Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f694287-6804-3f0b-be39-d8b9975840d4.roa
File: 9f694287-6804-3f0b-be39-d8b9975840d4.roa (raw, json)
Hash identifier: 5CwmF9iTRuIWSNy29PNgbgDtmtNoYDYLEyQ9P2oK72c=
Subject key identifier: 5C:4C:79:E4:84:FC:DE:DB:A7:D0:BA:CD:36:22:E6:81:B1:ED:05:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B95FC112F51D475AEC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f694287-6804-3f0b-be39-d8b9975840d4.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.102.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b9:5f:c1:12:f5:1d:47:5a:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=4f83496e-6931-4d89-b306-60d1b82cf5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:f0:f3:be:9d:63:7d:33:b1:30:af:68:ec:
78:bf:29:5a:1e:02:d2:21:cb:79:91:a5:c3:dd:e4:
a1:24:dc:99:77:51:ef:56:1a:11:70:06:dc:3a:58:
b5:63:37:5f:ca:c0:5a:2e:a8:0d:8b:62:c4:52:6c:
07:34:aa:c3:d4:12:5a:d1:fc:62:7e:30:04:c8:aa:
e9:3b:9e:a3:9d:78:8a:f3:1c:b3:7a:e0:80:8f:6f:
13:05:76:2e:5c:da:6f:9d:46:62:9c:b1:ef:4a:81:
69:1c:05:12:27:97:58:04:c8:99:ee:10:f8:fd:88:
99:77:eb:b2:d0:fc:d0:08:b7:1b:c9:a4:bb:3a:43:
66:ae:f2:67:cd:28:39:eb:03:00:7b:1d:05:5c:83:
a1:77:da:af:77:a3:2b:12:ac:38:b1:f2:6a:ae:52:
e3:7f:0d:32:d8:d1:fa:4b:d1:21:cb:5b:e8:d6:3e:
d2:58:92:59:a1:dc:f6:91:9c:3a:78:2a:94:b4:99:
c5:b3:78:f3:1f:23:a9:e8:fb:d5:6f:44:1b:48:c4:
19:17:96:31:54:6e:46:30:9e:ff:fb:8a:47:79:95:
08:31:49:40:15:f7:6c:70:e5:a1:e4:88:a8:5e:41:
4e:77:82:ba:09:bf:52:7d:71:13:24:c9:37:17:3c:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:79:E4:84:FC:DE:DB:A7:D0:BA:CD:36:22:E6:81:B1:ED:05:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f694287-6804-3f0b-be39-d8b9975840d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.102.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:1b:50:e5:ab:36:1d:55:7c:2a:eb:8f:5d:a1:d5:e6:f8:cb:
f5:be:ee:d8:ef:93:b4:cb:e7:ae:6a:d7:8a:bc:87:d7:7d:1a:
14:9c:af:1e:14:3b:26:7e:dd:02:3f:45:ca:d5:d5:71:cc:b9:
2a:14:35:bb:20:8e:ed:d4:1d:ea:53:3d:cc:44:6e:d8:90:12:
2f:66:72:d4:68:8c:02:8d:37:7c:0b:a7:1b:d8:73:d3:74:5f:
c3:39:1d:36:fe:1d:38:72:4e:d1:c9:91:19:7c:de:3c:18:3e:
36:16:b5:b5:de:5d:69:ed:0d:c9:42:42:81:43:b4:a0:04:d6:
39:dc:76:fa:df:b6:21:76:90:c6:ca:f1:80:a4:00:5d:86:9e:
d1:3f:c8:c0:76:50:b9:c2:18:92:a8:13:4b:b9:85:b9:ec:c6:
ba:52:8a:20:c0:35:18:46:eb:3c:a0:ac:af:b6:4a:ec:f4:01:
4a:6e:86:ff:79:32:be:ba:55:d9:79:b7:1f:fc:60:e1:49:80:
c8:bc:24:7a:f8:75:30:7e:e0:b9:06:2a:de:16:49:a7:4a:9c:
70:0f:41:d7:36:19:c4:73:85:cd:cd:2f:e9:8a:0e:8a:43:8d:
f9:4e:f7:87:08:e9:b9:ff:45:0d:c0:be:a8:ab:2f:f7:12:8d:
28:c9:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:05 2025 by rpki-client