Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa
File: c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa (raw, json)
Hash identifier: nxiGynM2Lqs4hvFQAanJHUj2JzBXCleTzosbsX+15dQ=
Subject key identifier: A7:2C:BF:2F:BE:FA:DD:02:19:E1:78:3F:36:B7:B8:7F:7E:9E:89:60
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06946B436F395BD4C4180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.123.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:69:46:b4:36:f3:95:bd:4c:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=15975df2-9939-4db2-8f36-993c4e9daeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:90:57:68:84:ea:d2:f3:8a:d4:c5:64:fa:
22:83:75:ba:39:81:db:3b:c4:4b:04:c7:3e:af:a3:
89:06:55:f6:e0:21:fc:02:2e:fc:11:09:df:ab:97:
21:f8:3b:68:88:d2:e9:7f:4b:1e:bb:78:aa:77:93:
80:cd:f7:bb:95:94:16:30:e9:5f:8a:55:5c:3a:6d:
6c:32:60:f2:cd:f5:b2:85:01:cb:9a:e7:a9:ff:f6:
db:65:0f:e8:29:4f:f6:48:83:7f:4f:ce:c6:21:0c:
2f:ec:3f:7e:54:82:15:85:32:61:79:cd:5e:e7:80:
73:b9:2b:40:0f:b6:3c:2c:0e:cf:ba:5f:77:4c:d2:
67:43:e7:13:7f:cd:b9:8a:88:f5:0d:0d:0a:a4:e6:
cd:fa:85:d4:82:a4:52:fe:8a:e9:4f:ea:89:8d:a8:
f5:7a:d1:6d:92:2b:b9:64:07:12:18:61:56:55:67:
5d:48:53:61:bb:97:89:f9:39:56:82:f1:a5:31:2f:
c9:62:1b:d3:ee:40:43:cc:be:be:d8:64:d5:d4:86:
49:8e:36:2a:19:cb:de:c3:a7:72:6f:10:ae:1b:cb:
da:84:69:cd:72:f9:7b:05:94:c2:2f:3f:14:89:c7:
9f:07:e9:e7:03:9e:b7:5f:32:1b:ba:18:b9:ab:7c:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:BF:2F:BE:FA:DD:02:19:E1:78:3F:36:B7:B8:7F:7E:9E:89:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:8c:a3:83:f8:93:63:7c:d6:40:45:4a:22:a9:bf:37:bf:95:
69:22:75:9f:d7:3c:e4:83:d9:64:7b:a5:95:5f:17:f9:34:73:
3b:c2:17:55:e3:d9:5c:22:c8:5f:86:e8:86:7d:1f:50:ee:4f:
24:5c:29:e2:a4:f5:f1:31:60:d4:f0:6f:80:c3:a4:fa:0a:15:
5b:d5:d5:72:5c:f4:c3:e7:71:24:18:ed:99:b4:4a:70:69:15:
ed:e6:fc:08:1c:e8:97:b0:a7:76:ff:91:38:47:22:be:f1:a6:
56:0c:b9:7e:7e:5d:4a:3e:79:c3:3c:da:64:74:14:46:45:4b:
44:c2:3e:c7:82:e5:87:d2:e4:a9:50:e2:4b:5e:20:35:b9:53:
ef:dc:c8:71:dc:fa:00:cf:f3:f8:6d:8f:b8:c9:73:69:02:8e:
a1:63:9a:8d:c7:64:6e:a3:03:95:59:a3:a4:4d:1e:12:96:c7:
48:fd:d3:f5:86:b8:5a:d0:8a:24:62:f0:11:a2:41:f2:82:f0:
33:92:b6:c8:a4:ae:53:2c:9c:38:a6:55:b2:b1:93:18:77:6f:
51:aa:92:8d:44:03:83:8f:ec:bc:b4:1f:f4:92:62:41:78:9b:
98:fc:cb:d0:41:e3:e4:6a:22:bc:58:54:a5:ff:c7:96:c2:7a:
d1:7f:4d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:28 2025 by rpki-client