Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa
File: ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa (raw, json)
Hash identifier: uqaFx/wMfFAYxn9waOyIpAcVH12Hy6/HmmlMBLul+Pw=
Subject key identifier: 61:AB:C3:5A:85:7C:53:9D:56:46:BA:19:9F:FA:FA:66:F9:DB:0B:8E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C53E23DB601D6D32D58BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 24319
IP address blocks: 104.124.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3e:23:db:60:1d:6d:32:d5:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=444f6840-aaea-41fe-8e77-1759c454232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:ba:2e:23:e3:0a:ca:a1:92:2d:00:71:30:
f3:f6:51:2f:bb:4c:35:cd:cb:65:f2:2e:f9:78:44:
b9:c8:05:59:18:62:30:1e:28:5b:35:78:64:09:93:
35:ff:97:6e:35:84:22:3b:64:aa:d0:8a:3e:f8:6c:
c3:4b:8a:c6:34:b3:b9:b1:cc:ee:58:31:fd:25:3d:
85:c0:4e:ab:ac:c0:84:7f:3d:cb:88:5d:bc:51:40:
da:6e:de:4c:27:da:12:18:1e:c9:14:0a:fe:f0:56:
0c:d2:16:be:d5:7b:f4:b4:29:ae:2e:f2:92:d3:07:
e9:3f:52:19:eb:52:10:4e:2c:09:5c:2a:ea:ca:7e:
b6:27:19:76:b6:99:7b:89:79:38:4b:79:2a:3a:a1:
b7:64:bf:ab:6f:44:27:da:0c:a2:a3:a1:f6:7c:a2:
23:33:fa:25:a7:ec:5e:7a:5c:9e:68:81:01:77:d6:
ad:99:d7:82:05:4a:5c:4a:0c:a2:f4:fd:6a:7a:16:
c7:02:06:b8:4f:8c:c3:06:0c:59:a2:b3:ad:f7:fd:
3f:0f:dc:77:e4:28:0c:fa:2e:17:a5:d7:0e:d3:7d:
09:79:b5:17:81:ae:93:aa:40:a8:68:32:6f:4d:fc:
80:0d:d1:da:6d:6c:96:5f:65:0a:f9:0d:ef:f7:f4:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AB:C3:5A:85:7C:53:9D:56:46:BA:19:9F:FA:FA:66:F9:DB:0B:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed39322e-5f98-3cb5-9b18-c8bfc5bfbac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.124.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:59:c3:31:e0:26:db:50:3d:e2:61:e9:a9:53:da:d4:7f:7e:
f6:1b:8e:e9:83:66:0c:57:d1:3e:5e:c0:95:a5:23:57:2e:c0:
d2:6c:ef:6c:10:62:1c:55:85:09:4f:fb:bf:2c:52:47:d2:6d:
af:77:fa:b6:b0:bb:49:94:a7:3b:0c:34:2a:c9:4a:5b:d9:95:
a2:c5:c6:0c:ba:cc:1a:ca:98:e4:f4:48:7c:96:8e:90:14:67:
7d:cf:27:80:4e:05:45:21:ee:fa:fe:51:ae:83:0e:da:d4:fc:
7b:71:a8:22:41:0d:a3:ae:37:aa:e2:53:bb:dd:62:c9:33:2d:
17:36:c6:2b:1a:13:5b:0d:7e:75:fe:83:e5:80:79:28:6e:b1:
2a:5b:bf:d5:76:75:75:9e:53:91:e6:db:00:d0:04:2d:e3:0c:
3e:1e:c3:42:41:7c:6b:81:f5:76:a6:d8:cf:68:b5:bc:27:f6:
f9:7b:5d:fc:39:40:1b:35:1c:5f:30:f1:1e:5f:21:19:6a:e0:
f6:31:15:3d:81:aa:f6:4a:78:10:72:56:69:08:c9:d8:ef:46:
85:06:dc:91:3e:d1:b7:b5:ec:79:20:52:b0:de:3e:5d:fd:8b:
70:0d:1f:0f:fe:e6:27:45:b3:f6:58:7f:8c:dd:1b:a3:6f:41:
13:65:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:08 2025 by rpki-client