Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa
File: 0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa (raw, json)
Hash identifier: CiRl8FnCO9pgNw5CSHGGDkPpmBzofJEAa0AVmHHkVRw=
Subject key identifier: A5:92:D2:62:FC:1B:73:3F:59:96:36:C9:29:7B:E2:44:6B:D7:D4:6E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02E3D30B3E4301E459B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 7713
IP address blocks: 104.118.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2e:3d:30:b3:e4:30:1e:45:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=34a23751-87c1-4f11-ad3a-4abe4b3e88a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:b5:80:73:e0:b5:08:62:d7:5b:47:57:bc:
98:8b:5b:15:d4:d8:84:5e:28:56:b8:fa:8d:1d:e7:
58:0a:01:b3:cd:0b:d0:57:52:a3:4d:26:b4:9a:80:
11:e3:4e:45:11:26:60:1f:bf:3a:b8:39:a0:d4:b2:
73:d5:05:33:15:53:7a:03:cc:61:7f:4b:2b:99:59:
3b:79:f1:7b:83:74:9c:fd:8e:80:b1:93:8a:94:a5:
0b:7a:6c:2d:13:8d:94:56:42:a5:6f:3c:f3:cf:7c:
47:ec:4e:b0:ea:a5:59:eb:d5:c6:58:9a:6b:e6:b5:
0b:37:33:97:cb:11:59:f8:40:e4:d5:73:b0:03:27:
7d:51:c3:20:40:e7:ce:6c:b5:d5:89:ed:28:c1:d1:
bc:b9:f7:f1:83:79:31:c8:9d:e0:5d:74:03:1f:9b:
98:4c:b4:31:04:08:e5:e2:38:ca:3b:e8:d3:34:f0:
97:3b:62:3f:dc:63:c0:8b:fd:e8:81:ad:fb:90:ff:
e2:5c:cf:4b:58:76:8d:74:7a:86:19:53:3f:11:05:
01:8e:9d:2a:72:b6:b7:c3:d5:3d:3b:5a:01:a0:ab:
59:43:99:ea:54:73:23:dd:f7:8a:2e:a0:23:04:01:
77:63:1c:12:97:fc:f1:20:b2:0d:fc:23:d7:81:e0:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:92:D2:62:FC:1B:73:3F:59:96:36:C9:29:7B:E2:44:6B:D7:D4:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.118.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1e:72:3d:af:3f:8f:4c:21:30:80:ea:0f:77:f4:65:eb:e3:
73:85:ff:40:2b:bc:8f:b4:b5:b3:c9:74:61:89:b1:8d:ae:90:
0e:7a:aa:35:c3:09:e1:fd:63:08:d4:ef:0f:33:aa:f1:1a:2b:
eb:02:ed:61:92:f2:b7:5b:68:8a:b3:b7:d5:16:96:14:d9:be:
b1:1d:fc:34:7c:19:e7:94:d4:61:97:cb:1c:09:2c:c2:d9:c1:
3f:c1:ac:08:0c:d2:d7:6d:a7:f5:40:c5:b1:4d:cf:d2:2e:7a:
4f:4f:dd:d6:45:6c:7a:4c:e2:c5:48:b7:58:82:d2:20:84:65:
81:20:16:50:2d:68:11:4f:15:95:e6:05:45:13:14:d3:7a:3e:
67:88:1a:61:42:d2:f1:1d:44:fd:eb:98:d0:83:52:87:aa:80:
34:53:6b:79:fa:4c:11:e1:0b:36:fc:ce:39:73:d1:ce:c7:66:
6b:bc:7c:ee:77:30:f4:eb:04:3a:7d:58:22:25:c8:69:8a:44:
8c:d2:99:d1:35:5d:ee:83:83:5f:f0:25:4c:00:3a:5c:fe:36:
9a:03:14:dc:6d:d8:d9:cb:ba:05:6e:4f:80:94:96:6f:d6:2e:
b8:cc:ad:fd:a9:a7:11:f0:99:1e:d2:21:c6:06:15:93:3c:75:
22:0c:03:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:23:47 2025 by rpki-client