Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa
File: 0bde66e0-ee94-3e23-97de-fad631a974c8.roa (raw, json)
Hash identifier: Q9tlFh6mWGz4uzUDcQrrcC8Gfx0eAFexefz6+9kZnbo=
Subject key identifier: 5E:6B:D4:3D:08:10:BC:48:6B:C9:71:CF:54:CE:38:D5:B3:76:DA:32
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B17E94FCB7CC3C27E900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 9498
IP address blocks: 104.104.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b1:7e:94:fc:b7:cc:3c:27:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=53b64f58-e771-4a8f-94b3-e875e441e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:40:21:45:13:5a:50:ea:e1:31:36:c7:86:
2a:1c:fe:4f:10:6c:7b:6f:3b:5e:7d:df:0f:63:6b:
94:6d:73:43:d3:08:7b:68:a3:b6:09:77:d8:2c:75:
b1:63:77:22:0e:1f:9a:50:30:10:39:3b:b4:20:fa:
45:81:0e:5c:3d:38:4c:62:eb:90:66:d6:ce:d0:84:
29:c6:cb:12:cf:60:b9:d1:cf:0d:65:a9:44:36:42:
c9:e0:fc:5a:93:77:8f:80:a9:ac:3c:9f:cc:a3:2d:
3f:33:81:76:b7:ad:14:59:a6:22:7a:90:e2:64:7c:
ed:cf:71:e4:62:1c:76:55:80:ab:2f:ef:dd:62:2b:
36:0c:39:e9:e5:15:58:0c:00:90:24:8b:ce:74:90:
ee:cc:05:ac:b9:71:8f:05:82:24:71:ae:7d:35:9b:
6b:48:a2:e7:46:06:d8:20:2f:11:b4:17:19:3d:10:
b9:b3:e5:c0:7b:03:27:32:81:0a:26:01:24:22:48:
1c:d2:f1:eb:b3:d9:c5:e5:25:c2:76:f2:80:0d:ab:
25:6d:37:f7:19:5c:27:51:ee:cd:04:99:cd:6d:95:
a7:34:1f:bf:40:0f:44:0a:70:58:0c:07:ba:21:4b:
29:54:74:cc:c5:c6:c7:99:82:7d:8c:7a:2d:57:f3:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:D4:3D:08:10:BC:48:6B:C9:71:CF:54:CE:38:D5:B3:76:DA:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.104.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a4:3a:ba:5a:19:e8:45:6c:10:15:47:99:b7:b5:70:47:66:
0e:1c:64:2e:b0:4b:1d:31:21:cf:d1:74:a2:81:c5:b5:6b:3e:
c1:54:a7:69:71:f9:9a:2c:74:30:e3:00:2c:75:ba:be:7f:25:
a5:ec:a0:49:47:e4:81:49:a5:42:af:40:50:b8:c8:ea:ec:e1:
f1:4f:29:5b:fe:c0:63:59:0a:7a:1b:4c:5e:c0:ac:af:ca:de:
30:13:a0:aa:54:d1:58:f6:ad:c4:a8:2f:c1:cb:c7:12:7b:10:
bb:4b:93:9d:aa:e3:c5:04:ed:72:4e:32:85:fa:90:cf:7f:b8:
f7:68:76:b6:e0:50:d1:c8:29:70:38:d8:70:d9:80:41:88:14:
54:cf:87:76:82:80:d4:d1:2a:87:1f:7b:5a:b9:0a:aa:90:94:
b8:d6:d1:b8:4d:b6:b5:3e:44:c3:68:09:89:a2:31:ba:d5:22:
9d:24:8b:3f:73:37:9d:09:37:4a:c9:2f:e7:9e:5b:46:8b:95:
19:c4:25:68:9a:d8:c6:35:ef:b8:42:01:ac:be:1b:28:86:15:
0d:37:96:a0:99:5c:28:fd:52:d8:72:b1:e5:8f:91:ef:92:de:
74:f8:9d:f2:c9:01:c8:ab:08:3b:6b:b5:6d:0e:60:e4:0b:d7:
6a:76:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:58 2025 by rpki-client