Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8c8b2a4-07e4-3298-93c4-d87fbcda65e8.roa
File: d8c8b2a4-07e4-3298-93c4-d87fbcda65e8.roa (raw, json)
Hash identifier: 5N3jR1ZvFCCUoM76vN3v40EcjyNQpfLqsPlmFgL+YHI=
Subject key identifier: 64:23:1A:9B:FE:29:7F:8F:3A:B9:59:6C:B7:82:21:09:49:5C:2E:76
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AFEB453F7A4004532500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8c8b2a4-07e4-3298-93c4-d87fbcda65e8.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.102.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:af:eb:45:3f:7a:40:04:53:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=43ca8ecc-cf56-43ce-8fb4-de44660c5ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:2b:88:bd:87:ba:56:88:cb:99:0f:a1:7d:
6b:8d:8f:18:a2:72:56:d9:11:19:99:b5:f3:5f:dc:
bd:3c:cc:64:1c:99:17:f3:94:93:03:5e:9b:42:61:
b9:84:2a:3e:09:e7:81:11:43:da:3c:8b:4b:8b:81:
77:07:09:24:dc:5c:a6:12:93:21:64:94:c2:df:58:
2e:ea:e6:3c:42:ca:13:7c:98:b2:d0:9a:62:5d:f7:
c1:eb:1f:fc:bc:5f:f4:67:be:60:d0:d0:91:53:c8:
cd:8c:bf:f1:47:e1:69:eb:57:c2:d6:a2:2f:72:3e:
bb:4e:4c:a0:e7:fc:67:4c:7f:3b:a3:11:00:8d:d2:
06:3c:ce:ae:ba:db:d9:06:5f:dc:3b:c1:bc:a1:6c:
15:75:9d:af:21:84:d6:2f:2d:a1:c0:24:eb:b1:38:
f8:be:33:ef:7f:89:13:8b:4f:eb:0d:d3:22:c2:e7:
4c:93:6a:32:d4:20:3a:e5:90:47:a3:d9:38:88:04:
5e:01:6a:c6:20:8e:33:ec:62:09:4c:a1:bb:bc:30:
de:ba:84:69:59:74:04:ed:33:17:44:0c:5e:9b:cd:
ac:ce:44:42:d7:ba:fd:80:f4:8f:44:f2:d8:69:7a:
31:b1:30:67:f1:2d:92:3e:44:ab:0e:8e:fc:9e:0f:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:23:1A:9B:FE:29:7F:8F:3A:B9:59:6C:B7:82:21:09:49:5C:2E:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8c8b2a4-07e4-3298-93c4-d87fbcda65e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.102.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:83:74:7a:24:f2:45:07:c0:16:bd:7a:f6:a0:5d:c5:16:b1:
56:55:ca:43:c0:ed:f0:93:a5:da:10:06:b8:39:18:a6:a0:e7:
7e:99:30:e3:ab:f8:26:56:a5:43:7d:f7:64:03:8f:03:a6:e4:
5a:de:e6:25:9a:dd:6a:5d:8b:de:d7:6b:10:3f:64:c1:95:6d:
2e:bd:1f:c5:9a:15:3f:e1:b5:9d:ac:d0:4c:12:83:86:b2:27:
55:0b:95:52:56:5b:2d:0e:4a:ba:93:e9:88:ae:98:33:01:74:
a5:90:3e:19:7e:c8:3d:e5:37:c9:96:ee:4f:76:5b:6e:c2:90:
49:89:01:eb:c1:cf:e9:0c:b5:dc:b6:6c:01:7c:2a:d6:85:1b:
29:8a:ee:1a:a8:1b:14:3e:93:5c:74:45:65:cc:67:fc:79:74:
ad:8c:4c:8d:80:bf:2a:fc:64:46:c1:62:e0:8e:67:d5:39:5d:
93:07:b5:d6:2d:a0:8c:62:15:1c:68:dd:2d:ae:1e:b1:fc:1b:
06:8b:06:b3:1f:98:b1:1a:4d:4e:4a:be:d3:45:a5:bc:b5:c4:
2d:28:bb:0f:d7:51:47:8f:dc:8b:90:f6:56:1f:53:19:38:ab:
1c:a6:eb:68:e6:bd:83:08:3c:e5:1f:0e:7b:0b:c5:ea:4c:98:
c5:2f:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:46 2025 by rpki-client