Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1fe7bc0-d467-3fa0-871f-fa6c85b8bd20.roa
File: f1fe7bc0-d467-3fa0-871f-fa6c85b8bd20.roa (raw, json)
Hash identifier: wXVe9vGqRAxxqrE6uEb77f53yucs3s50b6JCpHJn64A=
Subject key identifier: B2:D2:6D:4F:9E:18:39:01:12:0D:5D:99:92:30:5C:34:F2:DD:0F:1F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02E7AFA60AF6F7468F180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1fe7bc0-d467-3fa0-871f-fa6c85b8bd20.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.119.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2e:7a:fa:60:af:6f:74:68:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=a33881b5-6b1d-4559-9817-e8036ed77965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:ce:14:f6:89:0f:5c:23:3a:ec:51:e2:82:
4c:d8:a9:ce:68:30:c7:33:e3:bc:54:eb:e6:3e:e0:
7d:31:fd:d5:9c:db:05:33:76:1c:e9:be:ad:d1:4a:
b3:a7:84:28:60:50:b7:7b:b1:26:9a:b3:93:52:7b:
a1:1e:dd:aa:14:88:7f:3c:96:79:a8:23:a8:1c:ba:
b0:6b:56:cc:ee:cf:7d:19:c9:a2:10:6e:9c:96:a8:
77:6c:18:d0:64:2a:2c:41:3a:a9:4d:be:e9:65:bf:
7b:53:21:50:aa:4e:5e:e6:90:d4:e2:e0:45:d5:f3:
84:ff:15:47:d0:5f:62:5d:e9:62:60:ca:99:6a:a8:
a3:db:2b:06:d8:63:82:32:69:51:54:c2:3f:1e:43:
4f:85:d1:83:d8:27:74:f8:e3:ae:5f:6a:12:f5:a0:
75:d6:ad:04:44:04:c1:1d:97:f5:1c:18:5f:63:d0:
2f:c4:05:cb:bf:2f:57:05:f6:6b:fc:40:23:8c:0e:
20:bd:ff:e7:fe:0c:b2:ee:86:4e:40:62:f9:58:d3:
23:38:c0:84:ec:1e:16:b6:7c:e2:c2:c2:01:66:ba:
5d:3a:e1:2d:a5:57:4e:3a:e6:28:71:ba:5b:3c:d6:
c6:b5:a7:f0:35:ca:97:73:f4:0a:d5:03:96:42:85:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:6D:4F:9E:18:39:01:12:0D:5D:99:92:30:5C:34:F2:DD:0F:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1fe7bc0-d467-3fa0-871f-fa6c85b8bd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.119.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:db:7b:58:1d:85:4e:b4:48:cf:31:12:eb:c3:ef:a1:76:08:
05:06:4d:0f:83:1d:6c:74:71:5e:3b:5b:ab:63:ed:93:79:58:
36:76:4b:d8:c0:4d:61:cf:1d:65:f7:d4:25:e3:bf:07:96:f9:
78:bb:7e:c0:e5:44:02:37:5f:bd:f9:7f:bc:0e:06:8f:52:76:
aa:49:89:39:ac:11:84:11:29:b8:e6:7e:c8:70:ab:b5:44:55:
39:53:ec:ad:5f:13:fd:f2:53:5a:da:db:81:92:b2:c7:7e:d6:
48:7d:04:21:65:23:9c:2f:e9:0a:6b:05:0d:72:ac:51:bd:f9:
8c:a6:30:87:a4:29:ab:05:32:fd:f5:6a:6c:01:a9:98:9f:2b:
f9:41:44:ed:7a:03:f7:17:b1:42:a3:96:9f:22:1f:2d:76:fd:
d4:f9:2a:7d:dc:4b:8e:ac:16:2a:fa:27:f5:23:98:81:b8:0f:
ba:1a:6a:93:47:ee:0b:83:9f:00:c1:29:86:4f:74:b1:0d:a4:
e7:ce:97:64:18:91:d8:97:d2:cd:ab:a9:bb:2c:80:19:1b:23:
3d:db:d8:13:a9:f6:99:a6:3c:54:7d:33:43:17:97:da:27:26:
34:c8:25:96:7d:98:67:3f:14:c8:db:e6:f6:0b:35:f7:1a:ba:
af:ea:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:34 2025 by rpki-client