Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/226103e7-2eac-3a95-bbad-f3ceda7db977.roa
File: 226103e7-2eac-3a95-bbad-f3ceda7db977.roa (raw, json)
Hash identifier: D8TYLdpbEC7/l8zjMZzIuv80Hje6isoWfcuCeSloBxM=
Subject key identifier: 41:9B:26:11:04:4E:E0:89:9C:A5:D8:D4:2F:CB:22:01:86:17:A2:87
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A060119FABA0C1A3BE62F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/226103e7-2eac-3a95-bbad-f3ceda7db977.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.116.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:60:11:9f:ab:a0:c1:a3:be:62:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=a4037e1e-692b-4aa2-8e85-13924f3e2ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:52:16:2d:56:85:a0:29:8d:25:93:e9:1b:
50:39:02:b4:ca:56:15:e5:20:26:3a:48:df:97:f7:
73:9b:d8:d5:7a:ee:74:21:7a:fe:3b:79:3f:3c:3f:
e2:58:dc:23:00:2d:fb:d8:6b:c4:c0:c2:c7:69:eb:
b5:df:7b:fd:1b:2f:18:78:d9:6a:66:de:6f:79:18:
0d:16:74:c3:c9:65:5c:3d:49:c5:1a:ff:b4:03:53:
29:a4:b7:b0:0a:e6:93:fd:44:a5:44:8a:30:da:5d:
19:28:55:e3:59:9f:82:ad:e8:f1:0a:7d:a1:b5:37:
cf:94:87:f5:5d:52:47:d5:73:67:1c:b4:55:1a:d3:
e2:aa:36:3e:bf:d3:f1:94:6f:bf:2b:b4:e6:00:97:
8d:d2:85:1e:12:5f:42:cd:d3:44:7e:e7:92:b4:4f:
b9:fe:1f:7e:c8:6a:24:c3:2a:13:d8:8c:c0:e6:35:
65:f3:31:f8:14:ec:8b:af:9d:95:e4:29:bf:c9:8a:
17:06:7e:40:d8:6c:0b:6e:d3:e9:ba:30:df:00:15:
47:33:3b:79:dd:d8:25:65:d7:11:78:5e:f5:74:ef:
e4:cd:97:a7:df:d3:b2:03:eb:cf:b9:78:32:1e:b5:
6c:d6:37:52:5f:cc:06:95:d8:f0:59:3a:c8:9c:96:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:26:11:04:4E:E0:89:9C:A5:D8:D4:2F:CB:22:01:86:17:A2:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/226103e7-2eac-3a95-bbad-f3ceda7db977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.116.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:54:d4:4b:e6:a0:19:35:2f:ff:b1:fc:e2:ec:a1:2b:82:81:
aa:6e:16:fb:ce:0d:c6:af:b3:30:fc:2b:08:fe:d2:c7:08:02:
92:1f:e4:c7:d3:64:a2:7a:5c:0f:04:12:05:cb:63:87:42:42:
b7:a8:c6:d8:32:52:0f:b9:aa:2d:dc:de:8e:4a:37:4f:b3:5a:
ef:57:de:f3:5f:3b:f1:48:f9:58:29:fd:6c:69:a7:9a:d0:0d:
34:78:8b:da:09:85:9a:20:88:52:41:6d:38:7b:b6:1b:1b:50:
e5:d8:cb:02:bc:d1:79:a0:6f:67:a1:db:57:dc:a9:8f:66:77:
eb:01:ea:11:e0:7b:70:ab:a6:97:c6:54:52:99:a3:b6:af:3c:
6f:7b:44:15:93:9e:fa:2d:c6:66:85:6d:f2:ef:62:ac:78:95:
b2:7d:20:aa:02:13:82:4a:99:cf:ee:83:f2:39:ed:36:16:20:
79:c8:73:dd:31:0a:cd:bd:16:e0:77:85:1d:3b:15:49:28:62:
9d:4a:b7:63:ed:bb:bd:48:11:34:66:b6:a3:92:9f:45:d7:2f:
98:6e:ff:1a:97:58:b4:09:f5:5c:78:2e:21:d5:d9:96:9b:a9:
70:bb:75:ce:0b:31:de:95:a7:e2:a7:f5:36:af:ce:97:b2:c9:
92:c0:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:01 2025 by rpki-client