Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcde9f5b-e872-3918-8004-b074e41d5faf.roa
File: dcde9f5b-e872-3918-8004-b074e41d5faf.roa (raw, json)
Hash identifier: KFG78FlHClTaunpIhS9juE+ueR28rIkPmu0dB0vH4kE=
Subject key identifier: B9:2F:7F:01:18:71:D8:80:C1:3F:61:07:99:F7:ED:F4:9F:98:00:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B755AD6FEC2D9D080980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcde9f5b-e872-3918-8004-b074e41d5faf.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.96.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b7:55:ad:6f:ec:2d:9d:08:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=2e5abdf5-896d-4052-8d2e-0ea48c6ced2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:22:58:31:a2:be:a4:5d:8a:87:86:af:87:
fd:a9:3b:bc:d0:2b:57:89:df:b2:08:c0:32:f4:6d:
a5:af:bd:91:0e:79:25:7e:93:d0:ec:99:8e:40:9f:
41:16:02:87:5d:cb:8e:01:e6:49:e5:40:ee:d6:40:
b9:54:e9:6b:53:42:27:80:01:64:c0:5b:5d:16:45:
16:c6:b0:49:b0:8b:6b:51:ea:3d:7d:d4:53:5a:90:
8f:34:8f:fe:1a:70:7d:60:0c:06:ff:14:37:46:fe:
e8:f7:43:ae:a3:5a:90:da:6e:18:ef:a5:bc:48:93:
74:fa:ca:c2:a9:3b:49:43:66:ab:1d:65:50:f0:be:
db:c8:04:ab:d2:c0:56:cd:2d:44:a9:9f:fc:ef:74:
a6:a7:0f:cb:95:54:36:4c:55:1a:cb:d2:f2:10:e2:
25:2b:02:ad:dd:99:9c:22:ac:7e:c7:f1:c9:6e:27:
60:d9:b0:02:f3:6b:7b:01:72:f9:63:c1:fa:2d:d5:
8b:6b:6d:df:f4:8d:20:7d:93:c4:b4:94:b1:eb:9c:
8a:8d:ce:1d:c3:e6:34:98:d2:74:80:f8:ef:ea:30:
5a:f8:2d:44:04:d7:3b:60:e5:0f:32:de:cb:14:ac:
51:e7:85:4b:10:3b:eb:84:f9:f6:1b:aa:77:07:52:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:7F:01:18:71:D8:80:C1:3F:61:07:99:F7:ED:F4:9F:98:00:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcde9f5b-e872-3918-8004-b074e41d5faf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:50:0d:39:b7:bc:bf:7b:87:a8:90:de:9b:28:4e:6e:e5:45:
89:1b:5c:c9:ad:46:ba:a9:d6:b8:7b:bf:06:ef:d3:81:a4:bd:
12:1e:0e:e7:c6:0b:f5:50:b9:aa:39:c2:af:61:2b:c0:c2:06:
de:d2:54:b1:38:96:9e:29:0f:29:12:78:ff:3c:46:2f:07:76:
80:14:16:d9:fa:df:8f:fb:2e:86:74:38:ec:5a:bd:ec:ef:7a:
20:64:e8:6a:f7:a0:6b:c4:d6:21:e1:b5:c4:9a:eb:cd:97:13:
f3:1c:a6:ac:60:e5:7c:76:93:b5:8a:5e:34:c4:bb:d0:ce:fa:
f6:8c:8c:e9:8c:d4:4c:40:47:66:09:66:c9:95:5b:f9:51:e7:
9d:12:31:2a:b1:1d:66:ba:8d:af:d5:ed:37:15:cf:d1:84:ff:
47:ce:d8:b1:35:20:4f:a5:1d:f3:17:b1:71:9f:76:b8:6a:64:
23:a8:3a:5d:c0:a7:2d:0e:b9:89:3a:62:77:7b:34:b1:b2:91:
70:64:30:da:eb:d7:39:97:55:3d:d2:58:c4:52:8b:76:4d:77:
76:e1:94:63:d3:50:7f:a2:08:22:01:b8:98:1e:e3:95:1f:00:
19:04:b9:80:be:54:01:e8:f2:a1:24:8c:03:3c:0d:b8:0b:fa:
e6:fb:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:39 2025 by rpki-client