Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811b67a1-324a-3a90-8651-0b1003f9a663.roa
File: 811b67a1-324a-3a90-8651-0b1003f9a663.roa (raw, json)
Hash identifier: tiN/NscrTTLHtNxVxcuIKlrfj1LfCwyQNe7gtQISo+4=
Subject key identifier: 5B:8F:9A:11:59:6B:92:E0:67:D0:AD:6A:5A:0A:10:2B:EC:36:16:1C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A069CC9805643A1287C040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811b67a1-324a-3a90-8651-0b1003f9a663.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.123.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:cc:98:05:64:3a:12:87:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=91e9adf2-7c45-46aa-9589-15bc578972ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:63:71:cb:5c:58:58:79:9f:f2:e5:aa:7b:3e:
f8:53:53:b3:4f:43:dc:95:62:1e:c1:8e:d8:c0:d2:
55:98:cf:f1:39:74:3d:87:5a:a1:54:c7:17:24:44:
e5:ce:7b:31:b7:17:21:2f:53:44:5d:28:7b:64:61:
44:5b:83:e4:9b:10:9f:50:6a:1b:9e:77:49:d2:88:
b2:45:2c:0c:2a:5a:9a:a4:0c:85:12:00:fd:dd:2a:
00:08:3e:d4:7f:46:4d:aa:c3:93:17:57:5f:4b:5f:
50:52:68:89:4a:c5:4d:44:b5:d8:72:8a:6f:40:45:
89:16:8b:5a:7d:71:88:19:22:72:7c:80:80:42:b7:
ef:84:54:4d:25:ea:89:7f:4d:4f:ef:84:d3:23:51:
0a:f6:22:b7:5b:fa:ff:79:71:f9:ec:66:ae:93:b9:
bb:c9:e3:bf:10:a7:70:73:00:aa:13:2a:28:c8:ee:
dd:8b:f1:aa:2e:f2:85:ea:02:34:22:25:ff:85:63:
6c:7f:70:1b:63:ab:ba:99:be:bc:70:b5:cb:7e:d0:
f7:9f:74:29:69:56:c5:46:07:71:a6:dd:8f:b8:ef:
11:40:af:9f:34:44:8c:cd:63:f8:c2:4d:40:4f:19:
8f:c4:ef:70:ba:c9:1e:65:8a:c8:5e:24:c4:0a:55:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:9A:11:59:6B:92:E0:67:D0:AD:6A:5A:0A:10:2B:EC:36:16:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811b67a1-324a-3a90-8651-0b1003f9a663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:4a:83:20:f9:75:db:a6:3b:9b:55:a9:60:de:ad:cb:14:55:
ba:4d:81:4d:9f:d1:b7:0e:3c:b5:0d:4e:e4:72:5e:4b:2a:b2:
64:42:09:e4:a9:a1:7a:7d:4d:c6:2c:f5:80:b7:01:9f:80:06:
e9:53:0a:e1:4d:d1:78:1b:02:e5:26:cc:5c:16:f2:20:76:17:
20:18:be:2e:f0:ed:90:0f:0b:40:2f:89:36:7d:5c:fc:3e:da:
72:32:94:3d:5e:32:56:89:3d:e0:51:75:64:bf:20:06:75:a2:
70:db:31:d8:0c:a9:14:46:38:1d:a2:aa:2c:e0:3e:c5:5c:30:
1c:1a:4a:8e:db:32:16:13:b4:d7:bd:15:5b:11:29:9f:18:d4:
15:76:c8:01:00:43:c4:1b:18:81:ae:e5:55:84:cf:a8:68:9c:
30:d5:0b:b1:59:e0:7a:7d:75:16:8e:7d:09:29:42:02:3f:78:
e1:b5:c9:01:01:1c:42:f9:a2:4a:a4:93:13:d5:e2:66:bb:26:
6f:0c:ff:76:a5:ae:7f:91:84:4e:12:8d:8b:5d:57:32:00:07:
bd:bf:87:7d:6c:9f:0b:93:97:e3:65:4a:af:1a:71:d0:10:40:
c6:9d:71:3d:3a:7e:46:6d:88:51:53:50:80:1e:d1:cb:a2:26:
2e:f2:1c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:46:14 2025 by rpki-client