Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa
File: d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa (raw, json)
Hash identifier: +EQPKCmuZsmJfdkifdZKgUh8opANAmqdxYd0+jjgy8Y=
Subject key identifier: 02:CD:E0:61:B5:04:80:43:D4:E7:6F:31:78:A1:BE:4D:BD:6B:02:2F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B07790A06402947C60600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.68.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:07:79:0a:06:40:29:47:c6:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=104daba1-8eec-4798-920c-48ce5df222c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:d8:7e:e9:80:38:bc:b3:52:ee:a1:0c:d8:
19:83:81:94:84:34:df:d5:62:7e:91:4a:8f:d5:d4:
ff:48:0a:25:20:66:da:7a:6f:29:07:37:a2:f2:c1:
f2:4c:fc:9e:27:21:ce:ea:1b:f0:44:50:81:49:08:
d3:1e:f9:df:c1:2c:3a:60:80:aa:78:85:df:47:4f:
8d:c3:b1:d6:bd:00:c5:e1:59:61:9f:18:d1:0d:38:
68:08:f8:77:32:c1:6e:f7:58:2e:3f:b8:62:c4:6f:
10:cb:5c:06:60:d2:99:f3:56:e9:05:a3:1c:33:8a:
7d:a6:e8:28:f5:59:db:b5:00:2b:6a:48:ea:52:a3:
c2:eb:e1:66:be:de:77:a6:6d:92:8b:6c:80:37:2b:
c4:76:3c:4f:da:ba:01:06:ba:ca:fb:f6:da:8e:0d:
f3:a3:f3:4b:a5:a1:e3:4c:51:22:b2:d3:82:2f:55:
67:95:0e:31:2d:ec:a4:65:cd:e2:2b:b5:0d:18:ef:
6a:02:2f:f2:ae:11:53:c4:1b:a5:af:fe:f5:1e:03:
0b:f5:50:cd:e7:8e:5b:ef:3c:03:3d:42:a6:df:91:
3e:1c:c2:7d:52:e6:3d:d1:2c:e6:27:4a:2e:29:9a:
bb:15:c1:3c:c5:b6:76:69:3e:e2:8f:db:1a:b0:6f:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CD:E0:61:B5:04:80:43:D4:E7:6F:31:78:A1:BE:4D:BD:6B:02:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.68.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:d3:3a:95:32:f9:66:c0:64:cf:ec:b7:08:e0:bc:2f:ed:bb:
79:39:96:ae:03:30:4b:a7:b4:d4:34:99:4a:7f:e6:fb:79:7d:
35:b2:9e:e2:8a:10:6f:c8:28:04:96:8f:74:5b:5d:ab:da:49:
19:c9:df:01:3a:1d:c5:a8:dd:65:e9:b9:26:d3:51:9e:17:a3:
d3:b9:e5:ac:76:71:5c:c7:86:e5:36:08:a8:a2:fa:a3:8b:b2:
df:0d:7c:fe:87:83:68:33:55:6e:1c:2c:14:fa:f5:75:85:e5:
f8:93:65:12:2d:ef:af:c9:6b:4f:65:15:64:be:5f:74:1e:29:
dd:b0:78:15:e1:eb:f3:72:2e:36:fc:8a:05:35:35:78:89:44:
33:d7:1e:06:02:cb:ab:58:c3:19:57:c8:50:12:aa:c0:12:7d:
cb:66:f7:56:32:52:b4:6a:b0:e5:86:12:9e:d1:9a:bf:84:f1:
1b:18:3e:e8:3e:16:8e:ea:e6:2a:06:7a:1e:27:df:a0:3b:28:
2d:d5:9e:54:31:50:66:19:cc:df:ac:6e:51:dc:fb:6d:99:b7:
e8:f8:ba:c4:0a:ae:10:81:58:bd:fb:e9:4b:d3:d6:9e:e2:52:
7e:85:dd:ff:1f:0c:c6:72:4d:f7:d5:85:13:1e:7f:86:49:f1:
6d:8d:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:24 2025 by rpki-client