Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/995b4e09-5ba6-3617-9257-a6f55e2e97ea.roa
File: 995b4e09-5ba6-3617-9257-a6f55e2e97ea.roa (raw, json)
Hash identifier: iHRAgB2LITU7U9i0WSwJSU7NR+TXfNNHkzUDEvUUlWI=
Subject key identifier: 97:51:8B:83:27:50:33:F8:74:F4:97:61:F8:6F:18:E0:C6:9D:A9:CA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AFD053185B002E6C9B240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/995b4e09-5ba6-3617-9257-a6f55e2e97ea.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.79.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:fd:05:31:85:b0:02:e6:c9:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=3ce9e1e3-5368-4fe6-9e40-a68296f5f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:ee:9c:77:71:7c:0c:f6:05:c1:21:2f:fa:
e5:d1:67:77:64:d2:f0:a0:28:0b:37:f4:40:33:5a:
42:32:79:80:e3:2b:1d:d1:fb:a7:de:c3:51:27:01:
fe:4b:12:60:7a:b8:ae:14:21:4a:15:a9:81:86:66:
87:12:d2:c9:28:5b:24:47:75:c9:2c:78:9a:e9:10:
90:f6:2b:f2:b2:80:3e:b6:35:77:8b:a1:96:a0:d2:
1d:23:e5:0d:06:32:91:e3:68:af:c6:2f:85:8f:75:
40:13:af:cc:78:b5:54:22:cd:27:39:6b:40:b7:73:
e2:fc:3e:41:1c:0f:6e:0e:1d:07:25:a3:fc:f9:7a:
aa:96:c9:b0:78:a9:e4:1e:cf:b7:7b:8e:58:0c:1c:
17:88:93:48:36:18:10:18:74:56:b5:a1:e8:9c:8a:
7b:79:56:0c:7c:71:62:d1:4b:39:df:1c:e7:05:ec:
81:20:61:0d:5b:98:e2:90:96:07:e5:fa:56:41:45:
1b:41:da:49:dd:fc:eb:ce:a6:c0:80:94:95:74:e2:
5f:f6:3a:c1:fb:4d:d8:44:c5:29:49:fe:c4:7b:08:
2d:10:45:44:d4:d6:bf:98:43:e1:3a:16:9e:85:19:
26:03:d1:fd:04:ae:e7:14:dd:d1:f5:6f:d0:bc:f7:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:8B:83:27:50:33:F8:74:F4:97:61:F8:6F:18:E0:C6:9D:A9:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/995b4e09-5ba6-3617-9257-a6f55e2e97ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.79.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:62:e3:56:f5:f4:71:14:30:8a:e9:52:1f:1b:f6:e1:f9:31:
6d:c5:ce:08:07:e7:21:f9:b8:4a:3e:ee:fe:76:e5:ce:ef:8d:
46:13:57:2b:8f:8f:66:da:9a:6f:17:f8:9e:de:8c:7c:f3:3c:
12:b6:f1:6c:f6:22:9a:54:7a:da:fe:b5:e3:89:5e:5c:7c:b2:
85:20:84:7b:1e:74:db:38:71:fb:6a:c4:c9:a6:de:e2:29:f0:
45:e4:46:9d:e0:c1:48:e1:7d:86:1a:4c:4e:b0:cc:bf:d6:e1:
74:9f:c6:7d:5c:ec:84:ba:54:2e:1e:01:b7:99:10:d4:e6:35:
ff:4d:4b:ec:28:ee:3f:e7:db:15:0d:7d:b6:fc:5b:1d:8c:eb:
c2:84:31:b4:0a:d0:1b:b5:f7:1c:8d:76:08:ac:0f:59:85:1f:
cb:c4:3f:a8:18:ef:c6:ff:27:41:d9:65:d9:5a:63:7e:e7:80:
ba:c4:b8:dd:9d:05:01:b8:a7:ac:e9:b4:b3:e2:da:f3:50:55:
d1:0c:5a:23:41:b5:90:41:4c:7b:b9:dd:1a:c3:de:4f:a6:de:
c8:9b:ea:aa:bf:24:c6:3a:0c:ac:38:92:df:5e:1f:0d:ad:ac:
a5:18:14:87:1e:24:91:63:ec:fe:76:b7:8f:cf:c2:c2:c1:e7:
f4:fc:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:28 2025 by rpki-client