Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b5ade9b-65e9-365c-81c6-53883f20dc0c.roa
File: 2b5ade9b-65e9-365c-81c6-53883f20dc0c.roa (raw, json)
Hash identifier: Chv7aeo6zceTgaRpf+5JQG7QpNyKJyytcRjNleo6Rao=
Subject key identifier: B7:5D:11:A6:AA:7B:8D:CB:1D:67:BC:17:76:5E:C2:59:C6:85:A1:C7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848573ADF0E86AE1EA030954490
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b5ade9b-65e9-365c-81c6-53883f20dc0c.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 20940
IP address blocks: 104.109.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:df:0e:86:ae:1e:a0:30:95:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=27d5c162-2042-4787-8606-c3bf705b6ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:4a:b7:18:5f:dd:c5:b0:33:61:e5:a5:48:
23:7f:a5:db:e0:25:93:71:39:bc:80:0b:db:c1:84:
fc:9f:80:46:4a:ce:de:0b:0f:ea:8f:74:05:c6:13:
d6:fa:ea:05:f6:45:62:36:35:b2:13:1f:02:22:c1:
52:e6:38:d1:b7:d7:a3:69:dd:43:60:b8:e5:e0:10:
be:41:56:8b:09:e8:c7:6d:fb:f7:22:5b:5d:c3:aa:
ff:6d:d8:fc:22:5c:79:25:ce:1e:28:f2:44:16:49:
9f:42:c1:df:1d:8f:46:ff:90:0e:f4:d2:9d:b5:36:
c6:8e:7a:a7:3b:f2:2c:ec:93:26:a5:8b:d4:c9:9b:
fe:5e:5b:32:db:f7:00:01:a5:34:c9:67:bd:f4:85:
2d:ad:f9:6d:6e:e8:e7:a3:6a:06:a4:2d:30:b8:b9:
79:8e:c3:bb:c3:6d:24:5c:99:fa:bd:5a:ca:09:2c:
ff:e7:36:65:52:ee:d9:25:95:61:0e:7b:06:f4:75:
37:36:2a:ed:01:9f:10:05:f2:8d:11:cd:5c:e7:5e:
d6:8a:86:e6:c9:ec:e9:8a:11:d4:a9:0c:e4:ee:70:
24:45:1f:b0:07:09:0f:8c:b8:b4:f1:ee:84:7c:f4:
ea:23:2b:48:8e:28:f1:89:96:f1:94:31:8b:b5:45:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:11:A6:AA:7B:8D:CB:1D:67:BC:17:76:5E:C2:59:C6:85:A1:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b5ade9b-65e9-365c-81c6-53883f20dc0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.109.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:07:9c:fe:77:6a:26:57:14:0c:b2:05:01:3d:08:ec:3c:f4:
8c:f5:10:34:8b:81:8a:e6:b6:54:fb:a4:0b:ab:cf:2e:d0:73:
e5:96:bb:1a:28:b5:a4:8d:38:37:f8:06:22:02:ef:d9:79:05:
fb:c7:27:c8:ad:b5:38:78:c0:68:28:fd:fe:85:f0:7f:b3:5e:
3d:3b:0c:71:7c:97:bc:37:b7:9c:d6:a1:c2:96:20:c0:f2:fa:
e8:84:a6:54:2c:87:59:d4:97:3e:77:d4:ad:4c:41:10:3a:45:
5b:30:3d:73:48:9f:42:4d:e4:14:7c:2e:75:12:a7:61:57:a3:
e5:f7:2f:7a:2f:72:b0:cd:42:60:03:fb:7f:76:55:3d:66:45:
0d:02:fb:bb:b8:21:d4:29:4c:f7:9f:99:19:fb:f2:1a:b2:f1:
7a:4c:91:8f:69:d8:33:fe:b2:e4:bf:8e:f6:0b:50:e5:2c:7e:
8d:bc:3f:70:c8:db:01:46:fe:0f:f6:23:c9:6e:de:73:90:32:
89:d1:1c:3c:43:4c:39:ec:24:b6:a4:16:1e:d3:2e:78:ed:4b:
77:7c:e7:90:f3:dc:11:9d:26:d8:08:9a:c7:45:ca:a5:4d:45:
7b:5c:c7:f5:e1:e3:77:1a:f1:0d:c8:ba:4b:94:8d:c6:45:db:
91:c1:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:59 2025 by rpki-client