Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa
File: 3e147995-92fe-3a09-bd47-ecd54b73da6c.roa (raw, json)
Hash identifier: GCUogE5QPAJtb7kRxVznJdu2EiNf3VuRmC5ZeZmbHMU=
Subject key identifier: 9D:33:CA:EE:64:E3:06:B1:B5:D6:3C:E9:3E:A2:82:6E:5E:D6:16:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AFBAFA78FD3DA30085C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.101.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:af:ba:fa:78:fd:3d:a3:00:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=df237ae0-a8c7-4f05-8234-8487435fab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:11:95:02:27:8a:12:23:48:d2:2e:23:98:
e8:58:66:eb:fc:47:2f:8f:72:ae:37:7f:54:88:d5:
07:18:d7:6b:45:fc:b7:31:ab:a9:9a:43:c3:2a:b2:
88:da:fa:a4:96:c6:b2:91:84:7f:e7:8f:d1:60:30:
f5:fe:3d:0a:6e:60:e3:7b:fd:51:a1:a1:d8:9f:20:
72:18:32:95:58:7f:5d:30:63:c2:08:63:69:28:2b:
96:02:d1:9e:1c:0b:ca:70:77:83:27:95:04:37:1c:
f6:d0:91:f4:e3:be:6d:8c:80:82:e0:2a:ec:37:a7:
e1:0d:21:a4:e0:49:e0:fd:48:73:94:b2:ba:6e:8d:
a5:83:3d:79:a5:a7:bc:c7:46:83:f2:2f:ba:94:33:
6a:07:86:fc:08:b4:77:ca:87:7f:f4:fa:4b:c6:84:
b4:20:7a:1d:e5:9c:f4:d1:d3:98:dd:da:25:a4:e8:
b1:0a:84:90:d5:02:e6:c0:18:9e:14:bb:57:dd:48:
d4:18:b4:99:2b:89:a1:cc:e4:ae:0f:20:b5:92:f5:
df:d7:e8:b4:9f:55:42:83:94:80:67:69:fd:51:a2:
d0:46:39:b7:80:f1:7a:ee:29:6b:2b:1a:52:e0:f7:
a1:02:d3:b4:86:ad:8c:59:92:8b:27:0b:49:62:28:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:CA:EE:64:E3:06:B1:B5:D6:3C:E9:3E:A2:82:6E:5E:D6:16:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.101.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:e2:c8:82:53:ab:53:ef:10:9a:dc:e3:6b:05:f5:d5:b4:7a:
0f:dc:82:51:86:f2:87:c8:ef:30:46:38:c8:12:ec:65:52:05:
82:6a:9e:8f:0f:e5:67:39:6e:70:94:78:e1:cc:54:a9:f0:92:
fa:b7:e0:81:3f:cd:b0:6a:ef:32:04:ec:c6:ad:e4:b1:cb:cd:
cf:f8:a8:36:43:87:2c:99:ca:a0:1b:e6:10:cd:c8:8c:2a:b6:
0b:3a:e2:25:36:f8:e3:41:02:38:37:c5:39:23:6c:cd:6d:dd:
89:81:9c:ea:6a:99:7d:ed:d6:5c:a9:ac:b0:c8:0f:ce:01:99:
5a:00:13:04:1e:bd:f6:c0:bf:bc:cb:d5:a7:2a:92:6b:3e:60:
cb:d7:a4:84:53:93:42:5d:27:73:51:61:1c:0d:be:fb:4a:b1:
5c:39:53:c2:d6:a1:31:84:11:8e:60:71:6f:b3:5a:52:55:3b:
2d:e4:ab:35:52:fb:65:59:1f:2d:e0:3e:6c:85:ab:13:56:2a:
05:bd:b4:ab:c2:c9:31:68:a5:b9:ba:a4:b3:0a:84:7e:0a:bc:
4c:cd:ab:13:37:5b:59:45:cf:cf:cc:5e:20:17:08:80:40:56:
f0:36:20:fd:89:f0:ca:3d:88:3a:b1:90:30:f8:50:3a:a2:c3:
45:84:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:24:16 2025 by rpki-client