Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2219f260-a599-3c1f-a9fb-0314b2f8fd24.roa
File: 2219f260-a599-3c1f-a9fb-0314b2f8fd24.roa (raw, json)
Hash identifier: LYYFnIlmkAjQrz+cJtQ5qYBm/FZVrqZQ8n6eA/3v4BI=
Subject key identifier: F3:63:B4:6C:C7:B3:0E:9C:2C:17:96:36:FA:89:17:29:00:1D:6E:88
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B397CBF983D998E86280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2219f260-a599-3c1f-a9fb-0314b2f8fd24.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.84.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b3:97:cb:f9:83:d9:98:e8:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=9a37e57b-fc94-4849-9acc-df1563b87bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:a2:5d:c5:f0:fc:23:c4:d8:19:ae:5c:34:
8b:4e:ba:bd:2e:0a:c4:47:77:59:e7:d4:ef:32:63:
b9:83:07:2b:26:a0:4d:59:b0:93:c2:e1:ea:c9:0a:
12:6a:70:fd:ca:b1:55:86:1c:b5:e6:3f:ee:8b:35:
d3:c5:30:c7:9d:d7:7b:23:41:39:6f:1c:48:04:a7:
13:ae:dd:32:4b:d9:4c:2b:f9:38:bc:e2:18:72:1b:
d7:72:91:08:77:40:50:a4:0e:47:e9:21:c7:0f:34:
67:cf:34:d1:66:59:43:d9:0d:bd:3b:85:bb:8d:09:
c4:89:ea:c8:e0:30:1e:b7:01:3f:be:2f:85:21:28:
40:01:cf:68:af:b7:65:14:fa:ca:de:66:57:67:14:
83:0e:c6:8d:15:a3:67:b5:72:79:bd:a6:db:2d:0e:
eb:fe:1e:75:5a:21:f0:52:3d:98:ec:a3:2a:65:8d:
10:d6:b8:93:15:5c:57:c7:9e:82:5f:86:69:e3:23:
31:1f:7e:73:63:80:23:d7:b8:60:da:6f:78:65:96:
b4:d4:75:2a:44:63:e0:5a:5d:dc:50:0f:fd:47:bb:
75:68:25:2b:77:7b:7e:0f:2c:0a:9f:a3:57:04:f0:
6a:ba:31:0f:56:0d:74:86:44:2a:fa:26:a2:b8:3e:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:63:B4:6C:C7:B3:0E:9C:2C:17:96:36:FA:89:17:29:00:1D:6E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2219f260-a599-3c1f-a9fb-0314b2f8fd24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.84.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ca:86:de:69:ac:85:ad:cd:8f:82:45:3b:1c:5b:66:f5:00:
d0:7b:a6:2b:41:f1:1a:a6:4f:ac:a4:09:5f:3c:36:f3:10:7b:
ba:4a:13:0f:92:47:5c:9b:c7:63:4c:32:15:ed:80:b6:16:91:
ed:79:b3:57:19:a5:d1:72:4d:aa:02:c1:86:51:f3:ef:01:fe:
8b:16:6d:6d:9b:76:63:94:8f:0b:a5:75:d5:d9:be:c6:e5:40:
97:9a:04:9f:ef:fa:35:a8:8f:c2:78:eb:04:fa:0e:62:c9:db:
90:1e:f0:2e:15:90:3d:d4:3a:86:dc:a2:50:21:41:b0:81:a7:
de:28:2c:ba:a7:c7:ac:a2:bc:9a:11:eb:a4:69:cc:11:1c:82:
d1:02:4c:f8:78:c1:1d:49:6f:77:fb:e6:3b:0d:83:22:02:7d:
ec:54:60:1f:07:34:10:b7:6d:59:32:39:04:c8:b5:b1:8c:ba:
fe:b6:a8:3e:e9:78:94:5d:35:8e:af:3f:07:ee:93:d8:27:be:
ef:62:3b:2b:be:f3:e9:9e:e9:be:30:59:14:b0:f5:82:cb:6a:
d0:f3:f4:e8:a4:32:95:3f:31:7d:38:ec:13:e1:56:72:5e:42:
8b:04:0c:04:3d:60:83:43:9f:f8:a4:5c:ae:f0:56:1e:ee:5e:
fc:8d:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:34 2025 by rpki-client