Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa
File: 8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa (raw, json)
Hash identifier: 6XwrBf7a6geHVeSo/cCi8Gk5dj6ALOrr62Z46fer/fw=
Subject key identifier: 90:E5:42:F5:5D:18:E9:50:E6:C4:7C:B9:E9:98:6E:E6:49:32:73:BF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02C320EFF74EC52D0BC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.120.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2c:32:0e:ff:74:ec:52:d0:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=39cd2182-fac9-41e0-b6f4-74ef1b3f95f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:2b:a3:63:80:48:f9:45:f7:38:02:b4:b9:
a3:f6:9e:df:d5:2e:fc:cf:d1:8c:aa:a2:2a:11:e2:
94:cd:5d:0a:98:91:fe:24:e1:64:57:18:a9:3d:7e:
2b:b4:32:35:65:4a:2a:e7:93:03:7f:90:72:e6:d3:
65:1a:55:06:39:ee:19:19:bf:0a:09:76:81:d0:b4:
54:77:7a:ed:e7:60:d5:22:fd:07:a1:8f:7d:93:3d:
37:bc:eb:72:55:d1:e6:a4:89:2d:a9:43:51:c8:fd:
26:3a:db:c5:f5:32:a4:dc:12:ab:b0:33:29:c9:fc:
3b:dd:cc:d8:02:48:65:70:48:5f:e7:7d:17:21:e2:
fc:8a:27:37:fb:d3:07:86:85:ea:c4:39:68:59:fc:
db:53:6d:d3:af:31:c3:80:d1:40:cd:9f:f0:d7:5a:
e1:3e:fd:19:d9:21:58:8b:02:b3:eb:fd:06:7f:5d:
cd:b5:13:0d:e1:50:0c:23:8e:8e:e2:9e:f7:2f:e5:
03:45:6c:28:89:46:75:2a:6c:4c:fe:43:a9:fc:fb:
04:16:c5:56:99:28:e5:14:b2:66:eb:b1:bd:31:81:
c4:3a:8f:23:70:f1:a1:f3:a5:97:95:c2:51:c5:67:
24:3c:4e:87:f2:fa:19:4c:60:a5:c5:f1:0d:ff:a9:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:42:F5:5D:18:E9:50:E6:C4:7C:B9:E9:98:6E:E6:49:32:73:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2be0b0-9006-3bf9-91b2-f7e53afa8a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.120.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:9c:4a:2f:d1:5d:03:b5:77:a1:71:d7:d5:33:66:84:4f:87:
f2:ce:db:10:88:b4:64:01:2c:f7:65:e6:bc:e3:65:bf:b0:72:
10:c0:fc:10:44:ff:bb:47:ee:dd:06:bc:21:d7:84:ff:8a:78:
5b:52:b3:fc:62:6c:ef:73:a0:e5:4a:d6:e3:77:57:bf:4f:23:
ae:b5:e7:e3:10:19:c3:44:ab:90:da:3d:4f:53:fd:67:7e:61:
9d:c7:62:34:9f:6b:3c:d1:90:d5:ac:9a:a2:72:ca:e4:47:4a:
fe:61:87:e6:6f:bf:47:47:a1:6b:03:61:3f:be:b0:38:fe:7e:
46:02:ce:19:80:01:31:f9:a8:3f:20:65:e7:62:89:4d:ce:54:
c2:9a:fb:1c:7c:3b:4e:25:56:d7:e9:20:78:ce:c5:24:b9:dd:
4f:ea:2b:df:f4:d8:1e:ed:19:9f:62:d2:98:c4:31:2b:7e:cb:
ad:9b:5b:b8:a2:13:be:1b:9a:9e:3f:b1:d7:26:54:76:71:05:
ad:c6:f6:37:0c:f2:7a:0d:f9:f3:2f:e1:62:cc:98:c3:65:ce:
1d:7c:15:5d:96:3c:21:aa:dd:52:27:1a:8c:cd:fb:43:de:2c:
20:ff:12:7e:d0:ac:09:eb:a6:5d:6a:42:43:0c:be:0b:7c:c0:
af:a4:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:13 2025 by rpki-client