Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58c14b88-b0b6-3497-88c1-33447e0fd0d8.roa
File: 58c14b88-b0b6-3497-88c1-33447e0fd0d8.roa (raw, json)
Hash identifier: qoksEe4Z5OMV8GzkLZffpdhNk4QJ06S22srqn+8VFqI=
Subject key identifier: 70:00:7B:42:52:C6:06:00:C8:35:DD:8F:10:1B:28:FF:63:41:C4:80
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A060B9B2F9602C558ABD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58c14b88-b0b6-3497-88c1-33447e0fd0d8.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.120.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:60:b9:b2:f9:60:2c:55:8a:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=3dc5a863-5a6a-4702-81d6-f4e224514a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:44:40:40:c1:e8:2f:d3:05:db:90:a7:78:
b5:98:43:0e:89:a6:e5:19:ce:5a:95:25:67:00:33:
32:5b:9e:38:e6:66:e8:fb:0e:ef:f8:98:6d:ef:f6:
df:4d:95:65:cf:09:e7:05:62:3b:af:de:98:b1:4f:
b7:d3:50:66:cf:60:96:c0:2a:8d:03:bd:c6:3a:60:
ea:31:3f:2c:78:16:8c:12:3a:69:61:74:1a:d5:bc:
88:93:ca:91:42:8f:e8:26:91:85:41:b2:b6:ad:0e:
08:1e:6a:62:af:c4:bd:4c:fa:c9:24:4d:9b:eb:f0:
ad:fc:41:7c:22:a5:72:bf:be:80:28:bf:b0:ab:89:
33:58:71:3c:97:51:1a:a3:73:4f:25:ff:83:eb:a9:
ed:48:ee:ea:3c:ef:a7:61:a0:8a:43:ac:54:42:7e:
36:06:2c:7b:8a:ab:be:ad:76:ae:2b:18:30:26:0b:
d3:1b:9b:18:94:54:48:30:e2:2a:a7:e8:f1:78:ed:
9e:06:5d:d0:b2:f3:f1:d4:81:f5:48:14:90:6a:a8:
03:e5:85:9d:59:56:e5:62:d2:17:6c:d8:df:19:f0:
84:50:71:57:8a:21:fe:bb:f4:27:08:24:a7:52:c3:
81:d6:cd:28:a6:74:da:5c:d1:24:f0:b6:a5:d7:dc:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:00:7B:42:52:C6:06:00:C8:35:DD:8F:10:1B:28:FF:63:41:C4:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58c14b88-b0b6-3497-88c1-33447e0fd0d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.120.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:e9:e3:b9:58:44:ca:a4:83:e7:cf:0d:e4:3c:66:d4:cd:7c:
21:6e:e0:12:8c:81:02:85:29:ba:96:4a:5e:a0:ea:2f:0b:5d:
f1:6e:4d:9d:f7:e8:b8:86:fa:c4:f3:f4:a6:65:34:b7:5e:44:
aa:39:7b:87:65:07:44:d4:30:e8:01:35:6b:8e:cf:79:59:c8:
23:33:3f:15:f1:78:c4:dd:6e:df:b8:35:43:83:db:87:d7:10:
a9:89:16:a4:4e:44:f2:9e:1a:e0:a1:98:57:a2:86:50:fb:32:
a0:4f:77:14:69:01:11:b4:c8:b2:44:f8:7a:7b:9e:2f:4d:d2:
64:91:86:90:f9:a3:d4:cf:c8:c0:77:18:19:55:51:c9:85:82:
d8:d5:f1:1f:95:10:8f:b8:91:9c:08:4a:a0:cd:ce:3e:74:e2:
35:7f:77:f3:e5:9d:06:2d:09:eb:5d:5b:de:cd:27:34:42:3a:
5b:a0:92:24:a5:a3:fc:de:20:f3:35:89:7e:c7:6a:70:bb:24:
29:09:25:9d:8d:f7:1c:4d:7a:86:d0:a3:ed:c4:7e:54:05:bb:
5b:66:9a:d5:12:5b:29:94:4f:04:4a:2e:bc:b7:27:31:cb:3d:
a1:f1:02:9b:3a:5d:c7:a9:55:fe:c3:00:dc:84:25:7f:13:2b:
23:fe:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:34 2025 by rpki-client