Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa
File: d8bcab89-deac-3d68-b72a-3a4a20a98221.roa (raw, json)
Hash identifier: gCD/mp1REvwrkNG8nVtBpUnc2Fd3om+G7WaMEOgUYuQ=
Subject key identifier: C2:7B:CA:D8:78:BF:FA:84:DE:05:B3:32:8F:0D:B2:33:13:4D:4F:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B897ADE84ADA97A88340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 9443
IP address blocks: 104.99.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b8:97:ad:e8:4a:da:97:a8:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=4d9f1885-24d3-48d4-98c1-7ad1cb956a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:ed:62:6b:d9:a5:3f:69:c5:1f:1b:d6:cb:
36:16:b4:77:81:c0:e2:22:fa:95:3c:de:2e:be:d5:
f5:b4:11:b3:d5:9d:03:36:ee:9a:76:0b:9b:91:a1:
36:09:25:31:d2:44:0d:55:d3:75:02:66:aa:20:d7:
3f:4c:a1:71:0c:86:35:f4:76:02:70:2e:fe:95:5a:
66:be:46:41:8b:cd:6a:e3:c4:6e:88:df:ad:d6:14:
00:be:6f:d3:86:74:49:04:2c:5d:ee:38:bd:0b:a1:
90:97:98:de:68:13:a3:75:b7:9b:c7:77:f3:e8:f6:
b3:7e:a1:97:ec:ec:ae:da:6d:f5:a1:6b:13:a0:0d:
8d:60:ba:89:dd:ae:78:2e:57:23:4e:4f:be:9a:17:
93:2f:83:dd:d6:26:00:af:9e:80:be:2e:bd:76:36:
6b:1a:d8:d3:e7:23:08:b8:69:01:30:79:df:7d:20:
1c:ab:ca:c6:a0:c0:cc:ea:de:c5:36:c9:43:5e:2a:
21:72:31:53:51:39:d0:3c:0b:f4:ae:b0:46:14:95:
03:d4:4f:0d:44:27:dc:5a:8f:52:60:27:74:c1:f1:
25:62:6f:8f:ac:5b:4a:a3:9a:4b:d0:c0:c0:bc:99:
c4:19:90:ef:a2:06:95:4a:56:9b:ca:87:60:ef:52:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:CA:D8:78:BF:FA:84:DE:05:B3:32:8F:0D:B2:33:13:4D:4F:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.99.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:4c:d3:e3:c5:7e:60:d9:10:6d:09:1a:01:f6:e8:60:bb:bc:
a1:ef:4c:9f:cc:19:3e:56:ee:34:a4:f5:54:9b:c5:6b:37:21:
23:5e:5c:76:36:8d:60:35:bc:e3:ed:5e:51:06:d0:dd:bc:c7:
9c:2c:60:6c:11:46:4b:63:2e:ea:63:56:f6:38:e2:72:ad:15:
a2:41:cc:c3:3e:ed:e5:9b:f5:4c:ca:21:96:52:11:4c:39:dc:
c1:98:a0:96:90:36:27:d7:70:5c:2b:25:0d:bc:fc:3e:d0:e1:
75:db:a7:98:fc:30:12:19:5d:bc:d4:81:15:e2:8c:de:e4:2d:
87:7f:e9:0d:33:ef:4e:85:fd:4a:bd:68:bf:34:66:8c:ac:29:
4d:fc:a1:8f:0e:32:16:03:6c:05:ce:38:23:dd:03:84:94:d3:
a5:22:b9:db:9f:4f:4c:62:37:d5:4f:76:46:24:77:bd:5b:00:
f2:9a:e6:87:84:51:87:68:36:7d:9f:6c:9e:af:da:ac:65:73:
94:cc:1a:51:41:0a:ba:60:6c:5f:95:88:df:0f:3a:19:5d:5b:
08:b8:b9:51:66:ca:ec:13:b6:16:ce:7c:96:eb:27:f6:22:3e:
7f:98:e9:c5:d2:30:17:8a:c3:82:57:ab:62:7e:13:19:c9:68:
df:3e:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:30 2025 by rpki-client