Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7cdb31e3-600a-3049-a79a-6c2252fb2677.roa
File: 7cdb31e3-600a-3049-a79a-6c2252fb2677.roa (raw, json)
Hash identifier: +ENMsFMJ47afSKL5JDjNLgxZunHrJaF780umdpLR2ow=
Subject key identifier: B7:DB:44:29:B9:08:DE:B3:70:8C:24:5C:8D:E1:36:8D:B0:FA:01:BA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AFB15B955DB7E62478480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7cdb31e3-600a-3049-a79a-6c2252fb2677.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.76.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fb:15:b9:55:db:7e:62:47:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=9565da70-9b4d-401b-9ea2-75f5a772ff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:50:8a:ac:7d:53:04:19:86:18:cd:a4:c3:
70:92:58:a6:5f:62:02:db:a6:8e:39:df:9d:57:a0:
7a:44:75:79:80:2e:1e:51:86:a9:f1:ec:f9:ac:aa:
4f:a0:34:ec:29:24:d3:18:eb:61:81:dc:e7:85:80:
45:43:c5:86:89:b9:ea:15:91:23:80:db:73:c3:cc:
55:5e:7e:0f:dc:cb:5b:17:20:9c:4e:d8:24:66:0c:
26:d2:a3:d1:8b:16:39:c5:1d:3d:df:84:58:04:4a:
60:c6:70:32:7f:d8:7e:11:44:7b:0c:26:10:d1:70:
7d:f5:0d:ba:9f:c8:26:55:17:c4:ec:a4:c7:41:2c:
15:d9:9c:08:f4:05:53:55:d2:d1:d3:bf:f9:39:68:
c6:d4:12:9f:8a:fb:e0:83:40:29:8d:8e:fa:64:46:
b7:a9:24:a9:fd:0c:5f:30:42:de:5a:c4:e5:77:e2:
4c:66:46:59:f5:ba:74:e6:1a:84:ef:f1:6c:de:1b:
d6:6a:07:d5:3f:b4:18:1d:a4:5f:ec:22:b0:13:59:
08:92:d0:01:5e:14:26:30:12:c5:c5:5c:72:d8:df:
8a:9a:23:68:c1:9d:0d:c0:cc:44:75:d4:af:61:81:
12:dd:e7:76:de:96:94:c2:a6:03:fc:aa:0c:cd:c9:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DB:44:29:B9:08:DE:B3:70:8C:24:5C:8D:E1:36:8D:B0:FA:01:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7cdb31e3-600a-3049-a79a-6c2252fb2677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.76.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:97:a9:cf:c5:66:74:54:20:10:8c:ad:fd:ab:1a:1c:25:b8:
9e:19:83:54:0d:57:3f:72:9d:24:fe:7e:61:56:4b:74:7d:ba:
3c:5b:a2:2d:b6:00:a0:8b:a0:b1:1c:f0:f0:56:70:71:4c:e4:
91:b2:80:c0:81:c9:1b:0e:fb:0d:3c:2c:ad:40:a1:70:02:8d:
c4:88:82:2d:41:46:83:fa:36:cf:67:5d:ab:9d:67:bb:81:44:
2a:7e:77:d7:bb:2f:bc:b6:58:36:a9:f3:55:4e:f9:53:c4:b3:
4c:f6:9c:55:59:f2:0a:49:0a:84:5a:e8:ee:a6:17:de:68:7d:
24:67:53:4f:2b:e5:89:df:75:c6:39:7b:0c:f0:af:90:78:36:
6e:07:a0:86:44:3b:b5:f6:54:7b:6c:89:c2:93:b0:81:cd:b1:
3b:28:d4:cc:15:ee:c4:9d:2f:9d:25:24:0e:2f:6e:5b:4a:7c:
e4:8a:11:3b:b0:9d:88:01:0b:53:ec:2a:7c:f1:56:4e:32:cb:
3f:38:eb:b2:d4:a5:03:a1:1a:25:18:f2:f3:13:f4:74:4f:e3:
b5:73:22:cf:a2:df:77:dc:5e:3f:64:ef:7f:73:8b:00:a2:51:
50:79:58:ae:71:77:8e:47:63:e9:22:89:a7:7d:0f:c9:c6:79:
16:40:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:47 2025 by rpki-client