:20 2025 by rpki-client