Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b928e73-0d6d-3bbc-b007-30232568a073.roa
File: 4b928e73-0d6d-3bbc-b007-30232568a073.roa (raw, json)
Hash identifier: luQMntTYMpMJLlKL/SgH7weWFP3g39kKVgLT9fX2zLg=
Subject key identifier: E4:1F:23:FD:A9:1C:72:26:01:44:B8:A4:5D:1A:0A:65:BF:C7:84:EC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B073431AD12174D711E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b928e73-0d6d-3bbc-b007-30232568a073.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.66.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:07:34:31:ad:12:17:4d:71:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a22e07ac-c7ca-42ad-b566-e0db8adca3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:7e:34:37:82:7f:5c:da:3c:59:7a:4d:d1:
c2:0e:f4:82:18:0f:84:fd:0f:dc:9c:bb:a4:cd:3a:
5f:1a:83:ee:01:43:4f:f9:a4:0f:37:af:11:b6:f8:
4c:62:2d:ed:14:2b:0a:49:c8:29:80:3c:49:84:4d:
80:19:7b:36:93:0b:f1:e9:93:fa:d0:d8:82:52:77:
bd:1d:68:99:14:24:24:79:b5:57:ea:90:b6:2c:1d:
8b:99:c5:5b:db:36:72:dc:ed:2b:85:dd:40:4c:9c:
66:a3:bd:7e:39:88:ed:dc:5c:37:b2:88:2d:33:7b:
d1:fb:71:53:f8:75:06:21:99:dd:b1:0d:6f:e3:d4:
cd:55:af:c4:75:1e:07:41:b5:39:e2:8e:32:93:bd:
7f:e7:5a:41:d0:82:e0:ba:27:e5:c8:d0:c0:40:43:
b9:71:0f:cf:97:5a:96:bd:a6:db:94:43:68:ac:a0:
2c:b4:ea:63:86:3b:0b:ac:d2:ce:42:2b:3d:ef:16:
03:80:82:25:dd:78:ea:6b:40:e4:57:f2:73:88:e6:
df:b9:38:2c:b9:39:a7:b0:4a:8b:b0:73:f6:8c:c2:
30:7d:2e:19:20:b7:63:78:6e:04:42:fb:05:13:87:
54:c1:1a:b4:13:82:e4:ef:7f:3c:4e:67:31:91:e9:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:23:FD:A9:1C:72:26:01:44:B8:A4:5D:1A:0A:65:BF:C7:84:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b928e73-0d6d-3bbc-b007-30232568a073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.66.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:c8:61:d8:9a:30:fe:38:73:52:ee:ad:5b:51:20:18:50:43:
f0:9a:ce:d9:22:88:5d:f2:7b:f3:88:57:13:0e:20:9b:3e:ea:
ed:7d:6c:51:f8:7a:ea:1e:24:7e:6e:02:db:ee:12:1f:e0:93:
af:2b:3f:f8:ea:7e:6f:a4:c9:cd:e4:11:63:15:af:48:97:0d:
4a:ad:62:8f:f2:26:77:64:83:34:9b:93:25:37:6c:2e:0e:46:
97:ad:80:f1:26:1a:af:e9:07:79:9e:64:42:6d:9a:0a:a7:14:
61:0a:a0:41:79:9b:98:b7:b9:59:fb:46:b6:f1:d0:1e:d4:14:
e4:f2:5e:bb:c2:9a:3c:6a:62:86:19:be:ec:20:64:bf:eb:57:
69:fd:5c:64:07:81:d2:96:e2:db:d7:7d:dd:6f:2b:b8:c0:dd:
d6:44:cb:3a:b0:dc:e8:4b:74:41:04:4e:5e:c7:68:23:ef:ac:
30:3d:e0:46:50:92:24:76:34:a5:91:a1:2c:2c:e8:07:34:e6:
17:87:4e:f0:b4:72:42:1f:e1:79:ba:94:98:db:c6:c0:0a:60:
43:a3:4d:6e:18:ef:b1:1e:bb:1b:ae:86:13:64:dd:b5:65:d6:
0a:d5:d9:86:42:0c:15:85:b0:e5:18:d8:6b:4f:c0:33:a5:d8:
03:7e:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:38 2025 by rpki-client