Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa
File: 86f10792-ebce-3d34-b619-59f83c89ced3.roa (raw, json)
Hash identifier: +aAwWLwT8mwYb99pXNUdkXOANxHU2S17y6fZt1Q/q6E=
Subject key identifier: 26:C5:E2:18:23:28:69:13:53:D7:07:89:18:3F:48:CF:12:6A:6E:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AF790BE3642D1ABCE6640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.66.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f7:90:be:36:42:d1:ab:ce:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=536e1025-bff5-4b48-9287-e876cd78833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:10:f2:22:89:64:4f:8c:5d:04:a0:85:fe:
fc:7e:4e:1b:c0:9f:ba:0d:84:37:08:ac:87:eb:35:
3d:2b:d1:b2:a3:74:a4:4d:8b:f6:2f:48:46:94:06:
f3:86:73:23:dd:9a:18:11:13:82:2e:68:7b:6b:bb:
cf:df:b2:a0:a6:48:97:fe:87:1c:f0:bc:0e:6b:80:
08:1f:07:9e:a6:19:d6:f6:ed:82:fa:93:3d:55:ea:
62:6c:41:f7:d6:02:dd:a4:f1:1a:ea:f7:ee:13:38:
e0:0d:59:b2:b5:cc:c5:4f:74:30:87:d3:ae:57:95:
96:29:d3:02:79:e8:db:2b:33:55:d4:4e:32:1a:98:
f9:82:e7:88:47:67:bc:4f:78:29:5b:86:21:7e:7c:
65:77:09:6a:95:77:81:a4:c8:95:e4:c2:1a:c6:0c:
bb:db:d3:b7:e0:f9:fe:f9:5b:ef:0e:cb:8b:f8:7f:
ca:d4:b1:ec:61:b8:51:97:cc:82:5d:f8:9b:6b:3d:
99:0c:17:48:92:8e:9c:be:e4:8d:47:c3:d7:9f:f6:
66:a3:96:d1:6d:86:1c:2a:f5:10:dc:a8:6f:ff:90:
13:c4:91:6f:33:31:e7:bb:4e:82:20:7c:8a:92:a5:
18:08:a9:47:0d:24:25:5e:43:25:94:fb:c8:4d:86:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:E2:18:23:28:69:13:53:D7:07:89:18:3F:48:CF:12:6A:6E:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.66.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ce:fb:63:7a:21:36:c0:14:32:7b:6b:b6:f2:fd:c9:83:f6:
19:d9:2d:cb:ad:1e:f5:b6:2d:0c:53:bc:fb:37:cb:c7:ce:5a:
de:9f:c7:06:58:6b:4e:80:3e:39:f0:90:7d:78:f7:87:1a:70:
84:8b:91:34:95:cc:1f:81:32:65:01:78:ff:36:94:86:51:ff:
8b:d8:0b:3a:12:96:48:dd:c2:99:72:79:f1:77:4e:2a:ff:37:
b7:b6:5e:4b:a8:69:c3:c8:d0:a5:72:44:07:69:6e:85:29:04:
49:69:68:d2:7e:ad:45:eb:24:78:71:f1:fc:f8:63:e9:7c:55:
8f:8b:16:3b:05:c8:fd:e8:5b:c9:5a:10:f9:95:84:12:6a:62:
22:79:a4:d8:d0:c4:59:c3:e7:7f:6c:fb:cd:ce:48:31:23:4b:
3c:80:06:db:c7:6f:7c:b5:6c:dc:b7:f3:29:c5:0a:98:92:ee:
d4:bd:18:8d:2b:68:e5:ca:01:09:eb:54:47:1a:c8:fa:fc:61:
a2:43:c9:9e:24:fd:fe:f5:d9:68:56:b9:08:c4:46:d2:1c:cf:
ef:3a:a2:fe:a2:80:cf:53:6e:be:e8:39:1b:0c:2f:7b:e4:e9:
ac:58:8a:86:ed:41:53:8f:61:73:f0:0a:c0:12:38:6e:d2:4f:
02:50:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:47 2025 by rpki-client