Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa
File: 997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa (raw, json)
Hash identifier: TAbvlroUabcFJvib89YIYo2ANBb8x5ekWrHeXVOv4gU=
Subject key identifier: 0C:10:A4:90:EE:79:25:EF:03:91:7D:AC:99:8F:45:4C:DC:2B:F4:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AAA9C1E2623A1AB8B000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.90.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:aa:a9:c1:e2:62:3a:1a:b8:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=d3121674-04a8-4e1e-9311-021f680a8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:f1:3e:dd:d3:01:63:0c:e1:c5:5a:12:4a:
ff:65:32:66:d4:c2:01:a7:48:e1:0c:9c:34:53:4a:
da:a5:82:d3:b6:08:fc:77:58:6b:55:b5:60:6a:68:
44:b0:62:8e:0a:c2:a7:3d:73:0a:7e:46:33:a7:e4:
3d:70:cd:19:e8:ca:ff:fe:df:ca:2f:5a:66:72:08:
8e:9e:1d:87:81:d8:8c:cf:dd:27:72:4a:09:7d:bc:
7d:16:aa:d0:58:99:c3:f7:42:5b:65:dc:fa:35:11:
e6:f5:a9:c1:eb:b7:6a:16:a4:60:37:96:96:8a:99:
82:1a:ba:26:fd:19:5f:b1:b6:1f:e5:3a:5a:f7:14:
97:35:aa:90:b8:a6:67:91:cb:65:6f:9a:8b:57:32:
1d:64:9d:da:1f:dc:ab:df:9f:4f:3d:73:2e:fe:47:
10:c4:51:6f:d9:6a:a7:12:cd:36:67:47:7a:e9:91:
bf:c5:88:da:f5:60:37:17:20:63:62:5a:55:fb:5a:
6d:0b:5b:8e:18:70:e1:89:9d:36:44:02:a2:63:d2:
84:e4:3e:10:7f:b6:c8:1c:45:c1:25:41:d0:38:75:
c9:db:04:f7:20:42:11:99:35:f4:81:29:8b:45:c2:
6a:9d:30:bb:74:11:ca:cb:0f:f4:90:d9:3b:44:58:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:A4:90:EE:79:25:EF:03:91:7D:AC:99:8F:45:4C:DC:2B:F4:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/997b94bd-f2b6-3b90-89ee-0df7607cb0de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.90.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:09:76:c1:1d:44:1b:f1:4a:22:b2:d9:77:f1:17:25:d2:25:
24:1b:73:65:8a:e0:d0:ea:8a:d9:ee:60:0e:2c:66:f5:a7:95:
05:e6:2f:4f:6e:92:71:b4:ab:ee:7c:c9:d3:b4:c6:4f:96:64:
f7:09:e5:76:02:9f:e0:fd:99:74:af:fe:98:80:bb:a6:8c:ae:
b1:9d:6d:7f:dc:7f:64:a1:0d:d8:96:20:cc:91:51:63:db:8a:
1c:06:64:5d:c1:30:e0:87:c1:5d:40:44:55:a6:5c:d5:ef:61:
7b:d0:a4:81:4d:49:fb:ec:eb:de:c0:04:a8:bc:4d:cf:13:16:
52:69:f0:80:35:7b:20:9f:85:b5:75:69:1b:6b:97:94:e8:89:
f3:15:fa:50:63:3e:7c:14:33:21:c0:52:11:91:57:90:92:6f:
ea:db:f4:49:93:d4:3a:4e:ce:3b:68:9b:6f:db:0b:2a:8e:7f:
fe:59:09:0b:8f:57:db:4c:ad:bc:bd:f2:97:e4:71:71:91:06:
7e:e6:a9:f9:6d:82:de:7e:fd:a1:5e:8f:c1:84:e1:8f:6d:78:
86:57:83:b0:77:bf:a1:86:56:79:24:0f:51:96:e8:67:f5:12:
57:b9:b6:d8:7b:e7:e7:f8:fe:87:49:da:ff:d9:0a:d3:64:1c:
26:cc:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:58 2025 by rpki-client