Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b82305-6378-37d0-b95e-0de990b2bf8b.roa
File: f8b82305-6378-37d0-b95e-0de990b2bf8b.roa (raw, json)
Hash identifier: oFXlKcwCypbHfMxWrYbeYKsoknuhtE0pLLDs/75XdRE=
Subject key identifier: 82:BC:05:6E:11:22:48:F6:34:13:53:4A:0B:66:27:A0:7E:0A:E3:82
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AFFDB0008124199A9480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b82305-6378-37d0-b95e-0de990b2bf8b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.102.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:af:fd:b0:00:81:24:19:9a:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=cd773f51-608f-46d7-8a41-9311d565552f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:76:2b:5e:a0:8b:8c:9e:1a:97:67:f6:1d:
d6:e8:d7:c9:fc:75:19:fe:b8:fb:0d:a1:08:3d:c0:
b6:d1:8b:ce:8f:f6:fb:3e:11:89:d7:ac:1d:e0:ec:
39:d0:b2:4f:95:53:e4:3f:0b:89:73:23:59:11:d3:
e3:b2:9f:f1:e3:36:c5:94:d3:84:dc:7e:ae:99:6a:
cb:51:63:6d:5b:ab:be:ea:d9:18:5c:1e:e4:67:8c:
15:b5:a9:f5:de:9f:58:87:99:26:9b:4f:99:39:48:
37:d4:0b:2d:7f:2d:70:2d:5c:a7:7d:f3:97:3f:13:
78:e0:92:96:5e:cd:f2:f0:3b:8f:1c:fa:94:d0:f0:
ef:7f:ad:5b:a3:fb:71:9a:b7:6f:1c:33:7f:0b:f3:
f5:8b:ba:4e:7d:f7:3f:14:bb:34:94:70:f0:cf:ae:
76:51:fa:06:95:d3:48:24:44:e6:d6:9e:a2:ab:c3:
77:77:e7:ee:c9:7a:9b:77:e5:03:f6:26:bd:c7:11:
8c:d3:4b:f1:16:13:5c:7d:b7:08:20:7f:f9:a0:03:
c0:06:23:d0:6e:c4:ec:72:2f:8c:3f:ad:a4:c6:c8:
a7:53:d2:df:22:a0:e6:05:3d:b3:71:20:46:f9:eb:
e8:8b:34:bf:fc:02:1c:6c:6c:f1:bd:f1:45:24:d2:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BC:05:6E:11:22:48:F6:34:13:53:4A:0B:66:27:A0:7E:0A:E3:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b82305-6378-37d0-b95e-0de990b2bf8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.102.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:70:be:fa:60:26:bf:b2:43:4b:0e:2b:3f:48:8d:94:39:1b:
c6:fb:15:7f:c9:1d:c4:f5:37:fe:bb:45:13:6d:4a:de:af:ac:
1e:93:b9:a6:f3:ef:44:2b:df:a9:1b:28:46:a6:09:c7:78:d6:
44:bf:01:77:7c:17:b2:73:9e:a0:c3:0e:7e:b7:44:5d:6d:0e:
97:e4:2f:a0:55:54:e2:18:5a:c1:a1:2a:dc:33:82:4f:79:19:
e4:9e:6f:46:44:d3:4a:f2:41:16:12:bd:ed:7a:ea:05:f3:44:
87:0e:79:c6:20:28:62:ed:1b:36:c6:d8:35:b5:f0:3a:0e:48:
27:34:8d:92:c2:b3:ee:66:18:17:82:4c:c6:87:a5:25:86:6f:
96:c7:f0:7c:29:91:09:ec:f5:f1:a0:fd:84:ee:25:43:0a:f8:
19:e1:a4:29:e9:72:86:ff:30:6c:61:8f:80:7f:1d:29:66:bb:
79:03:5a:e1:9e:32:94:7b:37:b7:65:19:ed:86:8e:15:aa:12:
8b:aa:c6:12:cd:7a:7c:9f:b2:a6:c0:81:85:a3:5e:03:67:13:
17:77:5b:10:60:a2:ee:91:1a:bc:67:d9:3f:05:89:07:9e:50:
21:45:8f:ab:e2:0e:96:a4:3f:92:81:35:71:ac:e2:a2:24:cc:
51:f8:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:19 2025 by rpki-client