Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9aa60a1f-1ea7-3f03-ac91-6ddfd8ca70fc.roa
File: 9aa60a1f-1ea7-3f03-ac91-6ddfd8ca70fc.roa (raw, json)
Hash identifier: 18/Vcv/v8beAUWHeKlf3ikQm/vr2oqds9yiEQbm8ovU=
Subject key identifier: 51:68:04:D9:7E:82:05:C7:6E:9F:33:2B:ED:B5:4D:78:54:30:27:2D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0A319AC63959CEF7A280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9aa60a1f-1ea7-3f03-ac91-6ddfd8ca70fc.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 38040
IP address blocks: 104.76.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0a:31:9a:c6:39:59:ce:f7:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1c8cd593-ac3c-4a24-a088-2773b46252a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:5a:63:ba:f7:75:53:de:45:28:3c:30:09:
bb:43:06:13:a7:5a:80:05:52:e9:7c:d6:0e:57:f9:
49:a0:12:77:62:c0:6b:ad:da:98:5d:f2:58:64:f6:
09:21:e7:a4:a8:14:7a:6f:79:12:44:4b:5a:bf:46:
fb:e1:0e:c5:e1:d0:75:79:d5:84:2d:c7:bc:90:41:
4a:31:7c:21:15:ee:ab:c5:31:83:1d:48:14:4c:1e:
54:88:77:9f:a6:77:e9:d4:d9:37:d9:a9:68:45:69:
8c:c1:fa:2f:08:5e:5e:57:a5:11:86:43:5d:99:17:
2b:d8:4d:b1:60:6a:01:c8:a2:c6:eb:4d:16:c8:c6:
2f:9c:b6:72:cd:f7:60:8f:f4:88:c5:f9:d8:1f:87:
62:0a:71:4c:77:f4:0e:e4:9b:8e:89:c5:70:68:46:
22:b0:98:43:58:49:a1:13:37:1e:5c:a1:48:f0:6f:
c3:c5:24:13:e6:1f:6d:7a:61:3a:06:e0:52:ca:27:
cc:b5:7a:22:21:76:d2:8f:3b:84:1c:4c:79:17:1a:
c1:1a:99:88:df:dd:91:db:e5:ba:59:1c:da:34:90:
fd:b5:35:42:63:ef:6a:dd:17:0b:ff:76:fc:5c:35:
a6:a7:e3:e2:57:92:34:18:95:26:d6:a1:ee:44:4d:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:04:D9:7E:82:05:C7:6E:9F:33:2B:ED:B5:4D:78:54:30:27:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9aa60a1f-1ea7-3f03-ac91-6ddfd8ca70fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.76.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:65:28:b8:fe:f6:20:38:65:d9:03:30:f6:28:b5:45:de:0f:
d2:7c:ee:0c:b9:75:0e:a5:d8:d3:71:d9:3d:5e:51:b6:71:1b:
eb:03:82:d5:0b:28:13:09:84:e3:92:83:21:3b:c8:d1:3f:2c:
df:b8:38:c3:bd:80:90:54:28:60:60:83:75:e2:d8:51:71:d2:
3f:9c:f4:a3:9a:61:95:44:31:8a:a5:df:dc:a2:7d:81:21:1d:
88:4c:8e:3d:ce:86:d3:b8:37:d3:8e:24:7d:ec:ab:ff:24:da:
42:06:e6:e5:52:57:e2:80:26:da:1b:b4:5e:be:d4:87:1e:51:
e2:7c:cb:ba:4d:1e:32:65:68:3b:a9:3d:9b:86:80:c8:f4:6f:
5f:d0:92:35:ab:ba:b3:b1:57:a6:89:49:6c:13:72:4b:39:cd:
e2:cd:23:d3:cc:c6:b0:e4:ca:05:56:ac:d6:7e:36:cb:c7:32:
95:c5:d7:48:8e:49:a8:20:b8:af:1b:fa:c4:23:2b:b0:a6:7a:
32:8d:5e:cb:bf:f3:9c:20:07:15:8b:46:d6:fc:7a:18:a0:1d:
dc:d3:c4:98:55:89:7c:80:7e:18:f2:88:b5:6c:ea:61:a8:91:
f7:d0:bd:97:7d:04:f7:a5:d9:4e:25:8d:86:b0:e0:92:0c:04:
67:fb:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:50 2025 by rpki-client