Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c13d006-b441-306d-8d95-fe529d74150e.roa
File: 9c13d006-b441-306d-8d95-fe529d74150e.roa (raw, json)
Hash identifier: WDg0vkyc/m6lwZe6EbIhYQ2suLgwT11Xi4PeohFF81M=
Subject key identifier: A9:60:0D:47:3A:4A:90:00:D5:C5:DB:ED:22:A6:80:A2:10:09:D6:58
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0682EFADAD965EAB21A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c13d006-b441-306d-8d95-fe529d74150e.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 9002
IP address blocks: 104.121.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:68:2e:fa:da:d9:65:ea:b2:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=8bf7c5e7-6707-4f81-8372-cabf4348de11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:4a:10:0e:a4:67:46:9b:4f:df:30:6c:ae:
41:be:ae:a5:f3:d6:fc:48:db:4e:8e:a4:44:3e:89:
02:64:75:71:58:36:3e:f6:8c:64:a1:97:30:ed:0b:
b9:02:3a:49:87:a1:07:3a:ce:40:ca:70:d1:0c:36:
d5:89:90:07:34:a4:2e:08:c3:b5:3d:16:cd:bf:13:
d1:02:6c:00:c0:f8:af:be:78:82:e6:97:6e:17:f1:
20:6b:1f:d3:d3:ca:f6:5c:75:f2:40:10:0c:11:f9:
ae:be:ce:ea:90:08:58:4f:15:b5:55:7a:17:51:7b:
67:b0:0d:18:10:58:43:4e:29:70:ce:5a:a2:a6:5f:
ab:7a:a5:f1:3d:b2:46:20:88:4a:d1:33:94:65:80:
7b:73:ef:98:84:06:c4:76:f9:10:a8:cb:f3:02:43:
8a:de:84:78:2f:d7:65:c7:f1:6b:07:8a:72:a3:43:
e9:44:70:79:67:76:88:ce:11:42:e3:3c:29:60:7f:
db:06:ce:d8:7a:fe:ac:63:bb:c1:83:b0:c2:92:be:
81:8b:9c:54:30:61:2d:11:78:99:c0:34:c3:98:55:
74:fb:a0:e7:21:f7:71:47:0c:a1:1d:e4:e2:08:e4:
cf:55:0b:00:a6:a9:ea:7f:9a:b3:53:93:9d:de:db:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:0D:47:3A:4A:90:00:D5:C5:DB:ED:22:A6:80:A2:10:09:D6:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c13d006-b441-306d-8d95-fe529d74150e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.121.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:3a:cd:74:40:f7:6b:7c:4b:e7:95:7f:a4:01:9d:62:d7:72:
83:2d:51:6b:89:a4:a7:2d:63:b8:a9:f5:a8:08:95:70:ef:65:
f1:3c:8e:47:c3:cc:11:8f:2b:8a:cd:7a:6d:ed:d7:61:56:3a:
83:3f:18:8f:49:27:b3:bb:ac:5a:88:30:70:66:0f:11:9b:81:
77:20:bf:2e:78:3f:da:21:df:8d:c5:b5:4f:d5:ea:06:8f:61:
db:e5:5d:34:e7:dc:38:b3:e3:e9:e2:3a:a5:61:03:92:db:66:
b1:c5:a3:84:90:be:ae:59:5e:2f:ce:bd:7f:2a:48:3e:cc:d3:
3c:10:3f:b8:85:fb:bf:b5:9b:51:ac:d0:04:51:55:d3:4d:09:
be:de:4f:83:f4:5d:6f:9b:8c:99:69:c1:f7:af:59:4e:67:aa:
67:e7:a8:18:16:d6:cd:2f:78:c7:54:02:66:62:cc:ae:69:15:
08:d9:23:82:ec:57:95:b0:be:9e:fa:ad:78:cc:cc:3a:07:72:
06:23:c4:01:09:d2:23:1f:00:76:0a:c6:1e:f2:06:82:e2:d3:
5e:18:50:ef:0a:a2:36:72:c1:c9:e5:a7:47:9a:9e:5c:6f:4d:
a8:45:8b:f3:40:c2:d9:18:00:17:2c:6d:90:62:85:49:f2:9e:
df:9c:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:15 2025 by rpki-client