Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56331a3e-3152-347e-b44f-66a868f3b571.roa
File: 56331a3e-3152-347e-b44f-66a868f3b571.roa (raw, json)
Hash identifier: yclAyP5Q3Bib9VFI0GvaEVv3At1ztRkFkkdMjVTeKXk=
Subject key identifier: C0:3E:08:32:DB:29:79:64:2E:BB:FE:CE:62:11:18:01:5A:74:51:F8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0AE5099032B521B60B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56331a3e-3152-347e-b44f-66a868f3b571.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.77.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0a:e5:09:90:32:b5:21:b6:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=defcc275-a4a7-4a3f-9432-2a58044c80db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:6a:05:95:fe:7d:eb:ec:5b:cb:e3:98:bb:
31:87:e9:f5:3c:75:36:45:15:05:eb:1c:0c:9f:00:
e0:15:63:f3:97:18:02:ed:64:5b:bf:fc:28:3f:9e:
08:4c:db:f3:fc:b2:3f:cf:f5:1d:15:1f:3b:7b:35:
b9:22:55:37:74:ce:ed:65:18:7c:f3:ce:0c:eb:2f:
a3:b5:6b:7e:d6:e8:19:36:86:ca:e9:cd:1f:4e:ff:
3f:d6:df:d0:69:c7:39:ba:ec:ec:97:8b:b4:c7:7b:
a8:6d:4a:53:97:27:8d:2f:81:1a:ac:1b:78:23:55:
31:51:45:50:2e:70:79:3a:9c:8c:4c:41:f7:e6:c5:
2d:e3:be:41:3f:22:4d:77:ce:c9:2d:e6:e7:45:03:
db:0f:d4:54:d1:04:fd:0d:16:03:bf:92:a0:f3:f2:
83:20:ca:a1:04:d4:1b:b6:2c:6f:d4:e3:e5:47:fb:
81:3d:21:4b:2e:39:66:c2:a2:eb:ce:4d:00:74:03:
a0:0e:99:b8:2b:cb:6f:0a:ce:ea:03:f7:94:7d:6c:
45:14:a2:63:3e:9c:aa:13:f4:53:05:0d:ff:48:c5:
40:e0:a0:28:bf:61:93:91:22:22:72:d3:62:50:b4:
c3:e5:aa:05:5f:12:a2:7d:66:39:95:36:73:6c:90:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3E:08:32:DB:29:79:64:2E:BB:FE:CE:62:11:18:01:5A:74:51:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56331a3e-3152-347e-b44f-66a868f3b571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.77.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:0d:da:79:e4:30:85:91:ba:f1:6d:46:19:a2:cf:d8:67:34:
b7:16:4b:5f:4f:5e:37:08:58:97:e4:e7:73:07:ac:24:94:81:
17:8d:e1:29:ac:1f:f4:0c:d5:46:67:71:11:9a:95:05:f1:0a:
6f:52:e4:43:25:66:b1:1e:43:42:09:d7:a6:06:2c:86:90:31:
7a:7e:61:2e:e6:72:8a:86:43:3e:b5:c9:2b:4a:db:e4:fc:13:
46:15:09:0f:66:0e:ca:d8:24:99:07:2b:d5:40:ee:57:f4:92:
0c:27:ba:ec:45:82:bd:3a:ce:eb:d2:d3:23:e5:67:ad:02:ef:
83:5d:46:f8:d6:94:eb:76:da:01:f3:c0:ba:00:bc:10:1f:0c:
76:dc:b4:44:20:45:e7:1d:e9:b9:8c:67:ef:ff:fd:11:64:69:
a7:59:b9:42:40:f1:32:61:90:df:e9:9c:f1:61:c6:38:6c:c8:
14:d1:c5:2b:a4:dd:ed:40:7b:4f:1a:3d:8a:fe:ed:3b:64:fa:
56:db:8b:86:c5:94:90:77:a9:93:d9:31:df:29:86:56:47:53:
7e:3e:0d:60:9f:15:21:71:6e:c8:a9:bc:a2:2e:8b:13:b9:df:
c5:b6:03:e1:b4:f9:12:cd:cc:51:d7:b7:33:b9:7f:db:4d:de:
2b:31:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:43:07 2025 by rpki-client