Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b3349ac-e298-339e-9942-9d2b37fa8cc3.roa
File: 4b3349ac-e298-339e-9942-9d2b37fa8cc3.roa (raw, json)
Hash identifier: aZcUDV+zWlgwdfSLQ80qG30UXShPJ6Xaj62+QwkMulw=
Subject key identifier: 2A:07:FC:11:9C:9B:7C:C6:A0:F7:54:D9:EE:5C:89:43:BC:3E:92:95
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0B8C02A65C5EBA6DA400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b3349ac-e298-339e-9942-9d2b37fa8cc3.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.78.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0b:8c:02:a6:5c:5e:ba:6d:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=937af315-5d97-4ed7-a92f-7ae3c2739d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:e7:38:be:e2:c7:20:4a:52:03:e5:ef:43:
5f:74:b2:3d:5e:ef:ed:49:7f:8b:0b:ea:ed:d5:f4:
70:d3:c5:e1:5d:d6:0f:d5:bf:9d:c7:d8:af:51:e0:
df:2e:d3:a8:61:0d:f6:ae:aa:f3:7a:f3:f6:09:2a:
38:e2:8e:0b:a4:fd:74:13:a4:59:0e:12:8b:3c:2d:
ad:fa:23:4c:37:48:7b:6b:b5:34:29:7e:e5:45:43:
c7:26:44:e0:2f:f8:5e:7d:8b:f3:f7:e9:f2:ce:18:
ed:1d:b5:06:14:f1:0b:b0:67:8f:82:30:cd:e9:6e:
9d:ce:38:0d:d7:c3:79:fc:22:a7:83:d4:c4:30:1f:
3f:fd:3f:e5:f3:11:b4:9d:75:3b:07:df:0c:71:02:
c9:31:14:c1:70:5c:8f:8c:20:f2:1d:a9:ce:16:47:
de:38:c5:15:5b:2c:cc:bd:93:ad:66:07:cf:5f:d4:
1b:ca:d1:e2:9f:17:9e:6d:90:e4:4f:97:71:17:52:
c3:f1:62:fd:b8:19:65:20:6d:e3:a7:73:31:9c:2a:
9d:48:d8:8c:66:67:52:8d:15:c0:64:17:5f:b1:b4:
83:87:91:e5:3b:80:f5:e2:7d:0f:d1:92:36:66:64:
15:06:3f:7f:a2:64:2e:34:a7:9b:58:c6:f4:0b:9b:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:FC:11:9C:9B:7C:C6:A0:F7:54:D9:EE:5C:89:43:BC:3E:92:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b3349ac-e298-339e-9942-9d2b37fa8cc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.78.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:64:f2:36:2e:26:ba:3e:c5:4b:52:e8:0b:9d:55:53:5b:cf:
5e:4e:57:1a:04:24:e5:7b:a5:c8:43:8d:11:8e:83:b4:1b:d7:
65:7f:ce:c2:d1:80:87:91:f6:ac:b0:1f:9a:21:d3:b8:56:20:
86:44:3e:55:a0:a7:ca:22:43:bb:04:3a:54:1a:08:37:e8:73:
85:84:92:ac:b5:d1:11:bd:71:f3:4b:4c:71:58:ff:de:1f:41:
57:87:65:d2:40:d9:f7:83:10:bb:b0:6d:7c:fe:bc:fc:f6:79:
29:79:9d:67:06:49:11:5d:2e:0b:ce:b1:83:6e:6b:5c:24:2f:
a6:9c:16:ef:7b:bf:af:32:39:b8:9e:cf:3a:46:59:82:b6:fc:
1f:84:0e:41:16:f7:f6:46:16:20:6c:19:8f:72:10:cc:7d:9e:
e4:eb:18:0b:bb:39:75:fc:eb:e4:df:96:e4:f7:5d:8d:4e:a4:
82:7d:1d:07:c9:9f:d1:3e:ba:2f:09:23:c9:9e:b6:98:4a:fb:
0f:5c:d9:47:ca:d7:ee:bd:85:be:bd:79:55:f6:9a:e7:91:9b:
00:5e:a8:e2:dd:bd:c5:92:d5:fb:6f:5b:e6:67:33:54:a9:67:
c9:7b:bf:1f:a4:d8:39:67:0d:ff:53:5c:d8:6e:43:73:d6:a9:
c7:b1:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:22 2025 by rpki-client