Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae43999c-0039-3bce-8037-028ad3ae9023.roa
File: ae43999c-0039-3bce-8037-028ad3ae9023.roa (raw, json)
Hash identifier: UBkqzCLUjJI3iuW+1IiiA3qLhkwpZnsQTZljYlRHPjw=
Subject key identifier: B9:48:3B:36:E7:39:E8:08:18:5B:D8:66:B0:C9:14:A2:11:07:0F:5E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A065B910C6AB55998AFB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae43999c-0039-3bce-8037-028ad3ae9023.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.116.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:65:b9:10:c6:ab:55:99:8a:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=8b8fcacb-97b1-41a8-b328-3dfa6c135366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:3c:5e:30:93:81:44:9a:f6:26:ee:53:7c:
2d:ee:d3:34:4f:2c:8c:56:cf:7a:79:17:6f:0f:ee:
06:ce:d8:d8:ee:29:f7:11:c3:0e:9b:18:2f:72:1b:
cb:37:86:b2:82:2e:22:af:17:8d:19:9f:18:b5:da:
e4:95:b3:fb:9f:f3:97:e5:cc:aa:3b:b3:3f:2a:71:
70:78:01:73:39:ff:b2:fd:8a:e3:16:4e:9a:b8:ef:
cd:be:29:84:21:48:6e:9b:b1:ee:21:f4:66:70:37:
90:93:e5:07:67:4c:15:28:b8:f8:1b:56:7e:ee:a6:
04:e7:4a:5d:bb:81:15:b0:a0:e2:63:20:4f:16:69:
d1:59:b5:25:b3:1e:04:0e:70:06:47:57:b6:d7:16:
d9:63:ba:92:2b:d7:49:f2:e5:e3:c9:e3:65:86:e0:
e8:21:36:7d:0d:78:fc:a6:ad:0d:9c:7f:a9:dc:cd:
47:06:5e:76:0b:cb:1a:7f:5c:c1:d3:3b:3e:8e:96:
31:ff:7e:3d:a8:02:cd:c3:42:94:bf:23:be:06:5b:
1e:a2:20:8a:70:00:d8:a3:ea:07:6b:13:c9:fe:e9:
95:0f:76:37:34:39:38:d6:de:16:5b:b9:d4:f3:10:
6c:03:31:b1:02:c6:76:1c:60:28:0f:69:44:88:6f:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:48:3B:36:E7:39:E8:08:18:5B:D8:66:B0:C9:14:A2:11:07:0F:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae43999c-0039-3bce-8037-028ad3ae9023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.116.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:dd:6e:1d:c9:9f:fe:fd:20:00:c0:60:c4:45:ef:f3:d5:ba:
04:2c:45:f4:fd:15:e1:32:3f:75:ab:2d:bb:f8:15:9a:00:e7:
f5:b6:4e:83:4f:30:52:0d:54:55:6d:25:10:d1:c2:ea:d4:a3:
77:04:61:f9:ec:4a:51:43:79:e8:07:cd:73:37:4d:72:4a:2f:
cb:14:63:c7:9e:f7:da:c0:f5:02:84:d9:03:98:7e:3e:ff:b2:
ca:a3:36:de:81:ab:fa:3c:3e:8c:5d:98:ce:80:0e:1f:fb:e1:
8e:08:a3:11:e1:dd:2d:e9:d6:dc:c7:c3:5f:d5:04:4b:5a:3c:
1a:32:29:4f:d9:45:eb:1c:32:cd:86:28:7b:69:1a:d9:4a:d3:
75:06:68:fb:00:49:77:02:2e:95:81:8e:37:e9:88:da:34:dc:
e3:0e:f8:a4:dc:bd:06:1d:93:fa:62:81:cd:fd:fa:1f:9f:a2:
68:39:ea:bb:c7:9e:07:a1:0e:a4:a0:4e:4f:b3:c3:fd:34:da:
55:31:e0:92:03:f9:b8:a2:94:8b:26:a5:88:6a:7b:c2:1f:e6:
36:db:6e:b3:df:1d:d7:84:49:f3:34:22:c5:c2:a8:02:c9:66:
6d:39:3a:66:28:04:e8:5f:64:37:d9:d0:11:09:53:4d:4d:0a:
2d:80:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:40:57 2025 by rpki-client