Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
File: d521682a-df3e-34d3-ab3e-27bd263e2578.roa (raw, json)
Hash identifier: YR2F3+3v1s307SDiEVv98gP7lPiPX+wjLGcIAdnjMr0=
Subject key identifier: 18:02:79:43:61:C7:B5:EB:64:4B:A5:74:4A:3E:A2:F3:CC:20:B7:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A06847E9138D3D13CD4540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 35994
IP address blocks: 104.121.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:68:47:e9:13:8d:3d:13:cd:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=7a9533e5-734c-4cc2-b42f-84d7d2417d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:a8:07:f3:6d:c5:56:3e:22:24:ae:a7:4c:
b9:a1:f3:d6:49:bd:1a:e5:53:1a:ee:21:63:ef:e9:
20:49:98:b0:b8:8f:8a:a4:b7:77:64:68:5c:e8:62:
af:ec:18:bb:74:b5:02:6a:39:d8:16:13:ff:40:94:
23:af:fe:57:40:5f:9f:ee:53:e0:9b:49:f3:c8:64:
59:5f:ce:3d:11:29:31:4a:52:bd:09:72:7a:45:a0:
27:e7:d5:4a:44:bb:12:ec:ac:15:c8:61:ab:de:2c:
76:b1:2b:67:99:49:6b:5f:8b:40:6c:e4:32:ff:bd:
fe:79:5b:ab:42:7d:fa:fa:ef:67:a1:27:bc:84:28:
a0:3c:d7:2b:6f:a5:96:9a:01:22:18:d1:51:ab:cc:
c1:a8:20:cb:5d:b6:8c:2b:0d:7b:86:f8:17:c0:c2:
bc:32:1e:ce:f3:50:ad:6c:ef:6d:9b:11:14:b2:cc:
31:3a:1d:21:73:4c:ba:bb:11:71:57:e4:71:8a:8e:
16:42:1b:87:ec:74:77:c9:fd:37:da:bb:1d:02:eb:
ec:80:7d:9b:d3:84:2d:b9:fe:d3:56:bc:42:d6:c6:
18:5e:07:d3:b8:dc:e1:0a:3b:12:1f:b9:16:87:2f:
4f:86:31:77:0d:37:71:61:42:6f:2e:f0:d9:b0:95:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:79:43:61:C7:B5:EB:64:4B:A5:74:4A:3E:A2:F3:CC:20:B7:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.121.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:62:e6:4a:29:7f:6c:14:12:80:a2:45:18:4c:0d:b8:ed:b5:
c8:27:d2:88:f7:e8:2d:bf:b5:38:77:6d:e6:b0:39:05:7f:21:
9a:a0:a1:11:48:dd:15:94:75:c9:ed:18:30:ac:ee:4b:bf:45:
73:81:0e:f9:00:27:84:d2:b0:10:d7:5f:fc:8a:a0:3f:b9:0d:
97:c0:3c:25:3d:5c:8b:2d:12:91:19:0b:de:99:a8:eb:2b:58:
a2:de:14:b3:68:6c:d7:c2:8d:5e:9b:39:68:ac:9f:76:00:42:
67:9f:0b:f5:92:d9:01:2f:4b:9d:c1:66:fe:64:97:81:f9:94:
83:2d:a8:3f:c5:a7:0e:8c:ac:9d:94:7b:8c:5d:2a:50:8d:f4:
eb:f5:4b:1e:79:72:b3:56:37:b5:91:8d:9c:94:91:c1:c4:4d:
64:b1:5e:91:92:a8:d5:43:a1:de:78:19:a4:9d:21:f3:a1:f9:
79:7c:82:12:00:8c:2b:9f:3e:64:3c:c6:8d:9d:cf:30:5c:29:
c4:67:62:29:55:a8:09:ec:ed:d6:b1:92:28:fd:53:bb:8d:f5:
bb:8b:a3:7e:e3:d1:b9:5d:c3:af:8b:a3:2e:a5:52:59:41:04:
bb:7b:7e:42:0b:67:2c:72:95:3b:e8:1e:05:2f:be:c9:91:f7:
44:98:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:30 2025 by rpki-client