Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa
File: 4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa (raw, json)
Hash identifier: RjdMgiNZGNn5IlfxIHfQ/ilTfXu3dxalaXHU/uP/cxc=
Subject key identifier: A2:35:84:F3:22:F5:25:A1:12:09:B3:24:D8:41:30:FC:63:C3:0F:AE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848573ADE9CB2910A23EBCF4440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 20940
IP address blocks: 104.109.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:de:9c:b2:91:0a:23:eb:cf:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=f680d734-98a8-4408-b51e-b6a4729bb527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:be:e1:a6:ef:28:94:60:dd:65:ac:55:47:
4e:a4:cc:8d:e9:e3:be:f3:52:f3:97:51:7c:d6:ca:
7a:5e:8f:f9:e6:d4:21:8f:30:d9:17:bd:13:0e:d6:
a0:1d:6a:65:b6:6c:c0:e7:ff:1d:5f:de:91:50:06:
4f:15:09:f6:f7:a3:a3:37:8a:16:af:0d:29:35:4b:
6b:06:69:fc:3c:47:e5:8d:75:41:d2:71:61:df:a1:
12:07:ef:d9:4b:3e:e0:1e:34:0e:1f:5c:db:b7:bc:
47:69:6a:d1:af:31:4d:b8:c6:c8:9e:d3:99:d5:2e:
6e:c3:37:eb:58:83:70:a0:9b:5f:56:1d:29:e9:27:
d6:aa:8b:3e:78:c3:e0:35:1f:ce:af:2b:96:b2:4b:
4b:36:34:d0:30:47:74:af:fd:ab:3f:a6:ca:85:82:
b9:0d:11:be:f9:17:85:1c:eb:11:57:d1:cd:36:58:
4d:47:d2:7d:b5:b6:b3:2d:4f:aa:84:32:2e:d0:e9:
eb:80:df:51:94:2f:4c:b3:12:ec:9c:37:5d:42:89:
dd:88:e4:a1:c0:36:4a:7c:e0:97:07:dd:29:78:ad:
ad:3c:52:77:1b:1f:c9:ba:82:61:2b:ef:0a:42:2c:
fc:9d:13:16:c3:8d:21:df:22:9b:98:48:a7:7f:86:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:84:F3:22:F5:25:A1:12:09:B3:24:D8:41:30:FC:63:C3:0F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.109.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ed:b9:12:04:98:fe:68:61:c8:7b:bf:f8:92:4d:c4:b3:0b:
de:4f:8b:dd:cf:cb:83:4f:2a:2f:32:1b:18:9e:80:c6:9e:ed:
a3:b7:81:d3:78:14:d2:5c:b1:1f:63:ae:e5:a7:b2:e1:e6:e6:
07:4f:f4:59:ac:66:32:9b:bc:dd:5b:9a:05:b2:f2:c4:ea:c7:
de:8f:6d:eb:ff:e8:c3:c3:42:28:b4:30:15:b6:71:36:1f:e0:
b7:15:b1:94:e6:37:e8:a6:3c:96:6f:ea:c4:e4:58:d5:f7:c6:
81:12:e9:6c:a1:1a:f5:f6:03:02:7b:5f:4d:a2:08:2b:6f:0a:
ce:34:1a:e0:24:8a:26:cd:2e:86:7c:5a:74:2b:88:15:11:42:
26:b1:d5:f1:2b:02:00:0d:94:d2:08:2a:60:5f:35:5a:29:76:
f3:23:46:03:5f:9e:37:82:24:91:e5:75:df:80:32:5b:42:36:
ec:f1:8e:3e:ea:7f:97:66:c0:45:42:43:f9:0f:9b:b0:13:04:
07:69:55:70:a7:2c:27:4d:84:37:ce:f0:f0:c4:30:69:45:d7:
8c:a6:a6:4e:73:1e:21:31:22:ac:37:09:5c:ca:23:7e:eb:5e:
f2:44:65:cc:77:8a:b2:3c:26:2d:45:41:e7:07:b0:1a:eb:c2:
4d:29:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:26 2025 by rpki-client