Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa
File: 5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa (raw, json)
Hash identifier: yKXX8A14flAECDQPdfLztzmmBUL/3a3KPw5KF9QUJzc=
Subject key identifier: 66:19:FF:98:A4:7D:5A:08:8A:8A:21:6B:38:D4:67:D3:F5:03:CD:4B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5A8ACB619A7C2DF0F7480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.86.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a8:ac:b6:19:a7:c2:df:0f:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=9e4cd4b9-b3fb-4bc8-9a0b-d5dd5414320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:c9:a6:15:d3:5c:d1:fa:49:a3:fa:ca:21:
75:1b:77:f9:0c:0c:ee:e0:62:70:e8:5d:f7:bf:93:
eb:b8:72:9c:ac:e0:b0:e1:31:1b:06:28:7b:60:da:
98:97:0d:21:e0:59:6a:f2:47:85:d8:84:69:ce:0f:
1f:22:6d:ba:ed:5f:07:4f:61:a5:6e:01:d2:36:f3:
d2:1b:33:6f:9a:64:93:53:ad:8a:96:26:83:b0:5a:
3d:c0:1b:8b:69:a1:f4:4f:5a:54:bc:c7:a7:e7:cd:
79:82:98:06:2d:6a:36:53:bc:b4:b1:e5:58:53:51:
18:43:a9:cb:46:d8:f7:f6:6a:c9:b6:18:e2:a7:4d:
c3:d4:50:5b:7b:cc:55:d6:dc:69:82:6e:4f:15:dc:
b5:58:af:84:68:07:36:fe:4b:77:26:09:52:d8:de:
79:b2:cd:32:c1:cb:84:cb:80:d3:f9:e6:b6:a7:cf:
b3:00:aa:0d:77:a1:1c:d0:72:e6:4c:e1:33:1f:e1:
4e:a5:72:9f:e9:52:56:51:c1:a0:e1:81:75:a1:ea:
5c:66:56:e2:e1:29:93:ff:bd:09:55:27:ca:8b:c9:
ed:aa:61:77:d3:47:3e:cd:a3:9b:50:73:cf:5e:4d:
59:ff:d3:93:03:d1:75:6d:ea:be:1f:30:82:7b:0a:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:FF:98:A4:7D:5A:08:8A:8A:21:6B:38:D4:67:D3:F5:03:CD:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.86.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d3:84:6c:10:ec:85:ed:a5:be:bd:32:b2:0e:bd:d7:b4:79:
d8:55:55:53:d2:6d:ca:ce:17:ff:20:05:54:81:61:36:6b:33:
82:63:68:7e:f3:87:12:e8:ab:49:df:a0:ff:83:9d:3d:24:ed:
d8:ca:2d:ce:53:12:29:dc:f3:07:16:27:8e:82:4b:a0:98:b0:
ac:c4:56:e7:56:87:6e:e7:95:a5:35:ed:32:41:7e:0a:6a:a9:
63:33:81:48:aa:ba:aa:fc:06:db:f1:aa:b2:3a:e0:a3:6b:92:
23:40:3d:09:d4:f2:76:f2:5a:86:6f:e0:64:eb:ad:27:39:38:
85:8c:dc:36:39:33:b9:17:51:bf:ee:e5:2d:1d:44:73:87:de:
8c:4c:b2:78:04:86:d2:6b:95:3a:41:de:4f:0b:84:14:0b:41:
3f:f9:e2:49:f7:dc:85:bc:43:40:ed:ef:58:28:29:cd:32:51:
dd:9a:ac:7c:c3:11:b4:5e:90:3a:37:9f:98:73:ed:27:49:92:
90:02:10:10:dc:93:b8:fd:7c:2a:1e:85:59:05:3b:1a:90:33:
3c:22:7c:a0:0c:71:c7:87:2b:dc:8e:81:39:3c:b6:0c:3c:bf:
9e:5a:ac:83:84:56:89:a0:0e:9b:8c:d3:57:f6:bd:38:55:f1:
82:1e:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:06 2025 by rpki-client