Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85eb2f00-c6e3-3d89-8036-65b429d36b82.roa
File: 85eb2f00-c6e3-3d89-8036-65b429d36b82.roa (raw, json)
Hash identifier: hNEGYLfXO4mMp5CHl+5PfIJlO+2Kotu6WHav4J9z9qg=
Subject key identifier: 22:DB:1D:CB:0E:21:D5:B7:7E:97:A1:9D:30:60:ED:4A:DD:A8:D5:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B8FD9C5C838491FFA380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85eb2f00-c6e3-3d89-8036-65b429d36b82.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.101.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b8:fd:9c:5c:83:84:91:ff:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=f32563b9-6811-4310-ac48-07690a7d06ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:9f:fa:46:c1:0a:fc:90:21:64:4b:74:04:
03:57:7d:11:9e:3f:b0:88:3b:05:7d:83:87:12:f3:
09:7b:ce:ff:7d:5e:6d:52:8c:6e:9e:68:0e:c9:37:
60:e4:d1:89:3d:e1:d8:c4:0b:81:c9:ab:29:35:58:
05:48:04:cb:fc:ce:8d:33:41:29:2d:4a:b7:0b:42:
bc:06:d7:ba:6c:05:e5:99:ae:87:35:b8:13:f4:03:
ad:22:0b:2b:83:cc:28:62:5d:29:5b:8d:25:35:d4:
cc:c0:38:80:6f:ca:c5:95:db:cd:03:d6:50:5b:40:
51:63:70:db:44:67:4e:e1:11:a6:b9:44:1e:3c:00:
7d:26:88:dc:97:76:cf:fd:0a:0e:00:99:3d:6a:4a:
46:e6:67:5d:cf:84:a9:56:72:2c:b2:f3:f9:3e:66:
b2:05:e9:37:50:10:0a:c7:6c:39:8e:3e:98:7b:53:
43:dd:92:45:f4:f7:36:8b:ad:86:9c:28:ac:53:71:
5d:d2:9a:a6:ad:ab:8c:b5:f7:dc:59:cb:15:b3:46:
2a:05:20:cc:13:ff:dc:f3:f4:2c:65:8a:97:16:1a:
51:50:9b:41:91:b9:26:a8:b5:6d:09:2e:c4:f1:90:
53:17:59:91:28:87:40:6e:40:9f:b6:47:a8:1e:43:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:1D:CB:0E:21:D5:B7:7E:97:A1:9D:30:60:ED:4A:DD:A8:D5:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85eb2f00-c6e3-3d89-8036-65b429d36b82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.101.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:02:11:62:1b:80:d8:23:c2:75:41:e1:20:3c:80:09:c9:b4:
0d:79:1a:2f:13:cf:69:0d:ff:23:9e:ca:2a:04:db:48:8c:a0:
22:a8:fb:10:47:25:87:c9:fa:92:d9:58:a7:54:2e:11:a1:89:
b3:d0:fa:e0:cc:9c:33:46:2b:60:0f:7f:c9:39:36:21:96:ad:
e1:c2:38:9c:6e:aa:3e:5a:f2:90:3c:b0:4c:96:5e:2d:4b:59:
36:35:d6:87:67:cf:e7:2a:8c:cd:83:17:dd:ad:ad:9c:c8:f7:
dc:31:f4:c6:4a:e1:77:67:6d:8b:0e:39:f8:39:94:c3:a2:21:
b9:b1:3e:7c:c6:02:6c:32:18:0f:d5:39:58:25:89:ec:61:5a:
46:33:dd:bc:9a:7c:10:ee:bb:ab:0b:4e:87:67:76:0e:52:cc:
b4:01:32:67:c8:ff:eb:e5:68:23:93:58:26:51:63:25:69:b9:
c8:26:8f:4c:0b:64:83:75:05:16:80:2a:66:d6:1c:6b:a0:eb:
b6:bc:5b:4a:cc:aa:e3:a8:84:47:6a:b0:3d:27:a9:db:18:6c:
75:92:c9:af:d9:2f:a5:05:33:c0:20:8f:16:00:77:bc:aa:2c:
99:e2:63:5c:d9:80:15:ee:73:b8:5d:14:f2:7f:ad:c9:d0:fc:
f8:af:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:45 2025 by rpki-client