Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99dca0d0-b76c-31e7-9857-b9514a7d2820.roa
File: 99dca0d0-b76c-31e7-9857-b9514a7d2820.roa (raw, json)
Hash identifier: nKPY7C4+qtPaPBvGQ2lgFqLt1PMgVr9h5ply90rsPZ4=
Subject key identifier: 39:5F:6B:AF:84:59:11:D0:24:2B:99:21:22:B3:68:28:90:3B:BD:0A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06A1DE8B9B7950CA02800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99dca0d0-b76c-31e7-9857-b9514a7d2820.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.124.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:6a:1d:e8:b9:b7:95:0c:a0:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=cbbea80f-0c14-477b-9727-b01b0027b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:b4:bf:5b:7f:92:cb:56:4a:b6:51:fb:c6:
c2:f1:23:ae:9c:cc:bb:17:88:d0:9d:b9:f9:fd:00:
71:69:27:bd:dc:b1:93:79:6d:94:fe:23:62:d4:4c:
1c:ce:e0:01:9d:1e:7f:49:95:87:eb:04:62:d4:f1:
ad:db:9e:8f:45:b8:39:2a:28:93:d8:50:47:fb:99:
04:ad:5a:ff:6c:ef:3a:bb:bd:8d:ce:f3:eb:79:41:
27:68:67:38:6c:da:75:6f:f0:ba:a0:fe:fb:d1:3a:
6b:40:8a:f8:5f:e9:2a:c5:fe:1c:64:6b:e1:1c:c5:
95:b7:d8:e1:91:11:ee:ce:bd:ea:fe:7a:bd:21:5d:
bf:ff:de:33:42:24:91:77:46:52:19:29:da:7a:6e:
2d:1b:8c:5a:48:57:b1:8c:eb:eb:42:02:80:a4:46:
8c:44:16:27:bb:ea:3a:ab:6f:10:29:a4:8a:e3:25:
02:0d:13:52:de:fa:72:50:49:2e:0f:14:80:97:99:
86:8f:54:94:b4:36:9c:b7:d9:85:f4:1f:ab:b3:13:
69:8d:c1:04:75:2d:02:0f:f8:21:88:52:33:38:d1:
00:c9:80:54:5e:62:c1:a3:cb:02:2c:56:47:ed:ec:
02:c1:f5:43:9b:f6:42:ea:0e:ff:f0:c7:6b:5f:a8:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:6B:AF:84:59:11:D0:24:2B:99:21:22:B3:68:28:90:3B:BD:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99dca0d0-b76c-31e7-9857-b9514a7d2820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.124.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:2d:cf:75:c6:a4:c9:c6:25:14:59:73:33:70:f8:24:f6:4b:
02:7a:8e:ba:1d:b0:df:7a:96:77:91:1f:6c:6a:9f:80:89:8e:
17:cf:f3:9a:18:2b:02:26:04:fd:33:54:fc:66:a4:f1:82:da:
4e:78:1c:45:5a:08:68:99:6f:9a:8e:fd:ec:c6:fe:20:c4:ee:
54:40:16:64:ea:8e:c4:72:af:d6:d1:19:cf:c5:ed:81:9c:b5:
ad:15:72:d6:a8:b4:2b:75:34:1a:d1:b5:80:87:67:c6:28:02:
18:ac:6d:f1:f8:bb:47:f5:c4:1b:6c:c6:a3:30:40:6a:82:e5:
51:58:d3:fc:16:6f:fc:98:c4:95:f9:2d:c2:fc:31:79:7a:31:
ea:55:da:b0:b9:a1:9c:51:65:1b:7a:91:be:f5:48:5e:e4:df:
e1:e1:b8:96:4e:73:72:be:e7:26:f3:55:a9:a6:f5:f3:25:b4:
3b:bc:41:b0:07:0a:03:5e:f1:bd:08:72:43:56:b7:a5:41:d3:
ae:e0:da:cb:89:dd:d9:92:d0:fa:14:3b:db:7a:6c:8c:82:87:
e0:c8:e2:34:7c:e8:a0:44:cd:c1:a9:0e:f6:59:95:60:d5:1c:
5e:31:18:5f:b9:05:f9:d6:42:f1:88:8f:8d:b5:79:e2:d7:b3:
57:bf:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:39:13 2025 by rpki-client