Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e6ccab2-b827-336c-9724-d6b259e4e914.roa
File: 5e6ccab2-b827-336c-9724-d6b259e4e914.roa (raw, json)
Hash identifier: e7/Y5SlGWk3JvMSDYuuh+I6WIo77obFUs/Ks9TV0mGs=
Subject key identifier: 55:3B:E4:65:4E:9B:C1:BA:A2:23:20:02:FC:90:19:A1:52:D4:3D:FD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0B1295EE48D118D01100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e6ccab2-b827-336c-9724-d6b259e4e914.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.77.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0b:12:95:ee:48:d1:18:d0:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=b3397384-7382-45f3-82d1-4e63b4f177ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:a1:70:26:2e:0d:59:f3:68:4b:fe:2c:7e:
3d:bf:09:73:e5:c7:5f:df:ed:7b:6d:5c:48:e3:c2:
d0:ee:60:db:6c:01:e5:87:c1:11:90:c5:76:29:95:
2d:95:cd:19:2a:55:71:be:24:51:a0:91:98:08:72:
2a:7c:e5:6e:77:46:ce:ad:d5:69:af:f0:31:f9:39:
1c:c8:e1:0c:a8:1f:25:e7:e8:d2:44:3b:b8:62:e8:
d8:b0:d4:ee:3b:12:75:e8:0d:52:b9:c3:e3:92:b6:
cb:c2:60:af:ee:48:2f:bc:ce:61:41:e1:ba:44:b7:
43:22:2c:a9:e3:1c:13:0a:40:0e:b2:c1:1c:82:38:
90:c6:04:7d:55:35:a2:33:d3:ef:29:ef:df:56:2d:
0f:31:9e:0d:51:46:ec:1c:38:fa:1b:33:c0:26:3d:
aa:04:55:21:cc:b3:75:95:88:b1:49:b5:12:18:36:
9b:78:34:0f:6e:af:44:de:33:23:f4:58:6f:9a:8a:
0e:93:ba:fa:b0:dc:07:fc:0a:7e:20:66:c5:8f:32:
99:e1:e5:91:4a:c8:7a:6e:90:d2:36:dd:c6:7f:35:
50:b0:44:d9:41:29:ef:c8:d6:a3:33:5a:fb:15:ce:
b2:61:d1:1b:06:d9:ad:7b:2d:db:05:ec:c1:d8:2c:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:E4:65:4E:9B:C1:BA:A2:23:20:02:FC:90:19:A1:52:D4:3D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e6ccab2-b827-336c-9724-d6b259e4e914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.77.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:54:97:8b:90:f4:f8:cc:8f:c1:f1:05:f6:17:13:0d:5f:3b:
24:2b:87:16:0b:db:e9:cf:93:a4:c1:b2:67:0b:3a:17:9f:bc:
0c:d1:1b:e2:4f:8e:6f:8a:f4:f1:b3:bd:d0:98:ec:a4:6c:37:
e7:c6:d4:7f:87:99:ae:25:ba:6c:34:4d:a0:10:4f:6d:5a:67:
b6:c3:bd:15:80:b2:7a:61:89:31:57:b6:f5:ce:d3:ed:b3:80:
e0:4a:da:12:f9:1a:ba:18:7f:3d:4e:0d:9c:ed:dd:21:ba:84:
f5:dd:27:6c:f3:90:32:1b:b2:ec:e0:40:ab:e8:6c:03:cb:65:
5a:e5:ac:15:d8:db:e6:89:b9:52:b9:fb:af:f2:47:ab:04:e9:
f4:c6:d5:52:e7:22:6c:91:00:4d:76:6f:8c:83:5c:6c:7d:58:
9e:1f:33:68:28:1b:a7:f6:15:67:1c:76:a8:1a:b0:a3:94:20:
6a:5c:10:19:33:58:fe:8e:4f:d1:a0:06:ed:2e:d2:2f:1c:70:
c1:a1:2a:41:c1:a3:8d:8f:e5:92:ed:cb:cc:9a:22:c4:b2:fb:
28:ff:8d:47:1f:54:96:8d:c0:1b:ee:76:dc:15:fb:84:a5:4b:
f8:42:13:b2:c3:cc:d0:47:83:4c:0e:94:93:19:cb:3f:42:78:
1e:22:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:54 2025 by rpki-client