Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee6f2113-2f7d-39d1-a23e-339aeac3ec1e.roa
File: ee6f2113-2f7d-39d1-a23e-339aeac3ec1e.roa (raw, json)
Hash identifier: 23QM0ty8SxciuHj/agvIJjOu6eLSIkyyPN+DbxfeFD4=
Subject key identifier: 0F:F1:31:72:F9:3B:6F:5D:5A:17:74:9C:B9:BF:B1:64:4B:A9:87:8C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530B0B9881D08F7101E4A680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee6f2113-2f7d-39d1-a23e-339aeac3ec1e.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.78.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0b:0b:98:81:d0:8f:71:01:e4:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a7292591-2b73-4c69-a2d6-d9e01e3c573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:8a:b8:da:16:aa:45:f5:81:46:66:9f:4e:
74:2d:cf:48:db:3d:21:08:92:8e:05:8e:ff:cb:5e:
e3:42:7b:b6:cc:04:87:f5:d1:e0:7d:99:9b:87:38:
b8:4e:bd:c9:a3:45:f3:43:ea:83:d0:36:7e:a7:2b:
61:e6:dc:9a:e9:e1:a3:cf:62:68:81:c6:fd:72:b8:
c6:ee:07:d7:df:05:b7:fb:12:9c:63:cf:6c:68:e1:
3f:91:08:1a:00:2b:81:c9:e9:8f:12:9d:4e:fd:d6:
7c:50:7c:3a:8f:c2:53:c5:64:3a:c9:ca:67:14:60:
eb:e7:71:c2:bb:d7:8a:c6:ab:30:36:d8:45:1b:2b:
ba:bb:16:c2:52:fb:6b:d3:d9:6f:8a:4a:21:4f:b7:
e5:45:9e:d6:be:2f:8b:00:10:0e:72:e1:58:38:36:
5c:a2:d5:9f:75:82:f1:61:09:aa:00:1c:94:5d:db:
15:37:83:e9:6f:51:05:43:ad:9d:d3:15:e6:2c:c0:
58:3b:15:8f:78:c7:1a:47:82:65:51:f7:69:53:e2:
b4:b1:d9:ed:d0:bf:6c:fd:38:8a:f3:cd:b7:4d:06:
ce:22:ba:de:c3:71:92:73:7f:d6:cb:ce:ee:f2:26:
e0:f6:03:a7:3a:a9:75:8f:e7:99:a1:dd:26:26:a5:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:31:72:F9:3B:6F:5D:5A:17:74:9C:B9:BF:B1:64:4B:A9:87:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee6f2113-2f7d-39d1-a23e-339aeac3ec1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.78.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:69:75:98:94:76:f3:bd:a0:92:fa:d0:da:b7:12:d9:b8:55:
1d:d2:32:e0:31:00:56:43:8e:f6:d1:8c:a2:d1:50:7a:2b:df:
45:17:62:67:ea:7c:f0:ca:42:d7:70:ae:7e:cb:3e:0e:12:23:
1b:31:98:91:2c:18:9b:b3:46:b9:02:31:e9:59:07:19:f6:d2:
df:46:1f:28:44:9b:60:d5:8d:1f:4f:db:cb:83:80:92:97:fa:
be:63:4c:e8:23:46:67:24:1a:67:57:56:12:e5:4b:60:84:e8:
10:e1:2f:73:fb:b7:78:30:30:94:4c:27:56:5f:2e:01:71:ea:
52:90:0a:73:67:12:03:de:f3:e1:31:a1:cb:1b:98:12:11:77:
13:ac:6e:2a:98:9e:95:f0:b9:ad:61:89:98:f2:7c:26:a3:cc:
80:16:9e:bb:d4:17:f3:a7:3b:0c:26:fc:19:99:f1:d2:39:ea:
64:eb:57:03:9d:6c:aa:bb:a8:1d:48:2e:49:7b:ec:6b:15:04:
7f:62:f7:aa:b6:6c:ff:99:02:ec:86:ed:c4:0e:a5:84:25:1f:
bd:cd:15:28:72:d1:e3:b6:10:85:b6:14:ec:e9:95:d1:d9:70:
21:ed:7c:14:2d:5b:fa:61:3a:21:e1:cf:75:a4:5e:3c:e1:34:
90:dc:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:29 2025 by rpki-client