Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa
File: 9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa (raw, json)
Hash identifier: 7e3Y20Gc87kbcc0o2uNOPfRkhj3WXIuaARLjmiR+6Dg=
Subject key identifier: BE:17:7B:B3:91:BD:14:8C:67:92:5B:98:3A:38:A1:54:7C:46:EB:07
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B8F09D32290AA1DC7400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.101.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b8:f0:9d:32:29:0a:a1:dc:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=1e69b30a-f8e2-4d14-83e4-8c2460080c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:7f:b3:7a:44:0b:d6:96:91:3e:62:b2:a8:
f5:a9:f6:18:9d:0b:af:e0:ff:82:e3:d0:f4:32:d4:
ca:b1:68:46:f6:38:af:9a:d2:40:46:38:46:af:79:
38:25:b2:1f:e0:37:94:09:45:56:df:32:b2:ab:e0:
f4:99:a6:0a:d0:03:fa:03:33:1b:e4:d6:c9:69:48:
d0:89:50:81:ac:56:78:a8:68:3a:77:93:1e:42:50:
f8:0d:02:73:6c:4c:2b:40:a3:99:f9:f6:17:16:04:
77:cd:d4:5a:53:a6:1c:7f:eb:98:36:d9:d7:ea:8a:
32:db:c9:cc:41:92:eb:71:99:c7:24:ad:d6:32:60:
a0:a1:da:22:68:a3:28:7b:d8:07:df:80:82:7c:71:
25:be:18:8f:e9:42:30:87:e2:d1:7d:99:31:07:c0:
eb:b0:4f:af:97:01:22:62:a2:63:24:ad:f6:0d:31:
8e:9b:06:be:77:3e:b5:cf:09:c8:51:67:1f:e5:45:
6e:ad:dc:b7:74:b3:65:3d:18:d1:ee:4a:cb:2d:3e:
91:08:57:bb:84:0e:48:27:17:a2:95:ca:83:6b:2c:
5f:6c:1a:80:c6:5c:b2:96:53:20:c6:b0:22:91:a4:
ec:89:d2:ac:67:fa:cf:ad:40:62:d9:2a:e6:62:54:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:17:7B:B3:91:BD:14:8C:67:92:5B:98:3A:38:A1:54:7C:46:EB:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.101.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e7:e1:3a:56:79:ed:2c:a6:02:15:89:9b:a2:07:50:ab:be:
0c:78:f3:c8:21:26:8e:39:cc:40:f9:a2:65:06:76:df:6b:78:
27:77:00:f4:de:07:47:95:fd:d1:6c:e3:96:4d:df:47:db:20:
6a:6e:73:10:ba:3a:8e:a0:d4:1e:9b:37:3d:68:d2:32:f9:b8:
b8:8c:58:93:2c:17:a4:a8:60:cc:94:7e:85:d0:ab:d1:49:6c:
61:e9:4b:93:d3:aa:14:bf:a5:7e:5d:25:2e:07:ea:4a:0e:21:
95:ff:70:93:5a:70:00:4d:cc:ca:4d:ad:0e:3a:d0:4a:14:bf:
b3:6f:52:9a:cf:a0:e5:b6:35:24:03:1e:9f:6b:06:4e:72:0e:
24:f6:4a:15:cf:3f:74:6e:81:96:d2:b2:08:e0:cb:a4:d8:86:
df:fc:59:65:c0:e0:bc:c6:bd:ab:75:78:94:0f:76:f0:40:3a:
5b:80:3a:91:68:59:fc:a5:9f:c5:b5:c4:5d:b4:64:84:26:80:
a2:ad:d7:ea:5e:ff:8b:64:28:0d:47:94:93:18:a7:0a:1f:99:
7e:60:7a:03:17:0d:09:26:d2:4a:98:f2:e7:a8:cf:6f:28:03:
60:a2:7d:f0:0d:95:ba:d1:ac:97:9a:29:54:a9:40:a0:9a:70:
4d:54:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:49:48 2025 by rpki-client