Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902a91dc-5de8-30af-8ce1-b4ab25900879.roa
File: 902a91dc-5de8-30af-8ce1-b4ab25900879.roa (raw, json)
Hash identifier: nl02ttYV9QK308OPc1fhbWq4bjrjBqLehVI5xFgb4Hg=
Subject key identifier: 02:5D:02:BF:DE:A5:59:A9:D2:5A:CA:EE:7D:70:37:B8:20:7C:CD:C1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848467AC124839F4D5B0143AD40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902a91dc-5de8-30af-8ce1-b4ab25900879.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.103.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c1:24:83:9f:4d:5b:01:43:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=838344c5-c8c0-49de-82fc-23a28e7158fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:f7:05:83:78:56:ed:31:55:46:0d:75:d5:
d4:0c:9f:f9:32:52:f7:9e:93:1c:38:89:2e:32:d3:
54:24:d2:1c:47:4c:76:2e:70:51:aa:f0:b0:d8:3b:
58:49:ca:83:ec:96:1f:8f:72:34:92:3d:56:d6:86:
59:7c:fc:ec:63:ef:fa:1b:54:7c:b4:d4:3f:e0:9b:
f7:d2:2e:25:ac:27:4c:1f:bd:7d:f5:8c:75:07:ca:
30:8c:db:ab:34:d0:a0:2d:12:82:ab:f5:37:27:da:
06:dc:a3:2e:60:20:46:71:70:a0:55:34:43:6e:d3:
f5:b4:29:5d:d0:45:e5:e7:03:00:d1:8b:61:7f:ad:
76:dd:0f:0c:89:04:47:56:03:0e:9c:74:7f:c7:e1:
61:07:e4:e6:32:d0:8e:85:17:5c:c8:4c:60:cf:45:
e9:f2:c3:a1:86:26:4c:50:2b:e0:1e:64:9e:33:8a:
8e:a8:67:75:5f:9a:55:99:13:1d:b2:80:c1:8a:2f:
35:c0:da:be:5c:8c:13:4f:2e:f1:01:25:39:ad:6e:
1e:58:c4:0a:74:67:a4:b0:41:f5:2b:97:02:97:43:
f4:66:34:a3:c7:c8:57:b5:f2:a5:f0:07:f9:8a:fa:
6f:47:d1:d5:7a:a3:09:b3:47:9f:02:f1:77:50:1f:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:02:BF:DE:A5:59:A9:D2:5A:CA:EE:7D:70:37:B8:20:7C:CD:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902a91dc-5de8-30af-8ce1-b4ab25900879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.103.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:92:1a:bf:c8:cc:0c:e5:07:c4:08:b3:06:4a:ba:84:03:77:
bf:94:5d:ab:26:6f:ab:7a:31:8e:fc:9a:f5:ae:03:22:2a:85:
43:e6:48:a5:e7:b0:f4:07:95:84:ea:46:f0:62:7c:79:0e:d5:
60:61:23:c7:37:ee:82:77:22:4d:13:fb:a3:0b:80:01:13:ea:
f6:5c:79:ce:7b:66:e3:c3:58:23:5f:20:26:9a:1a:52:c9:32:
33:1d:39:d6:b9:d0:80:75:39:9e:25:b7:ef:d2:70:29:e3:1d:
7a:6d:21:d8:53:18:21:62:1f:d6:b8:70:7c:94:c6:13:55:1c:
59:0a:1a:06:64:80:d3:17:0f:4e:31:68:aa:c7:f3:5c:82:64:
2d:7d:e4:9f:dd:7e:4b:12:98:d2:59:59:cb:9a:7c:ed:8b:e4:
9f:eb:ce:e8:10:33:9d:88:b6:45:9d:32:fb:a8:fe:b2:a5:87:
9e:d1:ba:13:70:7b:de:4e:05:9a:4c:a9:e8:a0:47:78:64:8c:
a9:57:5b:c8:82:78:ac:98:db:52:90:49:4e:b7:c4:6a:bc:3e:
bb:72:a0:84:50:e8:71:99:ac:e6:7e:bb:ed:c5:f9:37:9b:03:
e4:9c:07:d6:98:59:b9:b3:fa:91:d7:ee:c8:0b:4e:e6:78:f8:
a5:79:59:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:06 2025 by rpki-client