Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51ef3e10-1e9a-3d3a-b40a-df969f6d5737.roa
File: 51ef3e10-1e9a-3d3a-b40a-df969f6d5737.roa (raw, json)
Hash identifier: gWfNAKXrdaCJ1gkPMwOr68UA2MetVUdA0sRRjSZAmWY=
Subject key identifier: 5E:FE:6F:67:41:10:A9:29:30:3B:D9:0D:F1:1E:3F:23:C0:69:C6:B4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AEAEA597074C8874A8E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51ef3e10-1e9a-3d3a-b40a-df969f6d5737.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.98.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ae:ae:a5:97:07:4c:88:74:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=4af3fc1e-527f-4b1b-aead-5085ccee2561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:b9:22:21:83:44:3a:37:13:78:ca:d5:c0:
91:f3:7d:d8:fd:15:6f:cb:24:c8:67:96:00:83:e1:
95:e0:e9:49:74:86:76:b9:f4:e8:3d:1e:32:bb:be:
a5:2f:23:8b:af:18:fd:11:81:ee:69:9b:41:ea:db:
22:9b:e7:07:e8:be:04:d0:f0:4c:9a:68:7d:a2:18:
89:a6:40:29:09:fe:ea:f4:2c:e0:ae:cf:e9:e2:8f:
2a:f4:b2:a0:5a:e6:f1:62:5e:cf:8d:b3:c5:97:da:
ca:a0:69:14:b8:e8:12:2c:17:43:7e:2a:c1:ca:f1:
14:d3:4c:a4:ed:6d:0d:96:d9:e8:4c:d5:dd:7e:ae:
45:69:35:6e:95:89:17:e2:4b:69:4f:e7:d1:6b:52:
11:b3:c1:83:8a:a8:2c:2c:99:2a:d3:2b:36:88:c3:
03:c3:a0:5a:33:59:1f:f5:3a:f2:91:1c:96:f9:ef:
5b:37:59:20:9c:06:3e:d6:e8:70:ee:74:b9:8a:79:
b0:17:52:ea:8d:de:6e:92:a2:37:51:3b:a9:d2:cc:
ae:25:b9:1a:e1:c8:41:54:e9:94:97:42:8b:1c:ba:
b9:b9:ef:3b:81:a2:c6:21:0b:a0:3c:18:a9:05:d0:
42:7c:55:9f:db:cc:0b:3a:bf:c6:01:64:8e:d0:52:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:6F:67:41:10:A9:29:30:3B:D9:0D:F1:1E:3F:23:C0:69:C6:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51ef3e10-1e9a-3d3a-b40a-df969f6d5737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.98.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:bf:c3:d4:61:ad:37:b5:c1:4a:cf:f2:8c:16:71:87:1d:17:
03:2c:b1:e5:a9:02:74:15:55:08:43:73:d0:8c:5c:68:74:25:
a8:b4:b4:9a:b6:7a:04:78:ac:3a:dc:86:f1:79:36:0e:4c:5b:
68:ca:e7:26:7d:36:11:bd:e4:1a:54:2f:35:9d:4d:67:74:4c:
28:f2:33:9c:7a:6b:a8:a2:af:10:ef:3d:6b:f4:c1:78:d6:ea:
c0:be:33:2f:a9:b8:df:29:91:a8:76:9e:67:05:ee:2d:5c:7b:
4f:af:cb:27:7f:4a:5e:bd:51:a4:c7:e1:b8:08:40:d1:bb:0c:
6c:f6:6c:d4:20:fe:0f:19:16:ac:e2:cf:22:2e:a0:ec:21:1c:
07:bc:fb:bd:dd:8a:a8:cb:33:4f:9e:02:85:ec:4a:af:31:38:
2a:b3:62:ce:54:54:a3:29:44:86:9d:1c:a8:31:98:04:da:76:
c5:68:19:38:e0:61:ad:86:0b:a3:8b:ac:1b:d3:70:56:e6:e4:
00:e9:91:64:1a:ef:33:ad:b4:0d:da:3e:c4:55:15:44:8e:fd:
9b:4c:d8:42:3b:3c:1e:5e:26:df:f7:06:db:c4:6c:b7:03:b9:
2d:64:d1:5e:ab:66:a9:bf:53:0c:33:76:cc:45:fe:e2:e6:af:
6b:94:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:02 2025 by rpki-client