Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa
File: e38a345b-3007-3bfd-a88b-6b24141726d3.roa (raw, json)
Hash identifier: bed+N9BdUvtOWQ0fvTYqIdxaE0XUdQb4G/gqKSK+OAA=
Subject key identifier: 90:3B:B4:99:60:68:3F:CB:E2:7A:D3:93:AF:AF:F5:39:78:F5:80:98
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B445D2DB791835EA0C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.86.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b4:45:d2:db:79:18:35:ea:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=e8619af4-6ce9-4829-aecf-612c289dad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:90:4b:59:ef:76:36:3f:c5:51:e8:06:f2:
f3:ff:28:72:09:14:38:5c:8c:62:96:ae:53:f5:bc:
fe:9a:0d:48:f5:ef:72:6a:3b:14:54:09:c4:30:1c:
68:05:3a:af:af:17:3a:f9:9c:41:84:8d:06:90:69:
10:ee:11:df:0d:3b:51:bc:25:5e:cf:56:c2:1e:b7:
5d:df:7e:20:5a:77:e5:62:aa:01:3d:22:65:3b:fc:
c0:d2:78:6d:f4:5d:02:31:4e:88:66:c0:e7:fa:4e:
50:61:9f:45:ce:58:61:d9:43:0c:5f:e4:af:18:6f:
11:31:36:fe:f6:d7:2d:4c:6a:f9:51:e0:18:ee:ed:
c5:7f:f2:b3:52:77:ac:3d:66:13:b7:cb:be:c1:cd:
ef:29:a4:be:b3:f9:ba:aa:0b:2b:67:20:cc:ea:7f:
1f:d4:35:03:5f:79:90:7f:55:6c:75:de:fa:70:60:
83:72:89:cd:d1:24:a0:a4:88:c9:41:82:df:ca:0a:
f5:21:f3:70:76:2a:ad:82:e3:07:90:95:3a:fc:44:
35:7e:e1:d3:e9:48:96:ee:cf:e9:2b:33:e3:22:c3:
31:30:a2:d7:4d:75:8f:78:7b:15:97:3f:5f:f1:72:
d6:cb:35:fc:72:b4:f9:d6:00:d9:3a:df:d4:f8:49:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:B4:99:60:68:3F:CB:E2:7A:D3:93:AF:AF:F5:39:78:F5:80:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.86.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5e:c8:b6:a2:8f:50:48:77:41:25:5e:4a:ff:5d:d6:de:c1:
ec:03:5e:a2:4c:b6:5f:91:1c:ab:88:26:cc:8b:9a:4c:79:1a:
e1:68:67:3e:10:ad:42:14:4b:d2:50:92:16:f7:56:46:d5:82:
96:a1:44:90:0a:50:8b:ba:b8:01:47:be:bb:28:e1:18:11:75:
61:a8:b9:e7:d7:f5:e6:2e:9a:28:e7:07:7b:9b:8f:c4:12:b2:
50:7c:aa:50:2a:3e:68:a7:93:63:ff:56:52:20:88:ae:93:38:
a9:fb:f6:3c:9a:ee:1b:d8:89:03:7a:3a:12:3f:6f:56:9b:9c:
56:41:32:5a:99:07:f9:88:45:58:38:da:e8:73:dd:de:48:0c:
cd:78:e9:c2:b3:c6:c1:04:27:5e:3b:ec:a2:86:b5:42:f5:f3:
c3:e6:ce:4c:38:7b:e6:54:eb:71:79:03:b9:96:17:f5:ec:37:
25:ea:23:3f:1a:1f:15:a7:d0:39:e0:92:6e:4c:2f:90:4d:e2:
f3:5d:bf:5d:0f:f0:68:ae:a6:9c:c7:50:0d:2f:70:a8:63:48:
38:f6:92:c1:69:3a:a1:dd:b7:3c:a9:f7:c1:6c:c7:00:f0:5c:
6f:0d:23:90:b8:e2:41:d8:d1:6f:8b:9f:2f:d2:dd:b2:6c:86:
1c:69:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:03:28 2025 by rpki-client