Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a381271b-7870-3681-ab19-494964544e4b.roa
File: a381271b-7870-3681-ab19-494964544e4b.roa (raw, json)
Hash identifier: 1qdAuF+H3EZkBeXcYb55kl1CR/B6XtvFsMSMpO0dnLY=
Subject key identifier: 0C:4A:24:99:C1:C4:51:22:51:8A:0D:47:B2:45:1C:21:D9:7B:93:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B7445D77E0115320B000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a381271b-7870-3681-ab19-494964544e4b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.96.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b7:44:5d:77:e0:11:53:20:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=bd4c3316-01f7-4c88-96a0-f6977c64f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:da:58:8a:4d:01:a7:ba:43:5c:be:4d:83:
95:fc:0c:cf:6e:9b:1d:5f:31:0f:d5:9d:65:a4:67:
e7:a0:3a:27:a7:53:eb:f9:60:99:f0:0b:c3:6e:08:
62:2c:d2:e4:70:e4:ae:57:16:5b:d9:29:ca:0a:12:
c6:dd:1e:7d:98:65:87:5f:b7:df:da:f7:30:72:9d:
41:83:38:08:69:3d:18:96:1e:f6:b3:fe:a0:f5:6e:
f2:b6:ea:c0:f2:fe:b1:3e:53:48:c9:ce:7f:9a:c5:
6a:d6:96:8b:9a:64:e5:fa:7b:7f:18:79:cb:47:39:
12:6a:f3:bc:da:55:64:32:0a:d8:93:78:bc:c8:20:
f6:a7:fb:b2:b1:9e:1a:4d:29:ba:8a:5d:9b:d0:25:
28:fb:3f:e3:41:c4:65:de:d9:d2:ae:51:3c:7c:23:
bc:5e:5c:57:ac:4b:1e:1f:44:87:e1:dd:a3:c1:e3:
84:93:c4:59:24:ad:c4:b9:ee:3b:aa:6c:16:2e:82:
67:2e:8f:18:c5:f2:d3:55:0e:a6:55:db:6e:0a:7e:
ea:11:fb:d1:49:de:70:50:66:b6:3d:66:a9:d8:3c:
63:50:18:0f:6e:ba:bc:f1:c6:7c:0c:ed:aa:01:a8:
e9:08:67:f0:7f:8d:5e:62:d8:26:25:13:e3:c2:b1:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:24:99:C1:C4:51:22:51:8A:0D:47:B2:45:1C:21:D9:7B:93:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a381271b-7870-3681-ab19-494964544e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:13:0a:4e:0d:5d:2c:95:66:6e:56:86:a5:dc:5e:20:84:85:
3d:c0:5a:0d:5d:2e:e5:a7:c9:29:9f:a9:00:08:1d:04:07:b5:
9e:eb:dc:3e:80:19:d4:b0:5a:d1:6b:e1:8d:80:53:91:fc:cd:
7b:74:1b:12:07:9e:72:7d:34:7e:86:51:ca:0e:76:b2:96:b9:
f9:b6:13:12:cf:4b:d1:df:b7:d8:81:6a:71:e2:ec:0a:4e:c7:
51:7e:6a:c5:bc:78:4b:86:26:46:81:fa:3f:23:df:c7:79:26:
72:58:2b:47:54:f7:31:1e:c0:b9:b9:c1:3f:8a:8e:43:7e:79:
f6:f3:09:dd:33:74:7d:51:37:20:bb:18:52:f3:e6:97:e9:4e:
76:4a:e3:c6:e0:bc:7d:cc:54:da:b8:79:01:0b:ac:b0:2f:da:
30:22:3f:86:9f:45:40:1a:77:ab:8b:6c:ab:a1:f3:25:26:97:
01:90:fc:d5:dd:b9:1f:62:74:64:23:73:10:f6:98:68:ab:bc:
be:36:a0:af:b7:00:81:42:62:64:f9:6c:ff:41:de:49:01:a9:
8f:39:86:c4:b8:a7:76:e4:9e:8c:26:78:29:cd:53:f6:68:b2:
0d:f1:e2:ad:12:05:6e:23:69:8c:a9:7c:ec:dc:82:8a:3c:4b:
10:c9:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:49:43 2025 by rpki-client