Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa
File: ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa (raw, json)
Hash identifier: rVeO5+BsSOCmlZlnABD7tL0rlaUnZHx/bGdLLs2pcyw=
Subject key identifier: C3:D2:E4:0A:86:2C:01:C4:E6:9F:AE:08:73:63:15:6D:18:2F:3B:2B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AF8E0535B98A9AFC9EF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.71.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f8:e0:53:5b:98:a9:af:c9:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=9c876ffe-d3d2-477b-8e0d-33e07d1e9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:06:d8:74:e0:b5:c9:6c:3b:69:f7:61:44:
84:f6:16:50:a3:62:3a:32:67:d5:97:b5:40:56:37:
a9:be:9b:28:d1:3e:b2:c7:d2:92:e0:5f:05:04:29:
dc:8b:11:7f:8e:c5:c5:c1:7d:71:2b:1f:01:4b:70:
2a:70:a5:00:5e:1f:e9:a9:c0:bf:46:18:38:99:10:
05:7b:e9:8d:40:7c:af:bf:d8:29:44:7a:96:88:b9:
47:7a:12:8c:80:4b:75:e6:1f:77:de:06:1c:b6:3f:
23:d4:77:1f:c5:ac:6a:a4:63:9c:c4:e5:89:ba:db:
1c:33:a4:af:1a:e1:00:ff:ab:a2:01:a7:1d:9f:a6:
7d:01:94:85:6d:c8:cd:33:6b:5c:a0:0b:5f:b0:a6:
79:91:0a:25:75:85:ed:26:4d:c8:48:d5:14:76:dd:
1d:d3:b0:79:2d:37:1e:70:21:ab:5b:4a:81:7d:ce:
89:99:de:6b:bf:f7:06:a9:19:66:10:91:fc:63:6f:
4a:0a:d0:7c:2d:37:72:48:aa:a7:27:ee:7b:7d:3d:
8f:e9:af:5b:07:df:81:e8:99:f7:ec:fc:e8:e2:e7:
9c:3f:3f:b7:fd:32:57:9e:e5:dd:fc:0e:43:0c:d2:
36:9d:86:7a:f7:c0:38:5e:55:35:11:b1:b2:fd:14:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:E4:0A:86:2C:01:C4:E6:9F:AE:08:73:63:15:6D:18:2F:3B:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:22:f3:43:57:a8:0e:69:0b:29:71:95:08:00:f9:a5:50:d1:
26:25:74:bd:0d:9b:8f:b3:77:24:fc:b7:d9:60:10:91:0f:50:
b1:28:36:61:a2:a2:3b:0e:e6:d3:de:eb:b9:fa:08:99:bf:85:
53:85:1d:4d:68:fa:1b:b4:03:f4:13:4a:0d:da:08:33:ba:54:
ba:8d:0c:70:c1:74:9c:b6:f3:f7:5c:ff:72:f6:28:b7:94:3e:
85:a5:42:61:2d:52:71:b1:00:9d:4d:46:cd:3f:e6:46:59:77:
8a:17:2e:ea:1e:9d:b8:c1:a3:14:bb:96:58:f0:20:09:6f:3a:
00:7a:f5:19:28:04:b4:41:6c:85:62:69:bb:95:3e:68:01:f5:
08:5f:49:00:ab:b0:37:66:74:ab:41:b2:6a:4a:6e:9d:ef:0d:
2a:ff:9b:e1:3c:4f:63:c2:66:f4:51:41:6a:95:6f:d9:3a:cf:
23:59:60:4f:6c:40:ad:ea:f5:11:ac:f4:81:1f:63:c3:a0:6a:
20:54:57:4a:29:de:96:2f:15:c7:9d:86:a2:6c:be:92:02:e8:
ed:cd:bc:a2:a5:bb:b0:9c:c8:9e:3b:0b:51:6c:c7:59:2d:d4:
b5:c3:23:d9:23:b4:a5:84:29:3c:30:82:b3:0e:47:e1:c6:6b:
d7:91:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:20 2025 by rpki-client