Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa
File: 4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa (raw, json)
Hash identifier: I9uVX/v9bKZZxxApAliB8e7Mx6dXLm56NvfMZJfD8jc=
Subject key identifier: 73:E7:63:5C:36:A9:4E:43:70:10:41:F1:CB:5B:74:57:90:D1:10:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AD2B9AD6BF13E36F0F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.96.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ad:2b:9a:d6:bf:13:e3:6f:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=230d5972-648e-4dc2-b0f4-5716fa270d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:d8:69:44:3f:c2:49:fd:68:57:90:26:97:
98:b9:30:0b:ae:c7:73:21:cd:bc:1a:82:b2:f2:ee:
5b:7c:29:76:84:bc:8f:81:67:07:56:b4:e7:32:8a:
df:f8:c4:c4:ae:5a:7d:4a:d1:93:6b:27:68:57:c9:
d9:a3:8e:c8:aa:8e:78:5b:3a:b8:2c:a0:15:cf:c8:
20:b2:6f:ed:52:3e:b5:0a:13:cb:4f:70:03:9e:25:
d4:88:a3:4c:a8:c5:69:7d:f9:4c:38:a1:95:db:47:
44:5b:f1:e0:1b:49:0d:fe:b5:77:71:e4:0b:65:7a:
82:5b:6e:19:b0:67:5e:1b:e9:19:63:f6:e3:0f:34:
08:63:2e:7f:3d:0a:f6:aa:62:30:1a:f5:80:3b:75:
cf:9c:27:4b:13:d5:cb:fd:c8:ef:d4:cd:7a:fa:68:
51:32:4e:63:26:07:61:97:ea:24:b1:49:de:51:35:
cf:ed:f4:15:4e:a3:e7:e2:32:43:f2:1c:85:22:79:
c8:42:d4:3a:65:e9:5f:65:06:fe:f2:94:c0:53:82:
9e:14:f0:6a:52:3b:9d:4b:56:a5:d8:b8:52:4f:40:
2c:09:60:4e:5f:82:98:cf:e4:ee:73:bd:a7:97:0b:
46:d7:3d:86:2a:45:02:b2:8c:9c:c4:db:22:18:2e:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:63:5C:36:A9:4E:43:70:10:41:F1:CB:5B:74:57:90:D1:10:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:7d:a6:8d:7d:6f:5a:a9:b1:9b:4e:44:51:7b:d4:dc:84:5b:
73:ba:9f:bc:bc:3a:fe:91:17:fc:34:12:ce:08:d9:36:0e:4e:
dc:0d:ec:0f:00:6b:f3:07:bb:3f:b2:2e:a3:9c:76:be:d0:d2:
1d:70:4b:09:f3:ad:a5:18:1b:4b:c5:02:7b:99:61:d4:33:95:
2a:2d:48:8c:e7:b5:28:8c:61:30:87:65:3d:3f:ca:b6:9d:3c:
a8:d3:e7:39:7e:c7:61:e5:f6:30:c8:f3:da:aa:48:1a:c5:1d:
9d:92:e5:08:ac:6f:ff:f9:21:0c:a1:90:92:b2:57:ee:9e:99:
a6:24:e3:de:d7:54:05:c9:c2:20:eb:a2:29:46:d5:f9:c2:4b:
94:fe:d9:6c:d9:62:b8:e2:8b:cf:45:76:2f:45:a0:75:ba:9d:
d4:74:51:14:23:8d:a8:39:9a:13:09:5b:b3:18:d3:42:be:02:
37:92:89:2b:51:a4:b3:5d:8c:0a:f2:7b:cf:0a:ce:d0:ba:e1:
ca:b8:3c:5d:b1:b5:d5:3c:05:3a:88:73:8c:25:6e:6c:c5:15:
fd:bd:04:63:a6:91:d9:27:95:8e:6c:b3:58:73:66:31:60:6d:
6d:47:4d:b2:2d:25:78:bd:60:0f:9c:48:2b:df:6d:3d:0e:59:
70:3f:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:41 2025 by rpki-client