Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05105613-aa75-3a23-ac25-62e6516a097f.roa
File: 05105613-aa75-3a23-ac25-62e6516a097f.roa (raw, json)
Hash identifier: nJKB7XZpV2/IutBISUg7TlP57ySy5+yamCmN0HKGmRk=
Subject key identifier: 44:EE:B7:79:25:53:43:1C:64:4D:0A:24:59:5F:A5:C3:88:93:CF:EF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584849457D05A2182FE4B189B100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05105613-aa75-3a23-ac25-62e6516a097f.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.98.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:7d:05:a2:18:2f:e4:b1:89:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=7a27bc09-cfac-472d-9218-f7524fce16c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:2c:f3:4f:8a:33:c4:21:e7:ae:87:7b:b1:
62:f7:e8:e9:98:e1:1f:bf:60:ce:83:21:88:a6:7c:
15:81:fc:c9:b4:e3:f2:72:87:44:58:8f:62:f1:4b:
78:e5:69:1e:f2:e8:ef:39:ea:f2:8f:fe:6f:1c:1c:
06:0c:ec:b9:ec:25:58:36:c3:e5:fe:74:de:04:e9:
ed:7b:3a:b7:b6:4c:6d:42:58:46:9d:69:3a:94:2a:
67:04:bf:6d:b5:3d:13:5b:24:7c:42:cb:83:ac:fc:
e7:86:94:78:85:31:52:9b:b4:af:31:56:b8:1a:3a:
22:49:40:eb:52:c6:2e:6e:41:b8:16:7c:de:e2:d6:
29:c1:56:a6:13:0f:70:d6:8c:be:f8:0e:30:3e:80:
d8:48:18:64:d8:52:3e:d4:c9:68:f8:06:f5:3b:c6:
0e:ce:35:fe:89:e9:92:c2:9a:05:16:e5:31:a1:ab:
2a:8e:d7:00:2e:b9:c2:f2:0f:5c:a6:74:2f:00:b1:
87:87:77:6b:ff:59:0f:07:d0:0b:a5:7c:da:b7:a7:
29:3c:7c:cd:93:11:6d:d6:4f:bc:90:f5:ad:a4:ad:
90:1f:f1:78:a6:43:52:a0:87:cc:91:97:7a:0f:30:
b6:c7:99:4b:89:b2:2b:3b:68:15:13:8a:7a:11:e0:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:B7:79:25:53:43:1C:64:4D:0A:24:59:5F:A5:C3:88:93:CF:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05105613-aa75-3a23-ac25-62e6516a097f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.98.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:d8:41:3b:b5:53:f5:c1:b6:69:40:c0:fa:d0:ae:44:23:b1:
8e:32:b8:4e:ad:81:af:95:05:42:19:04:7b:35:27:10:e0:e2:
fe:21:4a:df:45:75:ba:a6:da:3f:05:a4:ef:29:9f:95:02:c7:
65:6d:55:76:04:4c:8b:ba:9f:b7:4f:5a:1b:86:47:e3:eb:b1:
93:94:02:ec:24:7d:06:08:28:27:36:cc:ea:09:fe:f7:a1:7c:
92:5d:b9:f0:ad:ba:8e:6a:9e:4f:c4:8d:57:3d:50:e8:57:c3:
56:31:25:50:6d:f9:f3:b0:de:16:15:c2:b3:f9:3d:85:a8:96:
b2:34:93:dd:a6:06:65:1e:30:9e:ee:44:6c:09:47:d5:15:fa:
56:6b:b2:15:ef:50:d7:ec:89:1c:c2:be:36:d2:db:f3:74:4a:
59:35:ef:c1:90:a0:05:55:6b:3c:a0:39:42:25:39:d7:99:d8:
d8:6d:d7:db:44:99:61:53:14:fb:62:e2:f2:89:f9:71:74:67:
c0:67:c6:9d:f4:01:91:16:f0:2f:0e:1c:1e:a7:73:9b:ee:8e:
82:c3:b7:4e:f0:c7:92:1e:06:82:f6:4a:c1:99:25:e7:42:21:
18:4b:b0:4f:d4:54:c3:ee:2d:45:c6:95:84:2e:2e:6f:69:a8:
8c:c3:c3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:05 2025 by rpki-client