Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa
File: dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa (raw, json)
Hash identifier: kpnkKGhNWzbXjdyxqtuP5jqeoLaaoua41YJg1nweB50=
Subject key identifier: CD:5E:EA:6B:E6:6D:9F:13:BA:E8:5A:D4:A5:02:D5:2E:5A:43:15:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584849457A44EA1B3C850E6B0800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 104.99.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:7a:44:ea:1b:3c:85:0e:6b:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=9f2fe7dd-8a98-42d8-922b-136d50fc44e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:36:6f:67:38:35:06:44:7c:43:b9:d7:ca:
23:7b:f3:59:5e:ab:df:00:a4:20:7c:81:07:cb:59:
6a:c0:9f:2b:b9:05:35:90:33:3d:91:21:c2:be:51:
59:50:cd:e1:66:e5:4a:c6:ee:00:8e:14:06:82:40:
50:ae:15:7b:3e:31:ad:ba:30:0a:ec:06:81:a2:0f:
d1:5d:5f:0c:5d:82:56:0b:9a:91:5a:78:b6:80:80:
80:c4:38:9f:34:c1:4a:4d:d5:b6:b5:08:4d:5b:fd:
be:7f:58:10:8d:f7:00:97:64:5c:74:a1:ae:a7:c8:
a3:08:a7:af:3e:d3:97:36:8b:d5:3c:06:03:7e:d8:
4d:18:0a:78:bb:aa:ce:90:a2:14:2d:6a:98:9e:4b:
fb:b0:90:4d:75:20:21:41:c6:9f:22:91:42:81:ed:
d2:fe:11:82:5e:71:fd:7e:46:a5:e5:8c:28:39:6f:
5c:79:eb:cd:b5:b9:0a:6a:d1:fd:9f:26:9e:c9:a6:
38:99:45:dd:14:f9:73:a5:51:c5:3b:3e:b2:6a:d5:
34:71:8e:a1:b5:b0:86:f5:b4:10:46:b6:2d:2f:52:
db:04:8f:4c:3a:81:e4:4a:02:f1:96:bf:ab:cd:b4:
4c:2c:fa:d5:a1:1d:4f:bf:d1:df:7c:18:10:93:d1:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:EA:6B:E6:6D:9F:13:BA:E8:5A:D4:A5:02:D5:2E:5A:43:15:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.99.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:1a:6e:64:f2:16:10:8a:73:99:d1:4e:5d:84:6a:cb:35:a4:
08:7b:b1:85:93:14:e4:20:0d:89:65:03:99:bc:01:73:f7:6c:
79:92:9b:c6:a8:bc:a9:4e:f8:b3:b1:57:b4:6a:63:23:91:e8:
f3:2c:8f:1e:79:dc:a9:cd:d8:9e:40:ba:56:45:fc:7a:19:22:
3d:83:50:bc:ff:0a:30:40:cb:7f:d4:c8:87:7c:53:95:27:dd:
5b:58:e1:fe:eb:9a:98:25:e5:a5:bf:34:3b:d4:ee:ee:15:e2:
cf:7a:37:f2:b6:d7:61:e3:5b:fd:27:9a:8d:41:66:3e:9b:15:
a2:98:ec:d8:8e:05:14:92:14:45:91:54:96:57:1c:37:b9:19:
43:d1:d2:0f:f9:10:e0:25:8b:1f:11:8f:2c:23:39:0e:b1:1b:
11:7b:b1:b6:ec:04:71:97:ce:77:db:93:76:42:9c:de:d0:85:
b3:4c:a9:7f:f1:f5:22:6d:6d:4b:00:ad:56:a1:00:ac:f7:93:
34:66:e1:ab:c1:2e:b0:fb:21:c0:7b:ab:7b:da:65:a7:4a:c3:
de:3c:26:f3:01:c0:52:a7:c4:87:37:51:fb:88:47:d4:c8:ef:
b3:dc:28:ab:e1:f1:26:13:90:db:70:a2:02:14:1a:1b:f7:56:
4a:ad:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:54:54 2025 by rpki-client