Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/248847dd-1b98-3190-8789-888f0b57a9b7.roa
File: 248847dd-1b98-3190-8789-888f0b57a9b7.roa (raw, json)
Hash identifier: mfy0VYkHv92D/viefpox28oieRo7k8ncNhWkKlaLuYg=
Subject key identifier: 95:84:B4:B9:66:A2:4B:5D:06:27:03:7B:85:21:DB:D3:19:DF:9F:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B8CAA86B401A26852400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/248847dd-1b98-3190-8789-888f0b57a9b7.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.100.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b8:ca:a8:6b:40:1a:26:85:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=c86f7c12-7a15-4108-9430-f95df0146121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:a0:54:b2:84:4e:b9:a8:02:8d:b1:9e:b9:
0d:c9:dd:af:a2:67:e5:dd:2f:49:22:17:c8:5d:13:
8a:c9:3c:6b:9c:01:aa:d2:7f:e0:02:75:ae:8e:5c:
57:00:1e:74:e8:b6:c2:74:c8:5f:69:bd:42:9c:cc:
9f:37:46:19:09:31:b7:37:ab:19:78:82:43:f7:09:
16:5d:09:14:b8:d5:cd:96:77:39:05:31:b1:b8:ff:
21:a5:eb:19:5b:0b:97:22:1f:4c:7c:5f:85:66:96:
f8:b0:ba:91:e4:fb:a0:97:b0:e1:32:0f:e1:de:d1:
4d:65:6b:ad:91:96:37:d8:f3:af:7e:de:4e:0c:67:
e4:ba:6a:20:c9:ca:84:11:15:54:48:84:a8:e8:e7:
c1:48:23:da:9a:9e:3b:b1:8d:9c:90:37:e6:f9:96:
bf:c4:22:21:d5:3f:32:a8:ff:6d:31:81:08:cd:c8:
01:48:25:f9:50:4b:fc:07:91:82:98:86:64:81:ad:
b7:8c:35:53:4a:52:84:29:91:a9:00:04:91:21:6f:
99:cb:09:a4:e7:26:f9:bc:b6:75:80:50:8b:9e:64:
42:a7:0c:0e:bf:b0:a4:7c:89:fc:06:14:53:59:46:
ae:dd:f1:23:48:3f:74:1c:7e:8d:c3:60:37:15:4d:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:B4:B9:66:A2:4B:5D:06:27:03:7B:85:21:DB:D3:19:DF:9F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/248847dd-1b98-3190-8789-888f0b57a9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.100.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:2c:01:48:51:82:f8:3a:26:e2:a8:ad:c9:f4:60:5e:75:fa:
e7:fa:f6:76:5a:55:61:f6:3a:5b:1f:b8:28:17:1f:cc:1d:26:
14:ec:f5:65:1c:18:f1:b0:cd:ca:57:3c:0a:7f:d3:5e:c1:d3:
9b:2a:44:ff:bc:80:1f:1d:56:a4:7f:a8:12:1c:a2:9b:9f:29:
e5:86:c8:01:6a:1d:e5:12:9a:b6:49:92:98:ba:1a:66:e6:9d:
69:61:ef:14:da:af:eb:bd:0f:7b:f3:3e:09:48:f0:c5:2c:66:
a6:14:2a:72:ff:e5:3b:22:77:98:dc:f5:aa:0f:47:04:49:a6:
2c:a7:1c:99:23:50:e7:0d:82:b5:22:72:96:15:f4:d2:94:c0:
60:68:c4:6c:c9:3d:b3:02:5a:8a:fe:90:70:5f:47:c5:6a:79:
40:26:cb:8b:0b:0a:a3:e2:83:09:e5:02:b5:5d:2c:9f:1a:74:
ef:07:72:67:d4:41:43:c5:84:8a:64:98:e9:3e:7b:76:dc:ce:
a1:f4:80:e1:66:56:d5:69:12:4d:72:e5:61:9c:57:cd:df:de:
fc:30:ed:89:dc:1a:dd:62:d9:42:69:af:23:33:f4:b1:d2:b9:
f1:f6:f6:40:c6:5d:68:16:1d:39:08:f4:80:2a:c3:ad:f7:86:
40:d9:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:47 2025 by rpki-client