Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dd2496c-689b-344b-8a8e-6a35f12ecf3a.roa
File: 2dd2496c-689b-344b-8a8e-6a35f12ecf3a.roa (raw, json)
Hash identifier: s6VHLwySpoKWJYA8dXqgE4Vm0msVwIAnOOhAydxcGqo=
Subject key identifier: 5C:77:D5:EE:AA:8E:E3:19:1E:9F:79:AC:AA:ED:D9:69:52:87:C9:E4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B9EB929BC19147B6CD60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dd2496c-689b-344b-8a8e-6a35f12ecf3a.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.103.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b9:eb:92:9b:c1:91:47:b6:cd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=510581c5-fa09-45f2-8b9c-8a2ad6667363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:bf:a2:f4:82:ae:63:0e:05:be:ee:e2:22:
c3:75:77:05:9f:bf:8c:a0:27:46:57:ab:74:1c:d6:
4e:88:b5:46:ff:be:c1:58:da:73:99:0e:95:a7:8c:
bf:8d:42:a6:bd:79:03:31:4f:90:ea:69:29:21:49:
36:f1:79:04:1a:f7:ee:2c:8b:74:b6:2f:ef:d3:25:
ee:f8:83:05:4a:55:c3:52:e7:35:08:88:a3:89:94:
fc:56:fb:46:37:0a:d9:4f:5f:a1:f0:43:20:77:b3:
ad:d7:3e:4a:62:9c:7f:bd:b5:92:f4:40:d1:d7:a4:
36:ef:70:d7:57:c2:ea:1b:bc:c9:a9:30:a4:b1:8f:
cb:a6:68:7c:04:56:29:fd:71:d2:1c:7d:c5:1a:da:
20:a5:43:91:df:11:10:24:f1:df:7a:4e:2d:f4:a1:
64:67:8a:87:14:5f:fe:0d:19:cd:da:c7:df:65:38:
f5:89:d4:00:d4:65:b0:4a:c5:80:8d:42:ed:af:c7:
4b:0e:30:1d:2d:b1:11:a4:8a:8c:d2:47:e7:c9:c8:
1a:69:d2:b1:44:57:23:c1:81:53:bf:aa:4d:c2:9f:
77:e7:31:56:86:1e:75:e0:46:9a:37:62:55:72:6b:
75:a9:f4:44:49:bd:e8:74:9c:c3:7a:3d:ca:94:f1:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:D5:EE:AA:8E:E3:19:1E:9F:79:AC:AA:ED:D9:69:52:87:C9:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dd2496c-689b-344b-8a8e-6a35f12ecf3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.103.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ea:be:07:81:33:ad:db:be:2c:94:4a:9c:5e:0e:14:c6:9b:
1b:9e:d8:ba:70:49:7c:e3:53:84:29:a3:5a:80:4c:78:c3:1d:
34:7d:75:de:01:4c:ee:0f:85:c4:9a:e1:ee:9d:fd:ae:dd:1f:
81:cf:61:83:35:5c:7e:52:1c:34:5e:84:f2:52:fd:10:f2:3c:
5c:c7:30:6b:0a:7f:f8:de:ef:aa:68:f1:8f:b2:59:a8:09:6c:
b6:f7:e4:2a:80:59:bf:71:22:1b:a9:a0:f3:45:1c:51:65:ae:
36:e1:24:06:8e:a2:a5:01:93:b4:c2:72:80:b3:7d:bd:c3:b8:
08:79:e6:91:aa:ce:d5:96:c4:df:20:eb:b5:c1:bf:a5:a3:76:
a0:21:0c:c4:00:fb:f4:7d:cd:4b:7c:a0:92:6d:9b:95:7b:20:
53:71:de:76:00:99:d1:0d:84:41:2d:e3:4a:b3:fe:91:eb:84:
09:e3:bb:91:af:91:f6:c4:80:b3:f7:79:8d:1e:fd:8e:37:42:
4e:9b:90:9b:95:01:5a:89:98:2d:05:b2:c7:06:6e:f1:dc:53:
34:26:05:64:06:ee:de:9c:f8:2a:2f:06:fa:2a:b3:d0:e1:46:
cf:c5:7e:6a:d9:32:3a:0f:ed:3f:ff:df:a8:55:11:df:f5:a1:
9c:db:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:25 2025 by rpki-client