Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e396f08-aef2-3998-ac55-6292131e882b.roa
File: 5e396f08-aef2-3998-ac55-6292131e882b.roa (raw, json)
Hash identifier: ETtwlRdo+E3yqXoOppt40d4I91j9iJhOOnDEYRSJ8bI=
Subject key identifier: F9:54:4D:98:31:CF:7D:D0:76:32:A4:D6:F3:F3:3E:B4:4E:09:90:B2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0698B8FC517F1DBE43A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e396f08-aef2-3998-ac55-6292131e882b.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.123.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:8b:8f:c5:17:f1:db:e4:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=d238a3be-e75b-459b-865b-e9a0c4106906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:d4:c4:35:77:e6:ab:55:2a:5b:de:bd:9d:
82:aa:e6:13:21:c2:f6:b8:3b:f3:fe:0d:75:02:48:
43:d8:3f:5a:7b:84:87:74:24:7d:ea:42:44:41:6c:
1a:5d:f4:23:62:fc:03:95:05:02:cd:13:dc:79:55:
0f:d3:0a:09:97:00:23:52:0f:4a:ae:ea:1a:e8:a7:
fa:d8:a2:75:7a:66:51:dc:14:cc:cd:be:69:51:20:
49:bf:6b:66:98:02:19:57:5a:0a:4e:13:4a:41:20:
df:10:f7:d9:43:54:52:77:7a:7a:33:37:ff:8a:64:
b7:bd:2e:e1:3d:6c:3b:f3:6b:86:8d:60:e0:4e:31:
69:25:18:98:4c:c1:5c:7d:dc:53:7b:1f:9b:d0:65:
ce:f9:c1:ca:86:0d:70:b4:92:95:1d:4c:03:8d:fd:
e7:a7:30:6e:e3:22:17:38:f0:0d:f4:68:26:bd:51:
97:e9:15:25:af:52:2d:26:0f:51:2b:bc:74:42:80:
39:19:97:6f:40:39:61:4f:71:89:13:70:b0:07:b3:
03:62:88:de:4b:d1:a6:ec:5e:59:22:69:56:e4:0e:
c5:78:42:6a:be:d8:cb:e2:51:24:0a:5c:35:fd:5c:
5a:bb:9c:b8:04:66:65:fa:5c:05:b0:a1:24:99:ba:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:54:4D:98:31:CF:7D:D0:76:32:A4:D6:F3:F3:3E:B4:4E:09:90:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e396f08-aef2-3998-ac55-6292131e882b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:73:d3:ed:89:a6:00:8a:d5:44:d9:c0:e8:80:ea:d3:30:cc:
8c:d3:c0:5d:a5:9a:99:72:d3:72:49:f1:6a:73:63:b9:dd:d0:
9e:7f:9b:54:29:7c:e4:ee:70:01:1f:43:07:24:2b:ae:2a:49:
b6:34:b1:9d:c0:c3:65:20:de:17:b0:47:4a:4e:76:1b:44:a0:
f1:7c:16:22:37:54:69:b5:6d:03:34:30:3d:cb:9c:61:a1:b4:
1a:0a:35:97:c8:22:37:39:f8:3a:b6:53:dc:f4:3e:8b:ad:64:
fa:b1:29:9b:41:68:db:0e:f5:84:ea:d7:cf:62:70:ea:03:e4:
cb:89:21:88:12:2e:ae:7d:c7:88:32:10:8e:ae:0e:b2:39:c3:
1c:4b:7a:aa:79:31:ae:86:4e:46:16:7e:cb:db:52:ce:4a:e9:
23:ef:27:64:89:b1:c9:2c:f5:8e:6e:ea:8c:a7:ad:8b:d3:49:
47:72:e1:48:86:ca:28:43:66:27:22:b9:14:5a:6c:bd:44:ff:
b9:65:54:84:e0:e5:bc:b9:f8:e1:fa:a1:a7:fd:9d:dd:3e:3f:
75:6d:db:9b:fd:96:e1:e4:c0:c8:5f:32:e7:1f:f6:45:45:b0:
07:d1:c4:24:be:84:ed:05:e1:c6:37:3f:92:de:41:3b:8a:5e:
db:77:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:03 2025 by rpki-client