Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7c097-2609-34f4-9974-84a6578cac71.roa
File: a1f7c097-2609-34f4-9974-84a6578cac71.roa (raw, json)
Hash identifier: 7Z6HY/oC8/VnLXhDlvEswOuZXgrCLjrtY5nrucpNJ0M=
Subject key identifier: 0A:A7:B0:FA:71:12:5C:03:09:DC:B8:2C:88:37:A4:60:46:2F:46:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B79D38155627A8237CE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7c097-2609-34f4-9974-84a6578cac71.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.97.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b7:9d:38:15:56:27:a8:23:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=8e349c25-3000-4cb1-a06e-d1d05642883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:3f:ea:d8:4e:0f:b7:ad:e1:18:4c:8a:58:
8a:46:c1:03:6f:f7:7d:be:e2:81:65:8b:1b:d6:4b:
a3:1d:93:fc:99:66:49:c7:8c:df:08:ca:50:bf:b9:
32:be:bf:fc:46:67:4d:9a:46:32:44:ef:75:4b:c8:
4b:84:0d:f8:5e:81:d8:2f:7c:02:68:04:34:a3:22:
5c:b5:31:8e:b7:c4:cc:b9:3b:79:ea:83:11:b4:c1:
01:29:c6:c8:58:4f:eb:a0:ec:9d:63:4c:67:89:5c:
b0:67:9d:9e:90:ec:7d:a1:28:cc:72:4c:77:a8:ef:
f6:bb:c6:41:80:3e:05:99:34:e2:35:77:fc:ed:d8:
59:8d:9d:15:ac:5b:43:3a:3f:1b:de:27:c0:4c:3c:
b7:49:c5:d8:91:ac:33:26:68:d2:09:27:3b:4e:99:
75:14:73:ef:a9:51:34:a8:e8:d5:a0:7c:e9:b2:84:
22:ab:fe:b9:80:6b:b6:0c:09:e9:0f:54:e4:af:0b:
70:b7:61:53:3d:88:de:81:ab:08:69:c9:4b:29:77:
8b:e0:95:94:6d:00:0b:ef:10:3f:0c:47:ff:23:5b:
a3:56:66:f6:e9:fa:c9:8e:b7:f5:0d:bc:86:e8:7a:
61:81:72:bb:d5:46:63:b8:9f:d4:c8:13:03:0e:84:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:B0:FA:71:12:5C:03:09:DC:B8:2C:88:37:A4:60:46:2F:46:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7c097-2609-34f4-9974-84a6578cac71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.97.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:94:ad:d9:83:e0:d4:f6:89:0a:b2:4b:84:43:d3:81:f6:7a:
34:6d:cd:9b:91:05:b5:e5:b2:c4:f9:2b:d1:d5:4b:be:d4:26:
17:b6:d2:69:ff:5a:c2:27:95:cc:67:0d:09:f6:a5:26:56:73:
95:1f:f1:46:78:b5:76:0c:6a:99:a0:fd:3f:d6:8e:db:9d:23:
ad:9f:1d:3e:f8:e0:76:79:ab:dc:79:52:35:76:92:c4:86:a4:
f8:86:5f:fe:de:d2:93:7b:c6:11:3b:93:06:e1:67:c0:c4:b5:
a7:57:da:75:e0:0a:1e:e7:37:f3:d5:29:79:dc:b1:a6:11:05:
34:45:5f:11:dc:2b:7f:55:41:c7:d4:b6:8c:ee:58:f7:33:c9:
21:ae:2b:95:63:84:cc:82:6a:09:2b:4b:e4:70:0b:8a:a6:15:
cb:68:85:e1:62:52:18:0f:ed:cb:cd:ee:fa:ef:2a:2c:d0:d4:
57:f0:5f:36:f2:14:c8:39:f6:40:b6:55:36:42:34:e3:01:cf:
c5:e5:7a:1f:ee:9f:98:cb:8e:0b:3e:92:ca:98:3b:d5:f3:42:
19:cb:50:07:3c:73:58:cb:19:cf:d7:d6:95:e8:63:c3:95:ab:
d6:be:3b:a8:af:a9:51:1c:be:41:23:d0:d4:80:45:ef:f1:7c:
7b:90:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:05 2025 by rpki-client