Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa
File: d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa (raw, json)
Hash identifier: M5+R6Q+C2Hq7pB6F8O1nl6O9Q2zA4RpP/ZIZWOqPmCg=
Subject key identifier: FF:BE:03:22:C7:09:AA:5A:53:C7:6B:7A:84:0C:8F:EC:0F:DD:1D:4F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848467AC324CBD3985BD3740F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.114.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c3:24:cb:d3:98:5b:d3:74:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=bdc23107-4e32-4b13-b55a-f3bd725f2e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:94:e1:7b:ea:cb:fb:7d:bf:52:be:3b:6b:
e0:e2:87:c3:66:ea:03:f6:f3:d1:42:0c:fa:96:76:
7b:56:84:b1:9a:7e:44:3a:56:84:4d:2b:d3:5f:91:
e5:f1:81:77:3b:28:72:37:e5:eb:a2:f6:f9:9b:de:
c8:02:70:57:92:2d:26:02:c4:dd:a1:a3:2e:1c:d8:
26:ed:d0:ac:c3:36:55:86:f3:69:c4:f7:88:7a:f5:
b8:0e:b2:b4:b2:82:14:d3:5f:59:8f:e4:05:0a:a3:
04:3c:91:6a:05:85:ad:30:13:5e:80:93:53:71:4c:
49:e5:93:1e:84:82:f4:b7:73:17:13:ab:3a:04:47:
f5:ac:9f:4e:88:7c:a5:db:8d:48:e2:8b:2a:93:71:
04:f9:f5:60:c5:3b:ed:e1:d2:f8:6e:2f:4f:66:f7:
26:27:f4:7d:07:e5:f1:6f:c3:c6:00:a6:d5:1e:9c:
21:70:aa:6a:e4:53:57:5f:53:94:02:6c:9a:93:91:
7f:b2:27:3a:e5:61:72:8b:c7:e8:1c:5d:1a:f1:d8:
ac:7a:c0:fa:b7:2d:60:39:2b:30:c1:c2:97:0b:77:
3f:19:92:05:2e:4f:51:aa:e7:38:d3:75:b2:73:95:
ec:d9:fe:fa:c2:8c:f5:08:d5:a5:60:10:0f:e2:4e:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:03:22:C7:09:AA:5A:53:C7:6B:7A:84:0C:8F:EC:0F:DD:1D:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.114.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:50:4d:1b:69:5f:45:c3:07:3b:68:0e:7c:ff:49:8e:bb:9d:
2e:9b:f1:e8:17:3a:ee:fe:ac:cb:2d:3e:16:1e:47:bd:89:50:
f4:0c:86:2c:e3:c7:3e:9d:5f:93:a4:d2:2c:8c:93:7b:3d:34:
26:df:ea:62:7d:9e:c4:4c:92:07:be:e2:98:04:8e:c9:f2:ac:
7b:96:75:a9:38:81:b2:0f:dd:e3:6f:b7:9a:cd:f1:c8:d6:50:
b3:07:e6:ac:2c:3f:82:d6:4a:b2:e7:2a:e3:b6:a9:bd:f9:8a:
67:96:4f:04:a5:1c:08:2a:c4:96:36:e9:e4:53:16:e4:5a:d3:
83:95:43:c3:34:11:e6:54:7e:28:22:d3:69:79:50:e9:93:47:
9f:7d:32:ec:f1:b5:eb:a6:ab:a5:14:d3:65:dd:69:39:46:8e:
c3:83:a4:a0:f6:b3:e4:e1:b6:b4:43:cd:ec:c9:2a:43:3c:df:
44:52:07:f9:21:0e:16:d4:4e:67:36:ad:dd:61:84:d9:09:78:
8d:ce:03:b0:e3:fe:12:a0:36:a2:1a:5c:cc:7c:a6:8b:ac:f0:
89:d9:8a:d9:c9:aa:c3:b3:09:e2:79:91:59:0f:e7:3c:a9:ed:
d5:7d:90:e5:35:e2:f1:ea:be:52:a0:da:be:a7:8f:33:a5:dc:
f1:00:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:15 2025 by rpki-client