Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f509e3ae-bb2b-3c0c-b0e0-c5e7dbf87b22.roa
File: f509e3ae-bb2b-3c0c-b0e0-c5e7dbf87b22.roa (raw, json)
Hash identifier: OHxksreQ6V5RiPhl/TFxex+v1jCHzHWcW2Q8BhqTFaQ=
Subject key identifier: C7:AE:98:14:86:88:CC:6D:7C:13:AB:B9:B8:E5:B4:F3:12:67:C0:2B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EB566A7B8C7C595CF0F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f509e3ae-bb2b-3c0c-b0e0-c5e7dbf87b22.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.86.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b5:66:a7:b8:c7:c5:95:cf:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=32a83854-5949-4aab-8dc4-8a71aa168350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:1d:de:d8:d4:90:4a:d9:fe:ec:f8:7f:dd:
18:02:af:02:a2:a2:0f:4a:37:4e:cd:52:85:27:0b:
15:99:9f:2b:4c:18:3c:50:5f:be:98:a5:7b:5f:a6:
98:ee:df:1c:88:9c:13:14:81:71:39:cb:2a:69:ca:
59:77:dc:1a:54:6e:5e:be:dc:b2:11:3f:f1:a1:08:
43:e0:2a:1f:65:9d:22:3d:b8:f0:57:4f:30:98:ab:
54:95:b6:fe:7c:1c:e4:c6:32:14:8d:5a:78:97:1c:
a4:b1:1b:49:bf:c7:fa:48:e4:b8:2b:d6:50:65:4c:
62:b9:31:49:c3:f6:39:6d:d8:90:48:71:62:43:c8:
29:13:d9:52:6a:d2:4c:8f:1b:ce:f0:bb:b4:76:35:
d1:1d:49:38:a7:00:46:74:ec:b0:5c:ed:48:dc:50:
ab:53:2d:c0:ec:ff:3e:56:04:22:a9:c3:1c:bc:70:
7e:5b:b8:20:4c:13:3c:cf:34:93:64:bd:df:04:db:
87:09:f1:31:af:bb:3e:3e:cd:dd:bf:8f:e3:17:75:
93:fc:54:9e:2c:0b:be:c3:f4:48:b3:e0:19:b5:81:
44:a5:b0:61:24:b5:82:fd:fb:9b:55:c9:6f:9d:9c:
31:ea:74:cb:a3:1e:ed:c9:ce:2d:9d:c7:30:00:0f:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AE:98:14:86:88:CC:6D:7C:13:AB:B9:B8:E5:B4:F3:12:67:C0:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f509e3ae-bb2b-3c0c-b0e0-c5e7dbf87b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.86.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:21:a7:9f:4e:72:6b:12:e4:a1:79:eb:0c:5f:19:f2:3c:5f:
16:8e:d8:c2:58:83:90:ab:fe:39:dc:c8:7b:66:ed:cc:87:a3:
96:ae:29:f9:c6:54:c2:78:74:3e:83:21:57:c7:42:af:c2:4e:
1d:8f:0f:73:38:93:3e:ff:90:63:28:6b:a5:bc:c4:35:5e:1f:
f6:70:a4:98:56:af:29:4f:53:e3:85:fa:92:e3:fd:11:d3:5f:
97:bd:82:27:4f:d3:00:8a:75:f5:b4:a5:17:e0:96:af:67:b9:
cf:6c:35:b8:3b:bd:0a:6c:ef:97:56:d1:31:ea:45:6e:05:a9:
85:bd:b2:84:e4:6a:28:3e:49:9e:d1:97:2d:2e:77:24:16:41:
e7:92:11:fd:1b:15:ce:1d:d1:5d:c3:1d:b8:d9:66:06:10:8c:
51:5a:29:d7:c7:54:e5:7b:a1:4b:b3:85:26:18:68:06:3f:fc:
f3:0b:79:16:cf:99:5e:40:71:d1:5c:77:3f:ea:2b:b9:87:0c:
e4:cc:e7:58:c8:82:06:c0:e0:b5:7e:c3:d0:c6:78:92:ba:89:
63:fc:bc:12:eb:d9:e8:18:ef:f9:17:0d:e2:c7:8e:ba:ef:41:
fe:d6:55:67:6e:8a:61:31:25:b6:c5:c4:8c:78:f1:6e:17:2c:
61:a8:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:02 2025 by rpki-client