Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa
File: 22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa (raw, json)
Hash identifier: 0l2sQwnJA3fPHhPDAUmzk2V0qAEZ15SOsSLsZJYYE6c=
Subject key identifier: 62:29:AE:59:86:80:A5:68:26:79:48:54:61:60:4E:87:A1:CF:48:1C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5A733F6FB7124812DA200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.84.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a7:33:f6:fb:71:24:81:2d:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=28f76d8c-e9c5-4736-b1ce-dd7b261fc7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:2b:b2:5b:13:6e:be:6e:0f:25:b9:c5:b9:
c1:69:6d:e2:02:d5:e2:66:43:47:11:45:eb:dc:a0:
c0:b5:cb:b6:03:79:cb:c5:b6:4b:cd:02:29:83:57:
4e:33:42:e3:a3:68:55:52:e0:3e:58:48:a4:55:4f:
df:45:43:e6:be:bb:5c:de:f6:96:30:04:4c:2c:69:
62:94:b0:24:73:52:c7:28:ac:f1:33:6a:5d:b5:d2:
6e:db:38:f0:80:d1:46:5c:a5:e4:9e:d9:91:ba:c0:
1e:1e:be:54:d1:74:87:bd:68:8f:bb:26:98:de:0c:
47:37:2b:67:98:ca:28:9b:ed:d1:88:4a:67:06:35:
39:9b:ba:29:0c:f6:db:ba:20:1f:db:17:ff:9b:05:
4f:5c:eb:a1:2a:37:16:e5:23:f8:56:19:4e:fa:86:
88:fd:4a:c1:79:2c:4b:ff:a2:c8:63:26:ac:61:47:
ef:29:83:20:59:df:4a:20:97:71:6e:52:26:40:2f:
83:25:28:61:91:13:51:ae:e9:5f:3a:db:58:f7:61:
26:db:70:b7:d7:bc:93:79:5b:ed:6e:7f:91:70:a9:
24:00:d8:f9:4f:50:14:aa:76:b0:ad:89:78:a0:90:
8f:27:92:8d:5b:4e:f3:40:13:c6:46:16:95:41:11:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:AE:59:86:80:A5:68:26:79:48:54:61:60:4E:87:A1:CF:48:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22c4f8ef-8f51-3375-9fb1-e83f110aeee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.84.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:3d:a4:8c:b1:62:d4:d0:00:23:c3:05:1d:f7:3e:77:a4:6d:
1b:b0:32:5e:3b:3d:b8:df:13:65:09:a5:c3:29:e5:d5:fa:36:
f2:bc:ba:97:2f:2c:85:ab:d1:13:ce:b3:83:af:09:af:f6:fa:
b7:79:40:fb:0e:5c:36:20:d5:32:db:45:0c:0d:1d:3b:52:f8:
14:b9:61:3c:2a:27:97:fb:b5:57:72:a6:0e:b6:27:fa:8e:c6:
da:3c:2a:53:34:0f:cb:c0:51:70:32:7b:db:f1:a4:61:7c:2e:
f1:74:fc:ac:2e:4c:c3:cd:dc:5e:9d:d9:a0:a3:ea:7c:a7:94:
15:5d:39:5a:c3:28:88:04:7c:ed:43:ac:0d:27:64:79:48:21:
c0:1b:dc:3b:9c:8c:b1:92:0c:5b:08:2e:cb:6e:99:08:a5:aa:
32:1e:90:dc:7c:0e:aa:08:57:fd:2b:a0:a5:b8:51:dd:89:c1:
7f:54:37:64:82:10:45:f9:07:fc:94:ff:74:e7:c3:95:33:6a:
bd:f6:f0:90:e7:35:0a:c2:8c:14:04:17:a4:59:19:bd:c9:10:
ec:68:a1:b2:cf:56:ca:70:bc:62:a8:d6:ab:84:8a:a0:65:b0:
4c:81:76:65:d2:f0:84:9b:8c:08:47:da:98:f9:7e:1a:d2:94:
7c:7e:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:07 2025 by rpki-client