Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa
File: b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa (raw, json)
Hash identifier: UJk9uQXl7yMXPSebTymcituJsu3oQngWnDvwrwI/z+w=
Subject key identifier: E8:B5:D0:0A:97:D0:2A:4C:9E:08:51:68:FC:BC:53:FF:9F:36:6C:B6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A063113D99634C3B49A560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.124.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:63:11:3d:99:63:4c:3b:49:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=bb9d562b-38bc-47fc-84b6-282097d3a0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:88:73:89:fd:be:5a:f6:4a:20:4b:f2:cd:
8f:d2:cf:f7:6c:16:5d:78:37:d5:66:4d:d4:e7:4a:
07:47:93:c5:51:11:d7:8c:e2:ba:f2:b6:b2:15:55:
48:a0:09:72:b0:75:41:10:87:32:df:43:be:9d:0c:
c8:df:ab:25:ef:9e:5d:b2:48:48:a3:a7:4e:18:e0:
9d:6c:ac:8d:33:61:99:d5:f0:c5:1f:86:40:d4:5a:
42:26:78:1d:8b:9a:e8:41:1a:7f:06:48:b7:de:b7:
cf:ce:6f:4a:ed:a6:a5:24:08:cf:0d:b3:15:35:a7:
bd:04:d7:1d:4e:ad:cf:97:2e:00:2a:fd:d8:72:68:
01:5f:d3:3e:8d:7a:55:32:d5:59:d5:63:ac:b9:ad:
bd:64:7a:67:fb:fd:fc:d8:87:48:2a:5e:24:7b:61:
7e:fb:d1:9b:63:d2:d7:94:cf:b3:f4:99:eb:06:6a:
b2:6d:3e:b5:70:75:90:f7:38:35:81:f0:9d:6f:9e:
e1:34:72:1d:00:ab:8f:68:9a:ab:60:65:40:34:21:
0c:09:d3:45:72:76:35:59:ec:a1:c6:b0:89:a7:66:
3f:bb:20:b9:1c:73:c4:43:97:8f:ac:45:dd:de:cc:
8a:e3:06:e1:73:e3:e2:85:e6:89:fd:c8:52:6d:9b:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:D0:0A:97:D0:2A:4C:9E:08:51:68:FC:BC:53:FF:9F:36:6C:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b25ffc0c-2c86-3e2f-b39e-e295b5a8d800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.124.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:1f:ed:33:4c:0a:f6:c0:f9:1f:26:3d:7b:75:da:84:e4:92:
f4:4c:5b:cd:49:ed:d5:2a:c6:b7:d6:8a:65:da:2e:72:8e:00:
d2:e5:dd:4d:96:0b:e1:2f:29:0c:60:e8:0f:17:ca:7e:4b:ad:
0f:f7:b3:4f:0d:4f:fc:12:46:52:b2:ef:2e:de:ca:16:5e:7e:
a9:69:03:34:2c:e6:76:72:de:e2:3b:d6:4d:0d:29:83:33:be:
2f:b9:29:a0:69:1a:a4:09:49:7e:47:22:88:ce:1e:b4:bf:6f:
c7:24:23:6f:31:b1:a3:6e:7e:01:eb:06:94:30:d5:3f:fd:18:
37:75:35:11:d7:f8:b5:35:25:85:f0:14:3e:72:fc:4f:f1:0d:
2c:b2:6b:01:60:97:eb:95:bf:78:ae:00:07:43:88:f9:69:00:
da:e4:50:08:3c:e1:3b:14:96:9d:4b:0a:e2:68:ee:89:0c:90:
03:63:99:68:d0:70:d4:94:b8:2d:6e:6f:a2:d3:76:1c:14:bf:
83:e3:85:a1:c2:c2:55:f1:9e:06:cd:42:6d:fc:d8:73:2f:d7:
f9:1f:87:d4:09:2d:00:d1:89:66:76:88:dd:a8:18:2b:41:62:
d8:d9:e8:6e:30:1d:28:04:8f:bb:ad:d9:e4:dd:13:9f:b8:25:
41:d4:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:46 2025 by rpki-client