Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa
File: 33ed5294-5a11-3b28-98d3-492f7645ef6b.roa (raw, json)
Hash identifier: W/s+vtYiJePCQTGPKwXHyPiSWikwnIsfPKjOsahRD6M=
Subject key identifier: EC:E7:1B:E7:53:AE:EA:A9:EB:B0:71:9B:6B:AA:5C:D0:C5:ED:33:42
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0690E4E372912798ABA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 3786
IP address blocks: 104.123.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:0e:4e:37:29:12:79:8a:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=97bbbbf5-b540-4940-8882-971ef0d632f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:b0:d8:52:92:60:08:02:3c:05:ee:3d:6e:
98:fd:32:0a:92:21:7b:99:c7:5d:f1:66:7b:34:83:
3c:03:6c:ba:0c:ac:5f:ea:e8:5f:40:04:c4:d4:32:
60:ae:04:c9:bd:16:71:45:60:ac:82:ec:9e:5f:0c:
80:1f:c7:72:4e:5a:ef:e5:ad:9f:f1:75:c4:37:7f:
65:f0:7a:1e:88:68:71:36:e2:f9:e9:0c:63:d1:ac:
29:f7:5f:7b:51:44:08:81:6b:29:c8:ce:bb:bd:fe:
8d:48:b2:92:04:41:1b:20:79:ee:b6:91:dd:b7:90:
e3:37:93:91:5c:58:d2:a1:44:03:09:67:28:2b:dc:
06:62:ef:4a:34:56:96:99:42:8c:25:19:5b:20:26:
bf:d9:fe:c1:42:9a:c4:52:e4:e9:e7:69:d4:ad:75:
27:3f:07:a5:ab:71:89:28:63:5f:1a:69:58:d7:33:
47:ea:0d:87:3b:b3:60:a4:01:71:62:74:1d:77:b1:
1f:2e:39:e2:54:e0:43:f3:53:93:56:12:dc:02:63:
ad:c9:31:95:d4:d1:c8:b4:e9:48:35:2d:a2:2f:85:
00:a5:d6:1d:cd:75:d5:33:df:37:04:04:9d:35:68:
33:95:66:b7:30:57:b4:d4:78:62:fb:57:7f:f0:aa:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:1B:E7:53:AE:EA:A9:EB:B0:71:9B:6B:AA:5C:D0:C5:ED:33:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:43:14:35:ca:4c:b7:b8:cc:e3:33:a6:f4:74:61:57:2e:b6:
99:ee:54:d8:2a:56:55:86:80:5f:db:5b:1d:2e:57:fd:9f:ad:
81:fa:6d:d0:5f:1e:44:7c:65:96:80:3f:6c:5c:26:ee:1b:ac:
dc:65:be:5d:9e:9d:05:c4:2e:ed:9c:c6:73:a7:b9:cd:a8:cd:
be:90:ac:f1:db:f8:8c:45:95:7f:59:b3:7a:e6:3f:fa:17:0a:
d1:fe:54:9c:04:66:2d:11:84:e4:7c:8b:96:5f:ba:7c:d0:f2:
8a:c4:26:95:a6:9e:8e:0d:dd:a5:70:fb:27:a8:3e:63:3a:16:
e3:3e:d9:ab:3c:d7:c9:7c:15:74:1a:d2:0b:5f:cc:96:dc:64:
0f:82:49:e0:83:04:ce:64:30:01:7a:95:05:41:29:b6:ad:c9:
e8:60:d9:2f:ce:80:d1:47:cb:ef:b8:47:fb:4d:bd:06:e5:9c:
1c:76:f3:ab:3d:c1:80:bb:fa:fd:d4:f2:1b:39:3c:db:6f:9e:
48:b6:d0:cf:68:b4:5f:61:8b:8c:57:27:d3:1c:6b:f2:b9:cf:
f6:b8:5a:e8:88:8f:cf:34:8a:95:58:b3:1d:e5:1e:8e:9c:d0:
dd:96:bc:b7:5a:c5:59:2b:1c:e2:d1:c7:0c:17:c3:37:a6:25:
ae:dc:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:55 2025 by rpki-client