Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f233beec-318f-31ee-96e6-495dd9b2c61c.roa
File: f233beec-318f-31ee-96e6-495dd9b2c61c.roa (raw, json)
Hash identifier: n+d0TrKuVKW02pm2OIAOIv0nybnVljPa5xJhcObgWDg=
Subject key identifier: B5:53:A4:B8:0D:3C:4F:44:4E:7B:C0:FE:C0:31:3F:D9:CD:C4:BA:AD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A0651105C937869209C600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f233beec-318f-31ee-96e6-495dd9b2c61c.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.115.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:65:11:05:c9:37:86:92:09:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=3f38379f-24bb-4ad9-98c1-adbe0de7b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:87:75:63:3f:76:df:fe:31:e6:1c:8c:3f:
cd:fc:17:59:a6:9e:23:eb:bb:d1:83:7c:14:a3:70:
bf:32:12:63:59:01:5d:18:a2:30:2f:25:62:56:c2:
82:bd:71:9b:91:28:1a:68:49:05:06:32:65:5d:10:
d7:bf:03:8c:c4:3d:a6:51:ce:85:dd:ba:1e:33:d6:
f5:71:7f:89:04:d6:ca:0e:90:3f:dc:16:f7:99:3b:
15:72:52:f7:65:cc:26:1c:4c:4e:c5:d1:0f:6f:57:
6d:f0:bf:50:53:c1:03:9b:bd:ca:25:09:15:17:1c:
2d:3f:f1:bb:c1:45:b0:40:55:01:a1:0f:a8:e9:5a:
a5:e6:90:7b:65:58:f2:86:bf:cd:45:2e:9c:c8:c2:
8f:72:8d:a9:57:88:ab:55:69:3c:ef:1c:41:0c:df:
36:7b:8f:18:a5:ae:f5:50:fb:33:aa:8b:15:5b:f3:
a9:2b:76:24:53:15:04:7b:c2:25:ea:1d:fd:eb:95:
96:55:16:ab:0a:91:cc:b5:08:75:47:82:35:fd:6c:
70:be:cd:62:b1:ad:94:10:7b:69:1d:a6:29:16:05:
ad:14:7c:d3:c0:45:89:d1:3c:95:1a:59:33:65:fb:
11:99:b0:f7:af:df:4f:1e:aa:97:4f:7f:bb:a0:bb:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:A4:B8:0D:3C:4F:44:4E:7B:C0:FE:C0:31:3F:D9:CD:C4:BA:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f233beec-318f-31ee-96e6-495dd9b2c61c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.115.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:b0:ad:65:a9:81:15:ab:e8:63:9c:69:3e:cf:2b:46:4d:d2:
91:89:3f:ea:f6:fe:14:69:44:55:dd:ac:db:2d:72:18:f0:51:
bd:29:80:23:17:ce:2e:bd:be:ed:9a:7e:25:9f:4d:1d:40:27:
98:5c:51:e0:ed:80:9f:e0:dc:03:f9:3b:8d:e3:d1:0a:29:06:
85:2d:69:a7:94:59:15:bb:b6:00:fb:4d:6f:22:6a:e1:fd:d3:
a3:73:63:ca:c3:4e:4f:74:4c:0e:22:d3:a1:fe:39:55:d3:2a:
c8:b3:0f:fb:21:5f:20:05:9e:83:7a:16:b6:d0:d3:ae:f1:2c:
56:8d:9b:1f:76:0e:30:ba:48:68:a5:09:53:0b:91:3c:4e:83:
27:81:b8:ea:97:33:cf:3d:27:80:a3:86:4f:65:74:d9:f6:cf:
d0:a9:a0:d5:f7:f7:eb:98:31:f8:31:8a:09:0c:f6:6b:be:3f:
58:fd:e9:1e:7c:39:d9:fb:2d:0a:88:60:0a:53:f5:f3:b5:ff:
01:28:51:1f:db:b0:6b:47:2c:39:2e:ae:49:03:44:55:40:8e:
cb:b9:44:aa:d5:58:28:7d:d8:a0:e5:c2:09:12:6d:70:8f:01:
a5:14:c6:c4:10:92:52:c7:a7:67:38:b8:1a:e1:13:d2:d2:1d:
d2:97:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:30 2025 by rpki-client