Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1db5e5ee-8f43-30e0-8dde-232cbc8978fa.roa
File: 1db5e5ee-8f43-30e0-8dde-232cbc8978fa.roa (raw, json)
Hash identifier: FM2F1LYADeQoVtQWYnMPIqAscf7WNRnocKVTt2qMlJk=
Subject key identifier: F8:A2:F1:B6:42:95:2D:7D:A5:74:5E:BE:E0:56:F6:39:02:BD:D4:FC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0A05B0BB4327280AA5A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1db5e5ee-8f43-30e0-8dde-232cbc8978fa.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.76.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0a:05:b0:bb:43:27:28:0a:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=6776935f-5a33-4004-9dc0-d18e3e619bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:31:b3:83:fe:c2:5c:2c:e4:5f:e6:dd:17:
98:d4:0d:80:c4:5b:d3:74:43:3c:76:54:cb:a2:d1:
49:b1:11:9e:db:41:52:07:4a:68:65:d7:1e:d5:d4:
04:44:8d:ea:f8:03:32:b6:02:0d:93:a5:d7:c7:3c:
53:dd:57:5f:ef:77:c1:fc:26:8f:49:7c:9b:71:a0:
21:d1:70:26:06:4b:0f:b3:d9:5b:fe:0a:ef:be:d6:
ef:70:50:0a:15:5a:4c:66:f1:be:2e:2f:30:e2:03:
95:d4:6c:42:10:9c:7a:a7:d0:7e:cb:6b:69:80:8d:
36:3e:95:10:83:9e:1b:8c:42:af:30:89:98:5e:49:
87:3f:2d:ba:cf:52:1c:23:92:82:cb:1f:e5:09:a3:
18:9a:70:bd:45:ab:c8:87:8e:3e:f1:b8:bc:7b:5b:
ca:0f:0d:09:62:f4:e1:f1:2e:8f:02:2e:10:8e:e3:
a8:1b:4c:9f:f0:9c:ee:88:17:86:41:6e:bb:10:a9:
17:f2:77:e3:c3:8e:bc:ec:1d:f1:c6:02:ef:fe:ea:
df:ce:ac:3a:f7:98:06:0f:33:41:f5:98:32:02:1c:
fe:a6:de:a8:02:2b:1c:07:bd:2f:98:7b:5f:e6:d9:
76:c9:17:d9:32:e5:f3:e5:1d:6a:99:f2:26:19:fc:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A2:F1:B6:42:95:2D:7D:A5:74:5E:BE:E0:56:F6:39:02:BD:D4:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1db5e5ee-8f43-30e0-8dde-232cbc8978fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.76.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:57:dd:2f:cb:1f:d8:9a:3c:82:f9:ee:a3:c7:a4:19:09:32:
d1:d1:62:43:1c:aa:f7:41:b4:b6:69:64:8d:10:e4:3c:da:01:
08:af:3a:d2:94:47:b2:ff:ca:4f:70:4f:16:c1:f5:c9:34:4e:
7a:dd:5f:d7:de:ad:e8:1e:86:47:6a:28:49:cc:0d:13:b8:f9:
c1:aa:5b:a5:5d:11:ff:50:52:3a:4c:5b:b7:e0:70:91:18:f4:
9f:22:7b:1e:18:40:a5:40:90:56:63:a1:27:ce:44:3f:08:b9:
c7:15:2d:b5:21:24:86:18:4a:fc:1a:3f:ca:77:22:c7:f2:03:
4a:d1:4e:ed:55:d5:87:85:2c:cc:5c:ea:a2:16:ab:0d:81:77:
21:39:a3:e4:3c:c9:c0:1f:97:a2:93:61:8d:0c:f5:d3:75:9a:
1c:fb:a1:e6:3e:ea:d6:67:ea:67:45:08:ff:96:36:23:8d:32:
55:56:d4:d9:2c:d6:d9:b8:01:f8:be:6f:cd:7d:74:f3:bc:38:
f5:bb:03:aa:1f:f1:e7:04:96:ce:54:58:b5:12:e1:71:33:67:
cc:92:a3:5c:71:fa:5a:9c:4f:16:e3:44:52:f0:e5:58:8c:29:
e9:3c:06:67:b3:b2:74:51:b9:d8:90:c5:dc:3c:1e:72:b9:c8:
34:0a:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:26 2025 by rpki-client