Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f96f0ce5-c478-3817-ae6d-1992d1e7f6ce.roa
File: f96f0ce5-c478-3817-ae6d-1992d1e7f6ce.roa (raw, json)
Hash identifier: AOkAmqvtUgtCpbOc54fzZMzA/lTdL6lm/RaL1a2SRU0=
Subject key identifier: F7:30:2A:D5:CA:7F:B9:33:0A:B6:0C:5D:DE:F7:63:67:0A:E7:90:60
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E87917579D45F6F1F9348
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f96f0ce5-c478-3817-ae6d-1992d1e7f6ce.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 20940
IP address blocks: 104.117.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:87:91:75:79:d4:5f:6f:1f:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=ab00c86c-492f-475e-9e3b-30c958b2c92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:97:2a:ed:6a:80:c7:ce:02:f0:2d:c4:2d:
11:a6:4d:74:31:40:82:e4:96:92:fa:61:9d:2d:9c:
17:ca:40:60:ab:b0:26:71:d0:73:bd:da:04:70:7c:
c3:61:f1:00:9a:f7:02:97:3f:8b:c0:16:0a:a7:80:
84:ba:f8:cc:be:48:9a:84:df:a0:da:a2:5c:b7:81:
fe:32:5a:e5:9f:ae:d1:bd:d1:64:c7:57:c2:5d:51:
f3:3d:6a:11:77:57:97:39:d3:b6:8a:93:38:b4:3b:
a3:85:a5:44:ea:4c:ba:5c:52:60:9f:c2:29:1d:28:
53:2c:fe:1f:5e:4b:bc:1d:e3:10:47:bd:1e:3f:eb:
d2:0e:b1:b7:44:87:e6:ae:7b:73:69:86:79:e3:50:
ce:d3:62:44:ed:f9:3f:5c:ec:ea:9f:5e:86:cf:5a:
95:f5:0f:3b:3d:3f:a5:7e:b3:88:8c:bd:d1:91:10:
49:98:93:58:d0:f3:5c:ad:2b:f1:81:0a:04:4f:0c:
f4:d3:54:b7:b9:ef:b7:aa:2e:50:98:26:f9:c8:56:
db:92:51:05:ae:3a:f1:9a:dd:64:e8:eb:56:8a:4e:
13:0c:4b:4f:c0:92:1a:0f:c7:97:90:1c:2b:83:75:
9b:22:af:7e:45:6c:ab:1a:80:43:8f:95:bb:ae:89:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:2A:D5:CA:7F:B9:33:0A:B6:0C:5D:DE:F7:63:67:0A:E7:90:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f96f0ce5-c478-3817-ae6d-1992d1e7f6ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.117.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:4f:c4:25:38:c6:89:e8:33:4e:2e:a2:cf:a5:4c:1d:9f:32:
cf:fd:bd:cd:e5:ee:ac:d2:71:b0:22:5d:d5:18:6e:6f:ae:a9:
99:c5:8d:1c:5d:db:3a:27:89:d9:32:92:72:d2:df:a2:b8:06:
59:d7:0b:9e:2c:8e:39:9f:3f:ab:5e:51:3a:55:79:9f:33:b9:
26:d6:b4:1f:a9:c8:07:71:e9:83:f9:5c:83:25:25:24:57:fa:
f2:a1:18:93:b2:6d:0a:f4:9f:0f:c5:44:6c:3d:c9:30:d4:96:
39:42:61:7d:bc:82:e4:95:9c:5b:0a:3f:02:66:79:7b:e0:e5:
80:ff:51:52:7f:d1:1b:17:eb:7d:1d:49:e0:b8:bf:3e:ce:09:
8c:a4:79:79:82:6e:c0:4f:d4:10:0e:ce:9f:c3:bf:49:01:a0:
c7:a0:40:a9:50:35:52:f3:1c:ad:df:88:fc:14:32:5c:15:2b:
22:d2:41:ce:e5:5f:d5:e1:3d:6f:25:a4:26:00:74:0b:b9:b8:
8f:70:18:37:9b:f0:f2:cf:ba:4a:3e:ad:b3:42:51:30:51:e0:
86:05:ad:a1:e6:08:3e:42:06:ff:66:85:ae:2d:f8:90:6a:1a:
cb:12:5f:51:e0:f1:18:de:e5:b1:69:3f:fd:71:4f:0e:d8:37:
19:c5:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:17 2025 by rpki-client