Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
File: 78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa (raw, json)
Hash identifier: k0AsSW8K1R658P2jbeaR9lFuExvz8cfLWuyDqpXONeM=
Subject key identifier: 27:CF:40:C9:B1:7D:E4:88:77:61:57:12:31:AC:E2:34:DA:5C:19:86
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B91601289AA3ABAAC9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.101.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b9:16:01:28:9a:a3:ab:aa:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=1a24d2f3-d5f0-4b6d-8c1d-d112a1668f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:6a:0c:af:2d:2f:5e:80:3c:4c:72:5c:c2:
6c:79:91:f3:07:01:0f:22:5f:94:ea:57:27:ee:e2:
c5:a9:91:78:05:7a:4a:7d:ab:12:7d:59:b2:31:c9:
5c:a1:08:b1:6f:11:42:5f:97:2a:32:65:c3:e1:bf:
da:09:b3:85:b7:37:3b:be:43:1e:88:5a:13:23:53:
28:c5:b3:76:02:c6:ab:2f:61:67:49:b3:07:de:28:
cf:ed:de:0e:e3:c3:f3:4c:ed:d4:f3:5c:c3:72:28:
96:fe:aa:b7:17:bf:ea:7f:53:9c:2e:0d:b6:81:b9:
58:00:27:b6:b6:cc:d1:b4:d7:62:af:6a:85:fb:67:
0a:03:aa:85:1c:df:b9:c3:44:20:bc:91:a4:81:f1:
07:67:b6:6c:5d:d1:b2:c2:fb:e7:38:a1:c0:a8:7e:
77:c5:f8:a1:dc:36:a1:44:e5:cf:4d:79:cc:34:9a:
32:38:6b:72:ed:0e:62:d3:95:94:dc:75:aa:b0:b9:
ed:d4:cf:a2:81:51:29:f3:1d:60:85:05:b2:f4:d8:
39:82:c8:02:d5:c3:ef:cc:e6:d4:77:20:3d:d7:73:
5b:e4:fe:db:cd:44:9e:76:7a:0a:bf:ce:f9:0f:8b:
72:e0:3e:5e:93:71:1e:67:36:67:0c:45:7a:13:b2:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:40:C9:B1:7D:E4:88:77:61:57:12:31:AC:E2:34:DA:5C:19:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.101.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a1:d7:9c:d5:8d:dc:af:74:e7:aa:1f:c7:d4:c4:86:c4:30:
a8:6a:9b:30:1c:fe:85:e6:cf:67:1a:fb:aa:26:fc:33:57:ed:
1f:a4:f2:f9:a7:51:ff:5a:61:33:91:17:a0:63:d5:cd:9e:38:
7c:64:2b:ff:9e:3c:75:e1:4b:8e:48:53:d2:d7:d7:64:2e:49:
aa:02:37:1a:ee:a3:90:b7:8c:d2:e0:c6:7c:f9:e3:db:8f:ca:
29:73:2d:3b:c9:3a:cd:58:ac:bb:50:05:bd:99:0d:89:2f:e5:
bb:4e:9f:a4:3b:19:e8:f1:3d:2c:11:95:e1:24:5f:6e:86:0e:
53:b5:fd:cd:59:77:3f:bb:bd:9e:45:e7:e5:df:b5:fd:94:77:
b4:b9:4c:c8:a8:52:4a:5c:ff:d2:82:b7:f0:77:48:ba:c4:f9:
8c:71:9a:f1:8c:8e:cd:43:ae:ae:dc:1b:eb:d6:e1:de:7e:3a:
5d:46:64:b2:bb:91:89:3b:f8:0c:f1:1e:a0:5d:2c:d6:6c:0c:
5f:2f:cb:3f:0d:28:c6:6c:b7:30:fe:cc:29:4e:6d:9a:13:97:
c7:ed:57:2f:3f:95:8c:77:6f:0f:96:38:f1:02:1d:df:5d:bc:
22:b7:7b:7d:b2:c3:1d:c4:80:ef:25:c9:e6:69:48:53:31:99:
85:57:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:49:46 2025 by rpki-client