Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd5e8ae-f7aa-310a-88da-c6455ae81027.roa
File: 1dd5e8ae-f7aa-310a-88da-c6455ae81027.roa (raw, json)
Hash identifier: ldpU0SeyU7uXnCh8u92JpR3pDZXDOwPf6zK/QDpWwMc=
Subject key identifier: AF:91:93:92:B0:2E:51:1A:1B:FE:AB:34:E6:DB:6F:53:FF:69:4A:AF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0688C39E48A416E6C7800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd5e8ae-f7aa-310a-88da-c6455ae81027.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.121.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:68:8c:39:e4:8a:41:6e:6c:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=37687d7d-ce0a-4b8a-9403-46b98bb068c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:99:44:be:df:a2:2d:6d:a8:89:89:3c:be:
f2:59:18:ee:d8:e2:1a:40:44:b1:e4:b8:1a:ed:5f:
ca:7c:62:55:01:51:21:14:74:a6:fd:44:c3:02:bf:
32:d3:6f:5e:1b:86:60:ea:17:0a:89:c3:4f:a8:c1:
24:f5:81:39:3e:ed:c9:c3:5d:39:e9:dc:68:8f:d8:
57:82:48:14:78:a0:20:48:7d:56:03:7a:3a:9a:87:
0f:e6:6f:cb:9f:82:ee:6e:15:02:51:a0:02:2d:6a:
11:09:3d:77:04:72:34:5d:4a:25:63:05:b4:fe:20:
65:18:8e:f5:9b:8e:9c:60:6c:8d:90:4f:21:4d:7a:
9f:7f:b0:f3:4b:5d:05:5f:a5:86:d2:ea:51:3f:9c:
f9:99:9b:fa:dd:55:ed:51:e1:67:91:87:bd:e2:d7:
d6:b8:42:8c:07:71:82:87:0d:3c:f3:99:bc:bd:34:
98:9c:40:d0:dc:78:89:b9:2b:a7:96:7c:2a:22:5e:
63:40:45:2d:a3:17:df:27:5f:d5:13:cb:9b:e6:90:
fc:1d:91:8f:43:89:6f:d2:e4:ef:57:15:4a:10:d7:
5f:63:72:e8:b2:42:09:ee:c7:aa:60:25:e7:36:df:
0d:fd:4b:8c:3f:b2:13:9b:00:e0:87:e7:ff:3d:32:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:93:92:B0:2E:51:1A:1B:FE:AB:34:E6:DB:6F:53:FF:69:4A:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd5e8ae-f7aa-310a-88da-c6455ae81027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.121.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:cc:fc:35:6e:e8:5e:88:54:28:43:e9:40:6b:ab:07:e5:d8:
43:51:78:01:d2:66:fa:be:aa:c0:15:c3:09:9c:29:2d:0d:ae:
97:04:1a:e6:28:85:91:be:81:b3:25:8d:c5:60:93:60:3b:a9:
23:a5:7f:4e:19:2c:e5:22:2b:f1:13:3d:74:a5:e2:d2:d8:8a:
54:1e:78:77:8b:43:99:68:e7:ad:25:4f:7f:56:82:7f:62:30:
d2:16:63:1e:84:d1:cf:e3:89:47:c9:3d:fd:ab:8e:68:94:ef:
15:89:fb:5c:fa:43:27:3a:51:3d:bb:18:6a:8b:b0:4a:f5:e9:
fd:88:4a:82:00:74:d8:1b:ee:dd:3d:45:9c:54:19:b1:27:38:
a4:65:15:e3:27:6b:84:be:06:be:50:8e:a3:b0:3f:2d:99:fd:
c3:da:f7:64:97:f0:14:f3:ad:9c:96:57:ec:f0:87:b5:9b:76:
6c:a2:49:9f:29:5a:91:fc:70:62:62:f5:07:0e:90:e7:a0:cb:
48:dd:fe:e5:f5:9b:d0:d3:3b:a6:5b:d0:75:0e:b8:45:bd:9d:
86:6a:0b:2f:11:c9:32:46:d4:1c:b8:b8:08:21:51:ed:55:63:
2d:99:6c:96:e8:c5:46:b8:d3:86:58:93:9d:dc:22:95:11:0b:
56:94:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:19 2025 by rpki-client