Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa
File: 6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa (raw, json)
Hash identifier: TtaYi32tCTFirjq/8q8o6RUv3CjxunkysDkRP5h13ZU=
Subject key identifier: A8:2E:94:43:FD:6E:79:C5:CD:9F:57:37:37:55:37:59:84:A8:C1:11
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B8BE2A7639EC581A3E20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.100.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b8:be:2a:76:39:ec:58:1a:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=d4cf569d-457a-4310-858d-9f5870369096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:b9:d2:fb:08:4f:ca:14:86:13:94:66:e0:
46:1a:c6:1e:3f:48:07:aa:0f:b6:b1:e5:c2:48:19:
e8:7b:35:07:9e:5b:44:d9:bf:e0:4a:40:48:7a:09:
20:af:41:f4:0a:b2:1f:01:12:d5:8d:1f:a8:a7:4e:
f4:c9:7b:66:8e:5e:ea:8b:2b:2b:1e:a3:63:e2:08:
aa:37:8c:ce:de:6e:cf:f8:6d:55:13:49:1d:56:18:
6c:b6:85:d5:9c:ea:a1:41:df:81:d2:df:8f:1e:e0:
58:71:ab:b8:32:7a:20:66:88:c6:a1:88:ac:b8:02:
b0:55:41:30:56:3a:dc:9b:20:0d:06:8e:4e:b8:8a:
b4:b9:77:dc:2b:64:3f:ab:75:1c:03:8a:f1:a9:c0:
8c:12:fa:60:5c:e1:c6:22:9b:05:cc:a9:34:de:46:
4e:6c:86:91:a4:83:d4:49:c9:c0:5f:c9:6c:6a:b1:
72:a2:3f:0e:d5:ee:97:6b:e8:a5:de:4d:be:9c:bb:
43:d2:de:7d:0b:03:ab:68:d7:2a:52:df:bd:53:05:
83:68:b7:9b:04:a3:b1:49:03:ed:32:40:55:ee:3f:
80:0b:9e:ff:e7:f5:71:c2:7e:17:d7:af:32:30:78:
e6:7d:42:25:91:87:87:fe:2b:ac:7f:f8:44:56:66:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:94:43:FD:6E:79:C5:CD:9F:57:37:37:55:37:59:84:A8:C1:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be4bbfb-fa21-3738-80db-a23ee1f18e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.100.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:22:ec:63:a4:ec:a7:bc:30:77:22:71:72:32:53:d0:ea:4d:
83:db:0e:81:3e:ff:95:31:43:82:d6:ca:e1:2e:ab:1e:be:b8:
06:06:13:d5:b2:e9:d5:0d:58:b1:a5:ef:c9:a3:5e:52:20:e1:
70:94:1b:de:fb:59:44:73:ca:32:13:93:6b:3f:9e:9d:20:a0:
22:a8:a8:4f:af:7d:54:9f:1f:ae:32:76:4d:f5:91:7e:37:6f:
09:45:1f:00:a3:01:be:72:5c:58:d8:a1:ca:e5:96:da:f2:9f:
dc:73:5f:02:ed:ef:fd:e0:bb:3d:0a:34:db:d1:22:34:1a:01:
bc:e0:ff:26:ce:1a:11:6e:ed:86:69:84:41:cc:36:09:ca:8f:
3d:98:ed:09:5e:99:32:2b:14:5b:73:ad:72:7f:44:57:f0:61:
39:e2:52:74:13:a0:5e:9d:e0:a1:6f:78:60:17:6b:d2:68:45:
ee:a0:e0:d9:39:7f:96:bb:50:e9:c0:86:d6:ff:03:76:4d:2d:
8f:27:3c:dd:62:c3:af:91:6a:e4:7c:53:36:45:00:cc:3b:8a:
22:f5:6b:19:7a:ae:96:2a:1a:c0:46:02:1a:a2:27:41:50:ef:
e1:8f:65:04:a3:db:00:70:d8:d9:8a:10:a8:6e:c0:52:50:a3:
3c:98:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:41 2025 by rpki-client