Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce4e0f1-ebd1-36ba-bb3c-ae5af2fe8ce5.roa
File: 3ce4e0f1-ebd1-36ba-bb3c-ae5af2fe8ce5.roa (raw, json)
Hash identifier: HQA33YBCC6t0ThufvG4HMo17Xvbt8MMkaWBrDL+dh+Y=
Subject key identifier: 11:5F:2E:32:AA:2D:CD:C8:65:41:B7:D0:1E:66:39:67:45:1B:01:50
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484945795B3E959EA9C6206400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce4e0f1-ebd1-36ba-bb3c-ae5af2fe8ce5.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.81.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:79:5b:3e:95:9e:a9:c6:20:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=6a812c16-6597-4b53-9bff-632a177bfc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:f9:99:41:43:98:b9:ef:8f:f8:35:64:23:
cf:7d:30:74:6a:31:d0:81:59:6e:1b:fb:62:a1:28:
c6:be:b5:32:4a:b1:e3:47:e4:dc:fd:aa:a2:da:65:
a7:a0:a9:b6:f1:7a:9d:e8:7d:49:9f:e7:52:6b:f3:
bf:1e:2f:f9:44:7f:90:b0:c3:fa:5b:ba:a9:ca:9c:
c5:24:a8:88:29:39:8e:89:a3:04:a9:c3:1a:03:a4:
19:80:26:6d:9e:a6:67:07:13:a8:94:49:ff:7a:0c:
d4:88:0b:7d:df:9f:67:64:ec:2c:f4:c1:e0:1d:af:
bf:f4:3d:64:af:60:21:83:d8:b9:86:76:a3:b6:8d:
6b:e5:b5:7b:fb:81:e8:26:1f:57:99:1b:4d:ee:c6:
77:76:25:1f:54:39:52:6d:a4:64:40:87:9b:7c:e9:
bd:6d:16:77:b3:af:f3:e5:6f:1e:f8:45:c6:72:6d:
3a:53:12:f3:6b:fe:10:36:ce:32:5e:56:e1:79:7d:
e7:f5:d0:88:ac:4e:4e:3c:2a:81:4e:06:5a:90:f8:
4b:81:e1:0c:df:b7:e8:58:fb:df:be:cc:e0:7d:dd:
ff:47:aa:ef:92:2f:9f:1e:09:61:3a:52:35:19:77:
d0:a1:9e:ab:71:fe:d7:5d:82:d4:31:59:66:0e:36:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:2E:32:AA:2D:CD:C8:65:41:B7:D0:1E:66:39:67:45:1B:01:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce4e0f1-ebd1-36ba-bb3c-ae5af2fe8ce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.81.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:2a:04:99:14:6f:ba:94:d6:54:0b:8d:18:5f:53:1b:2c:ad:
50:05:6f:68:ab:08:c8:5f:4e:4a:59:36:1b:6f:1e:a7:7a:dc:
5c:52:95:e7:e7:5d:da:fe:1f:7e:bd:7d:0f:00:ad:c3:88:ce:
ff:19:bd:fc:0a:00:a7:bc:ba:20:b9:5c:e5:9e:50:c2:be:3a:
94:5a:eb:43:43:ed:6b:d6:f6:d1:89:11:30:d3:6a:1b:56:31:
ed:a2:31:b3:ac:3f:22:97:bb:f0:d7:1f:dd:b1:25:c8:27:37:
13:ed:26:26:8c:27:c7:46:8c:ba:b2:3c:33:87:3f:b5:fa:3a:
dc:ae:15:07:59:5d:11:11:49:9b:8f:4c:56:8d:33:0a:f6:8e:
f7:70:ae:b0:0d:b8:c2:f9:34:e7:5a:96:7a:b0:c2:61:78:fb:
5d:f5:48:a9:84:f2:79:a2:50:f7:9a:49:57:a9:ed:7a:ef:f1:
45:e6:13:62:21:66:6f:c4:40:bf:f9:f4:36:a6:d3:74:58:78:
81:80:72:9a:85:b4:0c:23:2a:db:38:06:6b:45:68:82:7e:4d:
c0:c4:e1:47:7e:f0:03:ef:6d:a6:68:6b:82:a9:db:41:f9:f4:
22:39:1a:42:c2:fc:33:d3:42:0b:8a:e6:b5:75:b7:c6:1d:b3:
f6:3c:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:46 2025 by rpki-client